HIPS does not work.

Hear, Hear! I especially like the statement in Help:

"Changes to the HIPS settings should only be made by an experienced user."

While I think this means enabling or disabling HIPS, the descriptions of each mode are rather brief and maybe a FAQ or other documentation would be helpful to those who have _no_ experience with HIPS.

After getting a warming balloon about invalid rules after first installing ver 5, I switched HIPS to Interactive mode, which worked. Then I changed that to Learning mode, which also worked. Now, I have switched back to Automatic with rules, which works. No doubt it helps that there are actual rules in the setup, which were added via Interactive and Learning modes.

 

The way the filtering modes work is:
automatic: allow all
policy: block all
interactive: ask all.

The exception for all the filtering modes are:
1) rules you have in the rule editor
2)of course, pre-defined rules.

That is the order of evaluation. First rules, then the action of the current filtering mode.

 

So, is the following even remotely accurate with respect to "Automatic"?

If set to automatic, which "allows all", *and* there are no rules, then that would pretty much be the functional equivalent of disabling HIPS entirely (in the sense that "automatic" does virtually nothing unless rules exist).

 

As stated many times before there are internal predefined rules which protect you from threats specifically targeting your antivirus system.
This feature is very good and it saved me from unrecognized malware.

 

Hello,

Where can I read the pre-defined rules?

 

Afaik. They are hidden, and they are setup by the developers. The users can't access or modify them. And they will be improved overtime via module updates.