PG & Kerio HIPS

Discussion in 'ProcessGuard' started by Bob D, Mar 17, 2006.

Thread Status:
Not open for further replies.
  1. Bob D

    Bob D Registered Member

    Joined:
    Apr 18, 2005
    Posts:
    1,150
    Location:
    Mass., USA
    Kerio's (v 4.2.3) HIPS, NIPS, and App Blocking appear quite effectual, but are they redundant in lieu of my PG paid? Am I adding any protection, or would I be just as well off disabling Kerio's Intrusion Detection?
    Any thoughts?
     
  2. kampsk

    kampsk Registered Member

    Joined:
    Sep 6, 2005
    Posts:
    33
    A bit improper to ask a competetor whether their app. is better than the competetors? How are they working together? you might just have the best of both. :)
     
  3. Bob D

    Bob D Registered Member

    Joined:
    Apr 18, 2005
    Posts:
    1,150
    Location:
    Mass., USA
    I'm not asking whether Kerio is better.
    (Appdefend is a competitor, Kerio is a firewall - not a competitor).
    I bought a PG business license some time back.
    Subsequently installed Kerio w/ it's own HIPs.
    I was merely wondering whether additional HIPs in Kerio is totally redundant, or does it add any additional protection.
    ie.: am I better off disabling it's HIPs, thus reducing some of the program's bloat.
     
  4. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    It depends if you want fully granular and somewhat bloated application handling. Most of the time you will simply allow everything anyway, including execution by one program of another specific program - there are only rare cases where you could use it really effectively. Really paranoid users can either spend time configuring a complex setup in the HIPS, but can also take advantage of "Allow once" in PG. For a paranoid user, the occaisonal popup is no big deal.
     
  5. Bob D

    Bob D Registered Member

    Joined:
    Apr 18, 2005
    Posts:
    1,150
    Location:
    Mass., USA
    Understood.
    Thanx.
     
  6. gottadoit

    gottadoit Security Expert

    Joined:
    Jul 12, 2004
    Posts:
    601
    Location:
    Australia
    BoB D,
    One of the things I liked about kerio and its process execution handling was that it starts prior to logging in. This is quite different to ProcessGuard which starts after logging in

    The reason I say liked is because I stopped using Kerio a little while ago mostly because it was a little bloated for my liking, but that was mostly a firewall issue for me. A whole firewall to offer just pre-login application execution control seemed a little excessive....

    Maybe ProcessGuard will grow this feature in one of the future updates that have been proposed by DCS
     
Thread Status:
Not open for further replies.