Help - Search - Members - Calendar
Full Version: V3 pasword protection for the dynamic operations.
Gladiator Security Forum > SoftSphere Technologies Support Forums > DefenseWall HIPS
Ilya Rabinovich
Hi everybody!

Need your advise. I'm working right now on the "allow/deny" popup window for the operations DefenseWall can't handle automatically. There are three choices here- "allow","cancel" and "remember my answer". So, the question is- should the "OK" function be protected with the password?
Creer
QUOTE (Ilya Rabinovich @ Jul 7 2009, 06:30 PM) *
Hi everybody!

Need your advise. I'm working right now on the "allow/deny" popup window for the operations DefenseWall can't handle automatically. There are three choices here- "allow","cancel" and "remember my answer". So, the question is- should the "OK" function be protected with the password?

Hi Ilya,

thats good question: I think it would be great if DW will ask me about pass only if I had password protection enabled in DW.
Ilya Rabinovich
Naturally, DW will ask about a password only if the4 password protection is enabled. But I'd like to make more clear what's the functions with this dialog should be protected with password.
Mercurybird
Ilya I think password protecting the remember this answer feature would be excellent. Because someone could go to scrupulous websites on our systems, and when DW queries, answer yes and remember. Then we might never know if DW had been told to allow a bad choice. Am I making sense everyone?
toadbee
QUOTE (Mercurybird @ Jul 7 2009, 02:17 PM) *
Ilya I think password protecting the remember this answer feature would be excellent. Because someone could go to scrupulous websites on our systems, and when DW queries, answer yes and remember. Then we might never know if DW had been told to allow a bad choice. Am I making sense everyone?


Makes sense to me. I'm for the password protection.
Trespasser
Is your question concerning the functioning of the forthcoming firewall?

Thanks.

Later...

QUOTE (Ilya Rabinovich @ Jul 7 2009, 05:30 PM) *
Hi everybody!

Need your advise. I'm working right now on the "allow/deny" popup window for the operations DefenseWall can't handle automatically. There are three choices here- "allow","cancel" and "remember my answer". So, the question is- should the "OK" function be protected with the password?

mossman
QUOTE (Mercurybird @ Jul 7 2009, 07:17 PM) *
Ilya I think password protecting the remember this answer feature would be excellent. Because someone could go to scrupulous websites on our systems, and when DW queries, answer yes and remember. Then we might never know if DW had been told to allow a bad choice. Am I making sense everyone?

Another vote from me. :)
Creer
QUOTE (Ilya Rabinovich @ Jul 7 2009, 07:39 PM) *
Naturally, DW will ask about a password only if the4 password protection is enabled. But I'd like to make more clear what's the functions with this dialog should be protected with password.

I see, does "remember my answer" will be available as a checkbox or button?
I ask because there are few possibilities:
1. Allow, Cancel and remember my answer - 3 buttons
2. Allow, Cancel as buttons and "remember my answer" as a checkbox - in this case Allow button will be a trigger which will save user choice from checkbox "remember my answer".

If you choose the 1 option then it would be great if password protection will be available for Allow and "remember my answer" button.
If you choose the second option - in my opinion password protection should be only for Allow button.
Ilya Rabinovich
1. The dialog is about: firewalling, unwanted reboot control and untrusted dll loading into the trusted processes. The code is the same, the text is different.
2. "Remember my answer" is about checkbox, naturally.

Well, I was thinking about "Allow" button password protection, but it may cause problem on the end-points. Like, for instance, you want to visit a site from within Word document, but it fails as this is password-protected. In fact, this option can be applied different way- with the "default-deny" abilities of the V3.
Creer
QUOTE (Ilya Rabinovich @ Jul 8 2009, 12:50 PM) *
1. The dialog is about: firewalling, unwanted reboot control and untrusted dll loading into the trusted processes. The code is the same, the text is different.
2. "Remember my answer" is about checkbox, naturally.

Well, I was thinking about "Allow" button password protection, but it may cause problem on the end-points. Like, for instance, you want to visit a site from within Word document, but it fails as this is password-protected. In fact, this option can be applied different way- with the "default-deny" abilities of the V3.

Thank you for clarification.
I see your point, indeed this could cause problems but to be honest - how many DW users use password protection for daily usage? If I will have to share my computer with other person who I don't trust because of non-experienced user then probably I'll enable password protection in other cases no, so it should't be a problem i think.
darthsideous666
QUOTE (Creer @ Jul 8 2009, 07:42 AM) *
QUOTE (Ilya Rabinovich @ Jul 8 2009, 12:50 PM) *
1. The dialog is about: firewalling, unwanted reboot control and untrusted dll loading into the trusted processes. The code is the same, the text is different.
2. "Remember my answer" is about checkbox, naturally.

Well, I was thinking about "Allow" button password protection, but it may cause problem on the end-points. Like, for instance, you want to visit a site from within Word document, but it fails as this is password-protected. In fact, this option can be applied different way- with the "default-deny" abilities of the V3.

Thank you for clarification.
I see your point, indeed this could cause problems but to be honest - how many DW users use password protection for daily usage? If I will have to share my computer with other person who I don't trust because of non-experienced user then probably I'll enable password protection in other cases no, so it should't be a problem i think.



But it will be a problem for a "Family" shared computer though in this case! I think it needs to be protected in such a case.

ds
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.