The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Any standalone HIPS?

    Discussion in 'Security and Anti-Virus Software' started by MAA83, Jul 4, 2011.

  1. MAA83

    MAA83 Notebook Evangelist

    Reputations:
    794
    Messages:
    604
    Likes Received:
    3
    Trophy Points:
    31
    It seems like long ago suites got bloated and crappy, and then we went with layered standalone programs, and now things are going back towards beefed up suites.

    Assuming I wanted to use a standalone HIPS, what options are there? I think ThreatFire now comes as part of an AV? DriveSentry? I don't remember any others.

    If I don't use a standalone I'll prob stick with comodo defense+ that comes with the firewall.

    What's an EASY hips to learn, and use, and allows immediate intervention options without having to choose to block or quarantine or allow right away so I can marginalize the damage I do if I do infact choose the wrong action :D

    I've only recently installed comodo firewall, and lack of good documentation really makes it difficult to understand how it works, what it does, how to configure it initially and blah blah. Anything more user friendly but just as good as defence+?

    NM: WinPatrol! anyone here use it? It seems to be the only truly hips-type standalone program around. And I dont know about the 2011 version, but I remember from before it was relatively user friendly.
     
  2. Hungry Man

    Hungry Man Notebook Virtuoso

    Reputations:
    661
    Messages:
    2,348
    Likes Received:
    0
    Trophy Points:
    55
    I find Defence+ to be very user friendly. you can always just disable the firewall on it?

    The only thing I'd change about Defence+ is how it sandboxes -- I'd like more sandboxing variations and the ability to make my own custom rules for a sandbox.

    Otherwise I really wouldn't change anything. It autosandboxes unknown programs, has a huge whitelist, allows me to force programs into their own sandbox, and it allows me to create rules for trusted/ untrusted programs.

    It's pretty much "stand alone" you can easily disable the firewall and the firewall process won't start/ it'll be like it doesn't exist.