GlassWire

Discussion in 'other firewalls' started by Feandur, Aug 23, 2014.

  1. max2

    max2 Registered Member

    Joined:
    Sep 22, 2011
    Posts:
    362
    Is GlassWire worth it though ? As a firewall.
     
  2. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    12,126
    Location:
    The Netherlands
    It's not a standalone firewall, it controls the Win Firewall. And it gives you a bit more info about connection history, personally I don't really need it, but it can be handy sometimes. Here are some reviews:

    http://www.snapfiles.com/get/glasswire.html
     
  3. Circuit

    Circuit Registered Member

    Joined:
    Oct 7, 2014
    Posts:
    868
    Location:
    Land o fruits and nuts, and more crime.
    Pro version activated, and then they spam you to upgrade to elite, while the program is running.:mad:

    I can understand doing that in the free version but not in the over-priced "Pro version"

    Back on the shelf to collect dust.
     
  4. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    1,799
    Location:
    Romania
    Can you blame the greedy ones ? :mad::eek::confused:
     
  5. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    3,665
    Location:
    Under a bushel ...
    Sometimes I wonder if they are their own worst enemy, with this, and pricing decisions.

    That said, I was fortunate to pick up a good Elite offer, and it is a 'nice' soft.
     
  6. Circuit

    Circuit Registered Member

    Joined:
    Oct 7, 2014
    Posts:
    868
    Location:
    Land o fruits and nuts, and more crime.
  7. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    3,665
    Location:
    Under a bushel ...
    Saw that post, but I still don't know what outbound connections you are referring to other than those mentioned in post #272 (neither do others, see posts following yours, up to #286).
     
  8. Soft Life

    Soft Life Registered Member

    Joined:
    Aug 10, 2018
    Posts:
    81
    Location:
    United States
    You can make Glasswire block itself in the firewall section. I block it no issues. They even said if we wanted too no problem but you just won't get update notifications.
     
  9. Circuit

    Circuit Registered Member

    Joined:
    Oct 7, 2014
    Posts:
    868
    Location:
    Land o fruits and nuts, and more crime.
    I guess most people don't care about using a paid program and then getting spammed by an ad.
     
  10. Tinstaafl

    Tinstaafl Registered Member

    Joined:
    Jul 30, 2015
    Posts:
    756
    Location:
    USA
    I have the Pro version and I am not seeing this. Care to share a screen shot?
     
  11. Tinstaafl

    Tinstaafl Registered Member

    Joined:
    Jul 30, 2015
    Posts:
    756
    Location:
    USA
  12. RioHN

    RioHN Registered Member

    Joined:
    Mar 14, 2017
    Posts:
    68
    Location:
    Here
    (using the free version)
    I see outbound attempts to glasswire.com, update.glasswire.com and activate.glasswire.com.

    On installing
    [19/01/2019] [12:07:27] Denied TCP 54.230.3.242 gwinstst.exe PID:4688
    [19/01/2019] [12:07:34] Denied TCP 35.168.155.58 gwctlsrv.exe PID:2948
    [19/01/2019] [12:07:35] Denied TCP 54.230.3.242 gwctlsrv.exe PID:2948
    [19/01/2019] [12:07:48] Denied TCP 54.230.3.111 gwinstst.exe PID:4688
    [19/01/2019] [12:07:56] Denied TCP 52.204.79.212 gwctlsrv.exe PID:2948
    [19/01/2019] [12:07:57] Denied TCP 54.230.3.111 gwctlsrv.exe PID:2948
    [19/01/2019] [12:08:09] Denied TCP 54.230.3.82 gwinstst.exe PID:4688
    [19/01/2019] [12:08:17] Denied TCP 54.230.3.82 gwctlsrv.exe PID:2948
    [19/01/2019] [12:08:30] Denied TCP 54.230.3.234 gwinstst.exe PID:4688
    [19/01/2019] [12:08:38] Denied TCP 54.230.3.234 gwctlsrv.exe PID:2948
    Restarting gw service
    [19/01/2019] [12:41:29] Denied TCP 52.204.79.212 gwctlsrv.exe PID:5736
    [19/01/2019] [12:41:50] Denied TCP 35.168.155.58 gwctlsrv.exe PID:5736
    Restarting gw service again
    [19/01/2019] [12:53:03] Denied TCP 35.168.155.58 gwctlsrv.exe PID:2656
    [19/01/2019] [12:53:25] Denied TCP 52.204.79.212 gwctlsrv.exe PID:2656

    glasswire.com
    54.230.3.242
    54.230.3.111
    54.230.3.82
    54.230.3.234

    update.glasswire.com
    35.168.155.58
    52.204.79.212

    activate.glasswire.com
    52.204.79.212
    35.168.155.58

    It's been running for over an hour now and I haven't seen any further outbound attempts, just the initial two on service start (presumably checking for update/license?). I'm not sure if further connections would follow if it was actually able to connect out, but if not it seems relatively quiet to me.

    Edit: Nevermind, just had further connection attempts to activate.glasswire.com without a service restart.
     
    Last edited: Jan 19, 2019
  13. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    3,665
    Location:
    Under a bushel ...
    Thanks for the info.
    Presumably (hopefully), the further attempted connects to activate.glasswire.com would be absent in the paid version.
     
  14. RioHN

    RioHN Registered Member

    Joined:
    Mar 14, 2017
    Posts:
    68
    Location:
    Here
    Not sure what happened the first time, but I'm now seeing outbound attempts every 30 minutes exactly.
    It's possible this is caused by me blocking gwctlsrv.exe from connecting out, causing glasswire to keep retrying every 30 minutes until it succeeds.
     
  15. Tinstaafl

    Tinstaafl Registered Member

    Joined:
    Jul 30, 2015
    Posts:
    756
    Location:
    USA
    On my daily GlassWire logs I see connections to "activate.glasswire.com" (IP "35.168.155.58" at Amazon Technologies), and "ghs-svc-https-c46.ghs-ssl.googlehosted.com". The second one is for the VirusTotal lookup service integrated with GlassWire. https://www.glasswire.com/host/74.125.34.46
     
  16. Surt

    Surt Registered Member

    Joined:
    Jan 23, 2019
    Posts:
    77
    Location:
    USA
    It's a competent mouse-click allow/block for connected applications listed in the GW GUI. Rules appear in Windows Firewall as {Glasswire.app.in_111} and app.out_ where in the rule Properties > Programs and Services > This program the app exe is shown. One can still create rules as I have, for example blocking "everything" in and out for my ancient no-WiFi smart HDTV and Blu-ray player.

    And it gives you tons of connection info, real time and history.

    The "worth it" is up to you, but consider when they are enabled in Settings, these GW features will alert to:

    Things monitor - devices joining or leaving
    First network activity - self explanatory
    System file monitor - changes to hosts and lmhosts
    Device list monitor - network device or driver added, changed or moved
    Application info monitor - changes to version, publisher, certificate or executable
    While you were away - "a brief summary of any significant network activity that occurred while the computer was idle"
    ARP Spoofing detection - self explanatory
    Proxy settings monitor - changes to settings
    DNS server settings monitor - changes to settings
    Internet access monitor - if internet connection was disconnected or reconnected
    Suspicious hosts monitor - self explanatory
    WiFi evil twin alert - suspicious WiFi connections

    You can also enable GW's Virus Total feature for a right-click on-demand scan of logged apps or "Automatically analyze all apps with network activity."
     
  17. Surt

    Surt Registered Member

    Joined:
    Jan 23, 2019
    Posts:
    77
    Location:
    USA
    I've been using GlassWire since 2014 starting with Free and worked the way up from a Basic lifetime purchase, $24.50, in 2016, and then Pro and Elite by way of nice upgrade offers via email, $25 and $20. The licensing remained at lifetime.

    Anyhow, I run GW on two Win7 and two Win10 systems.

    A quick check on one of each, going back a year, the only outbound logged in GW and my network logs is for the GlassWire Control Service (gwctlsrv.exe), once daily when I bring 'em out of hibernation. Up and down, kbs in the single digits.

    Never got any "spam."
     
  18. Surt

    Surt Registered Member

    Joined:
    Jan 23, 2019
    Posts:
    77
    Location:
    USA
    Do you get that if you uncheck the options in Settings > VirusTotal?
     
  19. Tinstaafl

    Tinstaafl Registered Member

    Joined:
    Jul 30, 2015
    Posts:
    756
    Location:
    USA
    Don't know. Never uncheck that option. It's a keeper!!! One of the best features in GlassWire, IMO.

    I'm a hardcore VirusTotal user, and I rarely let anything install or run on my computer that hasn't been run through VirusTotal first. GW scans any programs that auto update for me, so I don't need to bother manually checking the auto updates (AV's, Dropbox, browsers, etc.) every time they update. So that way I know that every process and application that accesses the net is clean. Peace of mind, pure and simple! :thumb:
     
    Last edited: Jan 27, 2019
  20. Surt

    Surt Registered Member

    Joined:
    Jan 23, 2019
    Posts:
    77
    Location:
    USA
    No arguments there!

    Since I'm not using it and don't get the VT connection, I answer my own question. Wish I could do that when I forgot why I walked to the other side of the house. o_O

    I'm good with VT and got me a public key to plug into HitmanPro when I used it a couple-three years ago.

    I don't use the feature full time in GW but did play with it for about a month when it was first introduced.

    And last year when I set up my second Win10 box, GW was the first thing installed and I ran it in "analyze all apps" mode during installs and first runs of a bunch of other apps. Needless to say, it got crazy busy.

    I was amazed at how fast, unobtrusive and stable it is.

    VT's API and GW's integration are both equally impressive.
     
  21. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    12,126
    Location:
    The Netherlands
    Yes good point, it does more than simply displaying network connection history, so good to mention. But it's way too expensive if you ask me.
     
  22. Tinstaafl

    Tinstaafl Registered Member

    Joined:
    Jul 30, 2015
    Posts:
    756
    Location:
    USA
    I agree that their current pricing structure is a bit extreme.

    Maybe GW will eventually figure out that it's easier to sell 100 @$1 items, than to sell 1 @$100 item. :argh:
     
  23. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    3,665
    Location:
    Under a bushel ...
    :thumb:

    I see there is a pop-up offering 25% off at the moment ...
     
  24. Tinstaafl

    Tinstaafl Registered Member

    Joined:
    Jul 30, 2015
    Posts:
    756
    Location:
    USA
    LOL! After the pop-up, I saw a message that 825 people claimed this discount today! Maybe that will encourage them to offer more specials!
     
  25. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    1,799
    Location:
    Romania
    Maybe 825 is just a random number, just for marketing purposes. They probably already have 1 million downloads a day and 7 billions users :argh:
     
    Last edited: Jan 28, 2019
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.