DefenseWall - FW, or no FW?

Firewall of DW - worth it, or not so much?


Gimme your two cents... and MAYBE I will pay them back (snap!).

 

In the beta phase of DW 3, I have tried different FW-variants for Ilya (about 7 when I recall correctly). The one he ultimately selected, performed simular to the default Windows firewall on XP and Vista, in terms of performance.

On XP I have tested the full Matousec set (at that time, when OA and Comodo shared first place) and it scored a 100% also.

So practically no performance loss, decent protection and a build in white list with seamless integration to the HIPS policy protection.

Can't think of a reason why not to use the FW when you have the DW full package.

My mother (born in 1933) is now using DW as only defense (with a weekly scan of HMP). On her PC I have used the Wireless connection profile (her router is also a inbound firewall). She receives a lot of mail with powerpoint presentations and sometimes exe-like movies send to her by her friends. Every two month or so she tells me something strange has happened (DW blocking something). I check the log and sometimes use the roll back feature of DW.

When I was a hard core DW user, I had build up a set of own protection rules (basically focussed on all HKCU registry auto run entries and internet connection registry entries plus an extra seperation of mail directories from the other untrusted sources). Since 2.7 or so, most of these extra rules were implemented in the default version (after Ilya made sure they caused no confusing pop-ups). For me as a security hobbyist, version 3.0 was also the reason to give DW to my mother and start experimenting with the build in Windows protection, since tweaking DW made no sense (I could not tweak it any further, it was to good).


Regards Kees

 

That's right, I couldn't agree more with Kees. I think DefenseWall is at the moment the most user-friendly security application, for grannies and geeks alike. Default settings are optimal, tweaking might be dangerous in some cases and plainly- unnecessary. Firewall is not a typical one (from filtering packets etc. point of view), the whole concept is to virtualize and sandbox, that' s why you might consider DefenseWall with firewall as a proper internet security application of its kind. Firewall is only to ensure that what's untrusted( restricted) can only communicate with outside world in untrusted( restricted) environment- basically speaking. I think this why DefenseWall firewall is not even registered in windows security center, because it can easily coexist with any other "traditional" firewall installed on your computer. For that reason I wouldn't recommend turning off any other firewalls installed on your computer ( including Windows firewall obviously), though I don't know if it is a developer recommendation as well. I really can't see any arguments against DefenseWall firewall.

 

The one piece of software thats worth it's weight in gold period.

 

Sandboxie and Defense+ are like... the two best security programs =p

 

Sure mate, whatever suits your needs. I just find DefenseWall more... comprehensive.It protects whole system with one simple, yet efficient way.Sandboxie is more browser oriented, though with few adjustments the same effective.

 

Sandboxie is more for specifically fine tuning what a program can and can not do. DefenseWall is a more overall system-wide restrictive environment.

 

Well, let's say we've reached an agreement

 

Thank you for the responses, this thread can be closed if everyone agrees.

 

Yep. I agree.

 

DW is simply best. The only problem is, that I can use it only on my 32bit laptop, not on my 64bit desktop

 

There will never be a x64 version of DW? some other vendors seems that have been able to "bypass" the patch guard limitations why don't try the same with DW?

In a few years the x64 systems will get practically the 100% of the market, pe. since 2 or 3 years ago every laptop being sell in my country comes with x64 licenses.

Noways almost every pc has more than 3 gb of RAM so nobody would want to install a x32 SO due to its limitations

Windows 8 will be the last widows with x64 support


http://lenzfire.com/2011/07/windows-9-details-revealed-successor-of-windows-8-90356/
http://arstechnica.com/microsoft/ne...g-128-bit-versions-of-windows-8-windows-9.ars

 

If I find a way to provide same protection levels on both platforms, there will be x64 version of DW.

 

Doesn't seem like anyone's completely bypassed the patch guard, just partially.

I still think that it's enough...

And all personal computers at this point seem to be sold with 64bit except for some older netbooks.

I think you meant "Windows 8 will be the last windows with x86 support" and I don't believe it.

edit: Ilya, is that ever going to be possible? I don't see how you can completely bypass patch guard and if you do it'll break any time there's a patch guard update.

 

Is there a possibility to work with Microsoft ?
Antivirus' editors aren't blocked by patchguard no ?

 

If there was a possibility I think Ilya would have cooperated with M$ from day one.

 

Isn't it like... certain signed drivers can bypass it no problem but you'd have to pay. IDK I can't remember lol

 

He could just send an email to MS and ask if they would like to incorporate DW into Win 8

 

Haha

 

I wish they would... if Windows does what they plan to do and create a Windows store they could consider that their whitelist and all other applications would be "untrusted" and restricted.

 

... in other words more like what Apple does.

 

Is that what apple does? I didn't think so.

 

lol

 

My Norton Internet Security is coming up to renewal it runs fine with DefenseWall v 3.15, I connect via ADSL Modem so no router, what I need to know is If I don't renew Norton and substitute a free antivirus do I also need to install a free firewall, I scan with Hitman Pro on startup and browse with Sandboxie.

I guess my query is would the firewall element of DefenseWall be adequate protection in my circumstances without installing an additional firewall.

I hope someone can advise without getting technical

 

Hello, Ilya. I'm sure you will find a way...