Reply to thread

Message

<blockquote data-quote="Amahl Farouk" data-source="post: 925297" data-attributes="member: 90324">I really like the idea of Edge WDAG, but I have several issues with it that make me doubt it&#039;s usefulness outside of an Enterpise managed environment.The idea of a completely disposable sandbox for more secure browsing is great, however, from what I can tell the sandbox only gets completely flushed on system restart.Extensions don&#039;t persist, so you have to rely group policy to install them at each recreation of the sandbox or just go naked with pretty much the &quot;Strict&quot; security settings on Edge and hope for the best.Windows 10 Pro users don&#039;t have the Managed policy option which would make the separation from secure/insecure environment less tedious...so phishing and other crappy links will still open in your non-WDAG version of Edge by default. You can set some policies up so that when you are in WDAG and navigate to a whitelisted website, it will open in your non-WDAG Edge, but not the reverse...which makes is pretty useless for me.P.S. Of course, enabling HW acceleration or data persistence opens you up to a whole new level of insecurity so that&#039;s a no-go for me. The most painful being software acceleration which makes websites feel sluggish at best.</blockquote>

[QUOTE="Amahl Farouk, post: 925297, member: 90324"] I really like the idea of Edge WDAG, but I have several issues with it that make me doubt it's usefulness outside of an Enterpise managed environment. The idea of a completely disposable sandbox for more secure browsing is great, however, from what I can tell the sandbox only gets completely flushed on system restart. Extensions don't persist, so you have to rely group policy to install them at each recreation of the sandbox or just go naked with pretty much the "Strict" security settings on Edge and hope for the best. Windows 10 Pro users don't have the Managed policy option which would make the separation from secure/insecure environment less tedious...so phishing and other crappy links will still open in your non-WDAG version of Edge by default. You can set some policies up so that when you are in WDAG and navigate to a whitelisted website, it will open in your non-WDAG Edge, but not the reverse...which makes is pretty useless for me. P.S. Of course, enabling HW acceleration or data persistence opens you up to a whole new level of insecurity so that's a no-go for me. The most painful being software acceleration which makes websites feel sluggish at best. [/QUOTE]

Verification