Help - Search - Members - Calendar
Full Version: DW 2.09 Allows Untrusted Apps to Run as Trusted
Gladiator Security Forum > SoftSphere Technologies Support Forums > DefenseWall HIPS
dgilmour
I have been evaluating DW 2.09 today.

What I have found is that DW treats some apps on the Untrusted list as I would expect, but it fails to detect and control others.

For example, Internet Explorer, Opera and Azureus are on my Untrusted list, and when I launch these applications DW always identifies and manages them as Untrusted applications.

However, DW does not detect Firefox 2.0.0.9 or Outlook 2007, and it allows them to run as Trusted, even though both applications are correctly specified on the Untrusted applications list. The only way that I can get DW to treat these two apps as Untrusted is:
- Remove firefox.exe and outlook.exe from the Untrusted apps list
- Add firefox.exe and outlook.exe to the Untrusted apps list, by picking the them from the running processes list
- Press Apply

Unfortunately as soon as I shut down and re-start Firefox or Outlook, DW no longer recognizes them, and allows them to run as Trusted.

Can anyone tell me what could be causing this, and how to obtain correct behaviour from DW?

Thanks,

David
Ilya Rabinovich
Mail me to support and I'll send you a driver with debug output.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.