defensewall - possible set and forget for girlfriend's computer?

hey guys - i recently got the free 1 year license for defensewall (thank you softsphere).

i'm setting up my girl's system, and i wondered if defensewall can be configured basically just to harden the browser, as a type of semi-set it and forget it type of thing? i noticed that once it was installed, it kept running any installer as untrusted - that wont work once i turn the system back over to my girlfriend because she doesnt know enough about computers to properly deal with these type things - but it would be nice to have firefox run as untrusted, that would probably keep her out of alot of trouble. i have avira free on the system, im just looking for a secondary defense layer. im out of town alot and cant run to her place to fix/tweak her computer everyday, so i'd like to set it as somewhat self-sufficient.

thoughts are appreciated!

 

DefenseWall is set out the box and forget it is ready for your girlfriend

 

is it? after i installed it i installed firefox and defensewall ran the installer as untrusted. what happens when 2 weeks from now she gets a firefox update?

 

i ran the installer from a usb drive, it mayve been that the option was selected "run untrusted anything from a usb source" i'll have to check that

 

you can always check to see if the usb is configure too for extra protection

 

Very bad idea unless you give her a talk to explain how to use it .

 

Forget it. Defensewall is not "hard", but it isn't set and forget either. Download the free version of Sandboxie, or, if you're in a giving mood, pay for the "pro" version of it. You don't even have to screw with any settings to harden it, tell her to right-click Firefox and select "run sandboxed" (it will automatically force IE to run sandboxed) and away she goes.

When she's done surfing, show her how to right-click the Sandboxie icon in the system tray to delete everything except files she wishes to save, and she'll stay safe as can be. If she needs to update any Firefox extensions or the browser itself, simply run it as normal for that instance and then go back to using it sandboxed.

 

Avira free would be enough for her.

also use a free antispyware like adaware free

 

What is it with FireFox that people prefer it over better designed browser as Opera or Iron? I once have gotten into a detailed discussion about this, so I won't go into that anymore. From Vista and onwards IE8 in protected mode is a hassle free and safe browser (a quality phising filter, smartscreen and cross site scripting protection which browser has got that out of the box?).

On top of that when you run DefenseWall IE8 is secured and sealed. It does not matter whether you use FF, Opera, Chrome/Iron or IE8 with DefenseWall.

Choose for IE8 it will update with Windows without problems. My mother of 76 understands how DefenseWall works, my mother in law also uses it (and yes my wife also).

My mother in law only e-mails and plays on-line bridge, my mother likes to play mind games and she downloads a lot of games.

Wife and mother in law
a) right click an installer and set it to trusted. (which they never do by the way, most women use a computer and are not playing with it, they are not interested in what cpu it has got, what software etc, they look upon as purely functional, not a toy)

My mother
a) right click and scan with hitman Pro
b) right click and set it to trusted.

Regards Kees

Note all PC's have Avast in Dutch with file shield only to check at writes.

 

With V3, installing new software as trusted is even simpler.

 

Ilya,

Small change request. I would like a seperate log for programs set to trusted. Please list location and file name, plus date. I do not mind when they were installed, because I know that 9.999 out of 10.000 times it will be immediately after.

When I combine this info with freeware programs like Comodo Time Machine or Paragon Backup and Recovery Free, it is much easier for me to backtrack changes and restore to a previous image after a 'shoot in the foot' incident for PC's which I am the sysadmin.

Thanks

 

Separate log in the registry or a separate log entries with the "Events log" sheet?

 

OT but care needed in using CTM; at least on some systems.

 

I would opt for a seperate log, so it is not cluttered with other (daily operating) information. I do not mind where you store it, as long as it is possible to view it with a few clicks.

When you stream line the GUI in release 3.1 (grouping simular items in a more logical way), you can also choose for a security status report in which you would include it (for instance where you explicitely tell that USB/network drives are auto protected, which directories are excluded from protection, which directories are marked as download, whether auto protect downloads is active, auto allow whitelist is active, etc), which applications are run untrusted, which applications are allowed outbound, in stead of a screen you can make it a pdf with quick link references to the help file on where to change this in the GUI).
This is a way to provide a helicopter view of all the settings.

Regards Kees

 

Yeah I know, using paragon image backups

 

Well for the record I agree. It just has to be simple, like with DW, when you want to install, trust it, or for my mom, check it first with 5 AV engines of Hitman Pro to get a second opinion (besides auto check of Avast). Such a simple instruction can be learned by everyone. Besides that most functional users hardly install something (my wife only installed a photo book application for digital printing of a service provider, my mther in law only skype to phone cheaply to Australia, I guess my mother is an exception = installing a lot of mind/memory/puzzle games)

Regards Kees

 

kees, i actually myself use opera almost exclusively and have for about ten years now, but i do keep firefox as a secondary browser for those few sites that don't work properly with opera. firefox has a slight edge on opera as regards ubiquitous compatibility, so in setting up my girlfriend's computer, i thought it might be better in the longhaul, to leave her with firefox.

i have told her to leave her computer on overnight on wednesday nights, as early thursday morning i have set avira to scan, then superantispyware to scan, and also a system file cleaner to scan, so early thursdays is when her computer will clean and maintain itself. i think this should work out fairly well.

i still havent decided on whether to put defensewall or sandboxie on her system, it may be easier for her to remember how to click "recover to desktop" for files downloaded through a sandboxed browser, than to try and explain the workings of defensewall - i better decide soon because she'll be here in a few hours to pick up her system, she's hounding me for it as she uses it both for her studies with nursing school and to make money with ebay on occasion

any other automated tasks you guys recommend instituting on the system, or any other measures i should set in place?

thanks to all for the replies and tips!

 

with sandboxie it is very risky to save or recover files to any folders,if this files are open/run they will no longer be sandbox,with defensewall if you saved any file type to any folder when you open them they are runing untrusted,for her defensewall is the safer way to go

 

Chrome_sturmen,

With DefenseWall you basically won't need an Anti Virus, you can basically trim down on complex scannning schedules. Also when two women in their seventies can remember INSTAL = Right click + Trust this file, it would be an insult to you girlfriend thinking it would be to complex for her..

The choice between Sandboxie and DefenseWall is simple, base it on user behaviour

a) when she buys music SBIE is not an option (complex digital rights recovery)

b) when she installs a lot of programs, choose Sandboxie, when she is on a fairly static set up choose DefenseWall. Reason is simple they provide the same protection while surfing and mailing, SBIE requires some attention when saving attachements and downloaded files (a restore), DefenseWall needs some attention (a trust) before installing software which requires Admin rights (the V3 will have a whitelist, so it is less of an issue). So what does she does more?: saving files/attachments or installing programs, make you choice.

When you let her browse with IE8, she does not has an issue with correct rendering of pages and she will have one of the best phising filters, a download check through smart screen and cross site scripting protection. Do your self a favour, have a look at the PC's of her girl friends. I would install the browser they have. The last thing you want to be characterised is as the geek friend, who puts on funny programs to save her from (imaginary) cyber criminals and threats


Just my 2 cents, good luck deciding

Regards Kees

 

well, and that's a wrap - i've just sent her off back home with her system - i decided in the end to put defensewall on the system, i checked it out awhile and it seemed fine - and firefox was running as untrusted. so with a hardened browser, and weekly scans with avira, her system should maintain itself - or so i would hope (for her sake),

much obliged to all for the input and advices!

chrome

 

........and a very lucky and happy girlfriend tonight

 

and thats not the lot, by the time i put a file manager on for her (directory opus), office, did basic tweaks,disabled useless services, themed the os for her, scheduled scanning for her,i guess it took me 10 hours of work ;( im always glad to help others with their computers, but at this point im glad to have her and her computer out of my house, and to spend some time with a beer and my guitar

 

yep, thats fine.

however, you should explain to her how to install programs and updates with it and i see no reason why anything would get past DW.

its a shame i use x64 now, because i miss DW in a way.

 

I run only Defensewall 3 and Sandboxie on my laptop, with Windows Vista firewall enabled because I haven't bothered turning it off. For routine Internet use, checking the too many forums on which I participate, I run Opera with just DefenseWall.

If I'm going to a site I don't often visit (presumed safe, no porn, gaming, Twitter or any of those social places), I engage Sandboxie for that added edge. I've learned that some 'safe' sites aren't always completely safe any more.

At this point in time, I view antivirus as an option rather than a necessity. It's probably wise to have but, with DefenseWall and Sandboxie, geswall, ShadowDefender or one of the others available, I don't think an AV is needed.