Defencewall, Safespace or Geswall?

Discussion in 'other anti-malware software' started by ako, May 7, 2008.

Thread Status:
Not open for further replies.
  1. ako

    ako Registered Member

    Joined:
    Nov 16, 2006
    Posts:
    627
    My licence for DW will soon expire. What should I do? Continue using DW, or switch to SS or GW? Opinions (tell why if you can) please!
     
  2. Makav3l1

    Makav3l1 Registered Member

    Joined:
    Nov 26, 2007
    Posts:
    241
    I like SafeSpace as it's passed most of the tests I have seen independent people run here, including ones where GesWall didn't. It also has a free version and I appreciate free solutions. Give it a try, if you don't like it I would say buy DefenseWall again. Also if you aren't using DefenseWall you should look into a hips program, I recommend Threatfire as a free solution.
     
  3. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    DefenseWall is a HIPS ;), but ThreatFire is a friendly/easy application

    From the paid I prefer DefenseWall, from the free I prefer SafeSpace. So I fully agree with Makav. You might consider this setup https://www.wilderssecurity.com/showthread.php?t=207773 in combination with SafeSpace.

    Comodo as FW, SafeSpace as sandbox and TF as behavior blocker which also checks for known malware at intrusion. You can use a free scanner before making backups (e.g. Dr Web and PrevX scanner)
     
    Last edited: May 7, 2008
  4. ErikAlbert

    ErikAlbert Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    9,455
    I extended my license of DW, because DW is ideal in a frozen system partition and doesn't require regular updatings, just like Anti-Executable. I call them evergreens.
    I don't need security softwares to remove malware, my frozen system partition has a detection rate of 100% and beats any existing scanner.

    But I need security softwares to stop the execution of malware as much as possible and DW+AE do that for me.
    When both fail, it's not a disaster, because my frozen system partition will take care of it.

    DW also protects my data partition, while I'm on the internet : no reading, no writing, no stealing. That is a very strong protection.
     
  5. Makav3l1

    Makav3l1 Registered Member

    Joined:
    Nov 26, 2007
    Posts:
    241
    I know that DefenseWall is a hips program. I just said that if he decided to switch it out for SafeSpace, he would have to look into a hips program to make up for the loss of DefenseWall.
     
  6. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Okay, sorry understand
     
  7. ako

    ako Registered Member

    Joined:
    Nov 16, 2006
    Posts:
    627
    What hips features SS is lacking that DW has?
     
  8. Makav3l1

    Makav3l1 Registered Member

    Joined:
    Nov 26, 2007
    Posts:
    241
    To my understanding SafeSpace is a sandboxing program not a hips program. That being said, most of them?
     
  9. LoneWolf

    LoneWolf Registered Member

    Joined:
    Jan 2, 2006
    Posts:
    3,408
    Which tests might that be? Link?
     
  10. ako

    ako Registered Member

    Joined:
    Nov 16, 2006
    Posts:
    627
    DW is a kind of sandbox too.
     
  11. CogitoErgoSum

    CogitoErgoSum Registered Member

    Joined:
    Aug 22, 2005
    Posts:
    641
    Location:
    Cerritos, California
    Hello ako,

    While I am more than just a little biased, you should renew your license to DW. If you have not yet done so, please take a look at the following DW topic below.(*Note: Post #'s 3, 5, 7, 10, 18, 22, 25 and 28 may be of interest to you.)

    http://gladiator-antivirus.com/forum/index.php?showtopic=71660

    Additionally, I would like to mention Ilya's tireless efforts in providing excellent and timely customer service which includes resolving conflicts and closing security holes(which, fortunately, are a rarity) and commitment to the continuous refinement of DW. This and much more is worth the price of admission. Hope this helps.


    Peace & Gratitude,

    CogitoErgoSum
     
    Last edited: May 7, 2008
  12. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Yes but most sandboxes are HIPS

    Pure policy = DefenseWall (with rollback on file and registry)

    Policy and some virtualisation (redirect option) = GeSWall

    Visualisation and some Policy containment = SafeSpace (can also be set to virtualise a partition which makes it a competitor of Returnil, PowerShadow)

    Virtialisation = SandBoxie
     
  13. Threedog

    Threedog Registered Member

    Joined:
    Mar 20, 2005
    Posts:
    1,125
    Location:
    Nova Scotia, Canada
    Defencewall all the way. :thumb:
     
  14. Wake2

    Wake2 Registered Member

    Joined:
    Apr 30, 2005
    Posts:
    205
    Having trialed all of the programs mentioned I would say DefenseWall because it works.

    Wake
     
  15. n8chavez

    n8chavez Registered Member

    Joined:
    Jul 19, 2003
    Posts:
    2,302
    Location:
    Location Unknown
    I might be wrong here, but I don't think licences for DW expire. The quote below is from the DW site.

    Support, and updates expire, yes, but not the actual program. I recommend you continue to use DefenseWall is you want too and that is what you are used to. Otherwise, I suggest Sandboxie. I have not been disappointed with it.
     
  16. Makav3l1

    Makav3l1 Registered Member

    Joined:
    Nov 26, 2007
    Posts:
    241
    I am not a professional but, I have used many hips programs and SafeSpace does not look like it was made for that purpose. I have not tried DefenseWall but I have read that it is a hips program with sandboxing incorporated. That is why when the OP said that he was thinking of getting rid of it and I suggested SafeSpace, I also felt that he should run a stand alone hips program, like threatfire, to compensate for the hips protection that DefenseWall would no longer provide him. If that was confusing, or I am misinformed, then I apologize.
     
  17. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    I understand you after the explanation.


    DefenseWall has total untrusted file control. Here is how I interpretate it,

    SafeSpace marks downloaded files (tracked files) of read only folders. The good side of this is that these files are always launched within sandbox (and can do no harm). The down side is that when you download an e-mail attachement in Word, you have to open Word within the Virtualisation layer (otherwise it can not access this file). Files Downloaded in full control directories are not tracked by SafeSapce. Also when you purchase a music/media file you have to make sure the DRM is stored, otherwise you will loose your playing rights.

    DefenseWall always remembers the trusted/untrusted status of downloaded files no matter whether it is downloaed in a normal (the default), secured, excluded or download area. Downloading or buying music files is a no-brainer because the Digital Rights are stored and accessible to all programs.

    To bridge this gap (using untrusted read only folder files outside the sandbox and having full control unprotected files) you advised ThreatFire
     
  18. ako

    ako Registered Member

    Joined:
    Nov 16, 2006
    Posts:
    627
    I prefer policy-based sandbox over "virtual sandbox". It makes life easier. You gave above some reasons for it. So DW seems more right to me. (I installed SS in VM to try it, though.)
     
  19. ako

    ako Registered Member

    Joined:
    Nov 16, 2006
    Posts:
    627

    A lot of interesting stuff here! Thanks!
     
  20. CogitoErgoSum

    CogitoErgoSum Registered Member

    Joined:
    Aug 22, 2005
    Posts:
    641
    Location:
    Cerritos, California
    Hello ako,

    You are very welcome. Just doing my modest part to help a fellow DW user.


    Peace & Gratitude,

    CogitoErgoSum
     
  21. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Well in this case not: Tidyup (SafeSpace) also provides excellent support. I would rate them on par.
     
  22. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    I have to say: DW has the best support, without any doubts.
     
  23. ako

    ako Registered Member

    Joined:
    Nov 16, 2006
    Posts:
    627
    To those who are interested: After some trialling of SS and GW I decided in favour of DW and renewed my licence.

    I warmly recommend DefenceWall. It is very strong but still very convenient to use. :thumb:
     
  24. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Add this for resource protection (except for the ThreatFire entty when you don't have it on board) of system, see pic. It is quiet extra user hive regsitry protection

    https://www.wilderssecurity.com/attachment.php?attachmentid=200242&d=1211995265


    With this extra resource protection, you practically have Tony's Klein Regsitry protection implemented (untrusted programs are allowed to change HKCU hive), this reduces worms risk to a mimimum.

    Note with a \ at the end is the complete key, without a value protected.

    Another good idea is to add the Outlook express directories (search for *.wab and *.dbx), click on msimn.exe click on "Add new file, folder or registry" bar/button, type/paste the directory(ies) and ckick OK. No other untrusted program can mess with your address book or e-mails.

    Regards Kees
     
    Last edited: May 29, 2008
  25. n8chavez

    n8chavez Registered Member

    Joined:
    Jul 19, 2003
    Posts:
    2,302
    Location:
    Location Unknown
    I'd say that both Terabytes and WinPatrol give DefenseWall a run for its money.
     
Loading...
Thread Status:
Not open for further replies.