Interactive / HIPS fiewall alternative(s)?

Discussion in 'other firewalls' started by IRONY, Jan 4, 2021.

  1. IRONY

    IRONY Registered Member

    Joined:
    May 29, 2013
    Posts:
    40
    I'm currently using WFC (Binisoft) now Malwarebyes, but it is lacking a few features. Features such as an advanced interactive menu which allows the user to allow or block an application for a period of time and customize the rule upon notification, HIPS protection, and true boot protection like OSS.

    I have noticed that WFC has allowed a few applications pass through and connect to the internet without notification. Application firewalls that I have used in the past were OSS, Eset, and Sygate and on MAC LittleSnitch which satisfied those requirements. Eset is not a viable alternative due to the fact they DO have a backdoor that they use... different discussion entirely.
     
  2. tipo

    tipo Registered Member

    Joined:
    Dec 29, 2008
    Posts:
    419
    Location:
    romania
    you could try:
    free firewall- https://www.evorim.com/download/freefirewall-setup.exe
    comodo free firewall- https://download.comodo.com/cis/download/installs/1000/partners/cav_installer_138430010_1a.exe?af=7639
    zonealarm free firewall- https://download.zonealarm.com/bin/free/1001_za/zafwSetupWeb_158_145_18590.exe
    these are the ones I tried and liked.
     
    Last edited by a moderator: Jan 4, 2021
  3. IRONY

    IRONY Registered Member

    Joined:
    May 29, 2013
    Posts:
    40
    Comodo and zonealarm are junk. Zonealarm especially. Neither provide the features as the ones I mentioned which are no longer in development.
     
  4. imuade

    imuade Registered Member

    Joined:
    Aug 4, 2016
    Posts:
    751
    Location:
    Italy
    Not sure if you can find everything in one single program...

    FW+HIPS
    https://www.spyshelter.com/spyshelter-free/
    https://www.wilderssecurity.com/threads/spyshelter-12.422366/page-7
    They have recently resumed a free version

    HIPS
    https://rehips.com/en/
    https://www.wilderssecurity.com/threads/rehips.364248/page-37#post-2959337
    It's a very good HIPS and sandbox (thus the latter is free only up to 10 istances of the same process).

    FW with notifications

    http://www.sphinx-soft.com/Vista/index.html

    https://www.henrypp.org/product/simplewall
     
    Last edited: Jan 4, 2021
  5. IRONY

    IRONY Registered Member

    Joined:
    May 29, 2013
    Posts:
    40

    I looked at Spyshelter years ago and it's nothing like a true software firewall like Outpost.
     
  6. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    13,737
    Location:
    The Netherlands
    This is correct, it isn't a true firewall, it's more of an anti-logger with the ability to control outbound control.

    I used to like ZoneAlarm, but they ruined it when they changed the GUI years ago and it's too heavy compared with other solutions.
     
  7. Chuck57

    Chuck57 Registered Member

    Joined:
    Sep 2, 2002
    Posts:
    1,677
    Location:
    New Mexico, USA
    ReHIPS is very good, once you spend time figuring it out. It's still at version 2.4 with no evidence of a newer version coming out. I wonder if they're still active.
     
  8. lucd

    lucd Registered Member

    Joined:
    Jan 30, 2018
    Posts:
    469
    Location:
    Island of Woman
    spy shelter free is exactly what you might need
     
  9. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,954
    Location:
    Poland - Cracow
    I think the same :thumb:
     
  10. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,002
    Location:
    Romania
    From WFC notification dialog you can define temporary rules that will allow/block programs for a certain amount of time.
    I wonder how this would be even possible since WFC does not filter any network traffic. Maybe Windows Firewall allowed a few applications, but from my experience, you can use Windows Firewall to block any inbound and outbound connection. However, this requires a little work from the user side.
     
  11. LoneWolf

    LoneWolf Registered Member

    Joined:
    Jan 2, 2006
    Posts:
    3,669
    Supposedly development will resume this year.
    I asked on their forums recently.
     
  12. Chuck57

    Chuck57 Registered Member

    Joined:
    Sep 2, 2002
    Posts:
    1,677
    Location:
    New Mexico, USA
    I look forward to it. For me, ReHIPS was a challenge to learn, and I'm not sure I ever did, but I liked it and still have it on an older, seldom used laptop.
     
  13. monkeylove

    monkeylove Registered Member

    Joined:
    Dec 10, 2013
    Posts:
    106
    I use WFC in medium filtering mode. I think it detects almost everything, including Smartscreen, Runtime Broker, and Taskhostw. For any temporary inbounds, I usually choose one of the options, from 5 to 30 min (it shows up in the popup notification). For outbounds, I think the only option is to allow until the next firewall restart.

    I also use Firewall App Blocker, which shows what WFC blocked or allowed, to edit any entries (block or allow, or delete) in case I change my mind.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.