What is AppGuard

Discussion in 'other anti-malware software' started by trjam, Jan 26, 2009.

Thread Status:
Not open for further replies.
  1. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,696
    Location:
    USA
    Thanks for fast response Eirik. Seems Blue Ridge Networks have good customer service. They are already getting in touch with me. Thanks!
     
  2. trjam

    trjam Registered Member

    Joined:
    Aug 18, 2006
    Posts:
    9,102
    Location:
    North Carolina USA
    working like a charm for me. Great job Eirik. Actually using it and nothing else.:)
     
  3. Trespasser

    Trespasser Registered Member

    Joined:
    Mar 1, 2005
    Posts:
    1,204
    Location:
    Virginia - Appalachian Mtns
    I, as well (plus SRP....of course). :).

    Eirik,
    What about the release date of the next EdgeGuard Solo? The reason I ask is because I have it running on my Dad and brother's computer so I am still interested in its development.

    Thanks again.

    Bob
     
  4. danny9

    danny9 Departed Friend

    Joined:
    Feb 18, 2004
    Posts:
    678
    Location:
    Clinton Twp. Mi
    Hi trjam.

    Nothing else?

    I know AppGuard is good but do you really feel it can replace everything? :D
     
  5. trjam

    trjam Registered Member

    Joined:
    Aug 18, 2006
    Posts:
    9,102
    Location:
    North Carolina USA
    actually I do. I have never thought you needed 10 apps to keep you safe. Guess time will tell.;)
     
  6. danny9

    danny9 Departed Friend

    Joined:
    Feb 18, 2004
    Posts:
    678
    Location:
    Clinton Twp. Mi
    Well I know you are not a novice and have been around for awhile.
    I don't think you would put yourself at risk needlessly.

    You're showing a high level of confidence in AppGuard and I think it's justified.
    Getting to like this program more and more. :cool:
     
  7. Eirik

    Eirik Registered Member

    Joined:
    Oct 6, 2008
    Posts:
    544
    Location:
    Chantilly, Virginia
    As proud as I am of AppGuard now and where it will be, it will never secure the internals of the software it guards. That design guideline is meant to keep the solution practical, even for novices and overworked enterprise IT administrators.

    Why do I bring this up? Web browsers! Their internal security is disturbing. That is why I recommend using two or more web browsers: one for sensitive, one for non-sensitive, and maybe another for anything in-between (e.g., web mail).

    With AppGuard guarding the software, including the web browsers, and multiple browsers to make up for their internal security flaws, one can use their PC confident that malware attacks will do them no harm.

    Cheers,

    Eirik
     
  8. MeFer

    MeFer Registered Member

    Joined:
    Dec 16, 2008
    Posts:
    89
    Now SBIE and AppGuard 1.1 working well but;
    after moving C:\Sandbox to D:\Sandbox.

    Thanks for tip given on another post.
     
  9. Criss

    Criss Registered Member

    Joined:
    Oct 3, 2008
    Posts:
    186
    Yea, having the same setup as u. Light and strong protection. :D

    Criss.
     
  10. wideglide36

    wideglide36 Registered Member

    Joined:
    Oct 3, 2004
    Posts:
    207
    Location:
    Central PA
    How exactly are you guys setting up Appguard to work along with sandboxie?

    Are there any conflicts between these two programs.

    What exactly does Appguard do that sandboxie doesn't?

    Too many security apps are starting to confuuuuuuuse me!

    Thanks guys.
     
  11. trjam

    trjam Registered Member

    Joined:
    Aug 18, 2006
    Posts:
    9,102
    Location:
    North Carolina USA
    my PC seems to be slowing down today the longer AppGuard is on.
     
  12. danny9

    danny9 Departed Friend

    Joined:
    Feb 18, 2004
    Posts:
    678
    Location:
    Clinton Twp. Mi
    Been running AppGuard for at least a month now with no signs of any slow down with either the prior version or the new one. :)
     
  13. Criss

    Criss Registered Member

    Joined:
    Oct 3, 2008
    Posts:
    186
    Erm...We juz set the container from C:/Sandbox to D:/Sandbox and there sandboxie can be used with appguard. :D. And there is no conflict between the two programs.

    For ur second ques, i think maybe it is better for Eirik to explain to you. :p

    Criss.
     
  14. Criss

    Criss Registered Member

    Joined:
    Oct 3, 2008
    Posts:
    186
    I also didnt experienced any slow-down. ;)
     
  15. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Eirik, I have got 1 questions (also change request when not possible) and 1 change request

    Question: Either AppGuard does read out my setup wrongly, or I have made some changes which are not taken over by system settings. I have used XP's option to move my Documents folder. while WinOptimiser for instance reads them out correctly (see pic) I checked in the registry both shell folders and user shell folders are correct, so ?

    Because AppGuard, still thinks my documents are located in the default directory. I need to change the default Map Folder of Appguard (no 6)

    Is there a way to change the default setting of AppGuard's internal Folder Map's from

    6 My Documents C:\Documents and Settings\[user]\My Documents

    TO

    6 D:\

    Change Request
    Since AppGuard focusses on user friendliness, I would like to have an second option of AppGuard's Drive By protection. In stead of denying EXE's to execute, I would like them to run as limited user (withing AppGuards existing functionality). With SRP I have the option to block execution, run limited or run unrestricted. I think running LUA in the AppGuard way, as a second option, would mean a big functional improvement (and from the outside would not require a lot of extra coding IMO).

    Cheers Kees
     

    Attached Files:

    Last edited: Mar 2, 2009
  16. Criss

    Criss Registered Member

    Joined:
    Oct 3, 2008
    Posts:
    186
    Nice suggestion there. :thumb: It would be nice to have this options.

    Criss.
     
  17. Espresso

    Espresso Registered Member

    Joined:
    Aug 1, 2006
    Posts:
    976
    Yes indeed. I thought it was odd that I'm forced to save everything to my User folder, but if I save an executable, I have to copy it elsewhere in order to execute it. I would like to be able to download to a specific folder that has no protections so I can run a downloaded installer. I would also like to see a context menu option to run any program under AppGuard.
     
  18. Eirik

    Eirik Registered Member

    Joined:
    Oct 6, 2008
    Posts:
    544
    Location:
    Chantilly, Virginia
     
  19. Criss

    Criss Registered Member

    Joined:
    Oct 3, 2008
    Posts:
    186
    Sandboxie will only sandbox an application that u wan to sandbox. And any programme that is opened by the sandboxed application will also be sandboxed. :)

    Criss.
     
  20. Eirik

    Eirik Registered Member

    Joined:
    Oct 6, 2008
    Posts:
    544
    Location:
    Chantilly, Virginia
    I need to toss your question to engineering. AppGuard employs the dynamic variables (don't recall the Microsoft terms) for "My Documents" and all. So, I would expect AppGuard to accomodate your 'move'.

    Note, at present, only executables listed in the 'guard list' can launch from user-space.

    The current 'drive-by download protection' implementation is intended to block three attack vectors:

    1) Block malware launches from user-space, which implicitly:
    - Prevents memory injections implicitly
    - Prevents harm to user files/date
    - Prevents information disclosures
    2) Block malware implantation outside user space

    If we allow unknown executables to launch from user space automatically 'guarded' (similar to reducing privileges), we would have to do so in a way that nullifies all of the sub-bullets in #1.

    I want to improve AppGuard protection from information disclosure attacks as illustrated by Rmus Friday. It would appear we would best address your change request, when we get to work on this. We'll need your detailed input characterizing the problems you're looking to solve with your change request. Would you please elaborate on the problems you're looking to address per your change request, not the question above (I understand the question), we'll capture them and factor them into our development.

    The same goes to all posters too. We participate here to improve AppGuard through your inputs.

    Cheers,

    Eirik
     
  21. Eirik

    Eirik Registered Member

    Joined:
    Oct 6, 2008
    Posts:
    544
    Location:
    Chantilly, Virginia
    We are considering features that might effectively designate one or more select user-space directories for executables. One of the challenges to this involves allowing only user-authorized executables into the directory.

    Eirik
     
  22. wideglide36

    wideglide36 Registered Member

    Joined:
    Oct 3, 2004
    Posts:
    207
    Location:
    Central PA
    Criss and Eirik,

    Thanks for the explanations concerning the differences between sandboxie and AppGuard.

    Looks to me like they are very similar in what they do.

    I'll keep an eye on the new AppGuard program and see if there would be any benefit to run both of these programs or just stick with one.

    Again, thanks.
     
  23. Criss

    Criss Registered Member

    Joined:
    Oct 3, 2008
    Posts:
    186
    Well, the only improvement i have for appguard now will be an extended default 'guard list'. ;) With it, User don't have to add applications to the guard list themselves and make the default setting of appguard to provide great protection for user. :thumb:


    Criss.
     
  24. GES/POR

    GES/POR Registered Member

    Joined:
    Nov 26, 2006
    Posts:
    1,490
    Location:
    Armacham
    How about we call it a greylist or a orangelight?
     
  25. Criss

    Criss Registered Member

    Joined:
    Oct 3, 2008
    Posts:
    186

    or maybe untrusted-list which is same as defensewall. :D
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.