DefenseWall automatically sandboxes your browser, email program, instant messaging, FTP utility and any other program it considers a potential vehicle for introducing infection onto your computer.

It does this using an inbuilt list of "untrusted" programs. This list includes Internet Explorer and all the common browsers plus email clients and lots of other utilities as well. You can also manually add programs to this list.

Any program or process that is started by an untrusted program inherits the untrusted (i.e. sandboxed) status. So if you visit a hostile website in your browser, any malicious programs that run secretly are automatically sandboxed as they inherit the untrusted status of the browser.

This policy based approach used by DefenseWall brings about distinct differences in use compared to SandBoxie.

With DefenseWall, your browser is automatically sandboxed every time you run it unless you choose to run it unsandboxed. With SandBoxie your browser by default is only sandboxed if you choose to start it sandboxed. This behavior can be changed in the registered version but it needs to be specifically configured to do so. It's not an option in the free version.