- May 3, 2013
- 82
Hi, i've got a free license for KIS yesterday from a freind
MY QUESTION : can KIS be configured as a Default-Deny like CF with CS settings ??
MY QUESTION : can KIS be configured as a Default-Deny like CF with CS settings ??
About KIS: Can it be configured as a Default-Deny?
- Thread starter abdou17
- Start date
Please provide comments and solutions that are helpful to the author of this topic.
- Status
- Sep 3, 2017
- 818
KIS itself is strong enough on its default than CF...
if u want to tweak enable trusted application mode(un necessary) in my opinion..
set recommended scan (across all boards) to high...Enough right ?...
I would better recommend u to leave it at its default..since tweaking may give u few false alerts..and doesnt allow any untrusted (unsigned) publisher files to run
Since CF is a kind of HIPS made which totally lies on Cloud File reputation../ KIS is an complete AV suite...they don meet in same criteria to me..KIS Rollback is more than enough in (100%) of the cases
If u are a fan of CF why not pair it with KAF /
Last edited:
KeZa
Level 1
- Mar 3, 2018
- 12
- May 3, 2013
- 82
i'll rather use KIS or CIS than CF+KFA because of conflict (sooner or later)
i can handle the FPs, what i want is to lock down the system using KIS if is it possible
- Sep 3, 2017
- 818
LOCK DOWN - - - > C I S....Don look elsewhere !..
But think twice before heading to CIS..since cruelsister is advanced user ..he can tweak it and play with him..since he knows to what alerts to respond..
He knows very well about each setting..importantly USER CLIMATE is what matters..and it may suit him..If u know CIS very well its OK..
Otherwise KIS will protect u far better than him (Simplicity Automated)
- Jul 3, 2015
- 8,153
Read the configuration threads for KIS, and you will learn how to unlock KIS advanced features.
- May 3, 2013
- 82
- Jul 3, 2015
- 8,153
Read this
How to setup Kaspersky Internet Security 2016 for Maximum Protection (Guide)
There is also a very good one from KIS uber-expert @harlan4096, maybe he can link you
How to setup Kaspersky Internet Security 2016 for Maximum Protection (Guide)
There is also a very good one from KIS uber-expert @harlan4096, maybe he can link you
- May 3, 2013
- 82
in KIS if you set "change trust group for unknown applications" in application control to UNTRUSTED
Is it necessary to enable TAM ??
- Jul 3, 2015
- 8,153
The short answer is no.
However, TAM will apply certain limitations to programs that fall into the in-between trust categories.of low restricted and high restricted. So if you want those limitations, then enable TAM.
I am not using KIS right now, so I am sure you can get more expert answers from other users...
- Mar 1, 2014
- 1,708
Theoretically, Kaspersky's Trusted Applications Mode is excellent. It does not merely block and block. According to Kaspersky's official whitepaper, TAM is supposed to prevent certain applications from doing things outside their designed code. This behavior is akin to AppGuard's MemoryGuard. 
But in reality, maybe TAM isn't as good as what is presented in the whitepaper, as what some users here noticed during their testing or use of it.
But in reality, maybe TAM isn't as good as what is presented in the whitepaper, as what some users here noticed during their testing or use of it.
Last edited:
v.maroz
Level 1
- Aug 20, 2017
- 7
1) If you want all new programs to be automatically placed in restricted groups and a balun appears (as in the screenshot), disable automatic group selection in program control
During the installation or auto-update of the legal software it can be manually added to the trusted (using the balun). Everything else will be blocked.
2) Also do not forget to disable automatic decision making.
3) If you want to Firewall training - configure this:
3a) Configure network rights for the Trusted group - request an action.
Weak restrictions can be put "Deny".
3b) In the "Trusted" group, point the network to the subgroups of Microsoft, Opera, Kaspersky Lab, etc.
3c) Everything new that gets into the "Trusted" - will cause the balun with the question to allow / prohibit / create the rule.
During the installation or auto-update of the legal software it can be manually added to the trusted (using the balun). Everything else will be blocked.
2) Also do not forget to disable automatic decision making.
3) If you want to Firewall training - configure this:
3a) Configure network rights for the Trusted group - request an action.
Weak restrictions can be put "Deny".
3b) In the "Trusted" group, point the network to the subgroups of Microsoft, Opera, Kaspersky Lab, etc.
3c) Everything new that gets into the "Trusted" - will cause the balun with the question to allow / prohibit / create the rule.
- Jul 3, 2015
- 8,153
Do you have any ideas why TAM doesn't perform as well as it should, or what can be done about it?Theoretically, Kaspersky's Trusted Application Mode is excellent. It does not merely block and block. According to Kaspersky's official whitepaper, TAM is supposed to prevent certain applications from doing things outside their designed code. This behavior is akin to AppGuard's MemoryGuard.
But in reality, maybe TAM isn't as good as what is presented in the whitepaper, as shown in some tests performed by some members here.
What can be done about TAM not working as intended ? Report to Kaserpsky.
Alternative ? Disable all the garbage shipped on Windows that isn't needed using the Application Control toggles instead of using TAM.
Much better alternative ? Use Chromebook or something other than Windows.
Last edited by a moderator:
- Mar 1, 2014
- 1,708
Could you provide links to those test?Theoretically, Kaspersky's Trusted Application Mode is excellent. It does not merely block and block. According to Kaspersky's official whitepaper, TAM is supposed to prevent certain applications from doing things outside their designed code. This behavior is akin to AppGuard's MemoryGuard.
But in reality, maybe TAM isn't as good as what is presented in the whitepaper, as shown in some tests performed by some members here.
- Mar 1, 2014
- 1,708
I can't. I think the phrase I used was incorrect. I meant that some users have tested TAM in their own way and found out that TAM isn't as good as it's supposed to be (one such user is @Lockdown).
I'll correct my previous statement.
I can't. I think the phrase I used was incorrect. I meant that some users have tested TAM in their own way and found out that TAM isn't as good as it's supposed to be (one such user is @Lockdown).
I'll correct my previous statement.
That kind of stuff is submitted to Kaspersky.
- Apr 28, 2015
- 8,685
Unfortunately, KL usually accepts the bugs (or some of them), but no ETA to fix it...
- Jul 3, 2015
- 8,153
But despite the bugs, KIS when properly tweaked is awesomely powerful for a commercial AV.
I don't know anything like it.
I don't know anything like it.
- Status
