@
Earth
We would be very boring if we all think the same.
The things I express here are opinions that will work in hands of non experienced user too. Give me only latest updates, Windows defender,Windows Firewall and UAC enabled and I would probably stay protected and uninfected. In other hand, I put Avast Free with heuristics set to high and enabled hardened mode to my friend's pc, but he still got himself infected (in 3 days) with AOL, Babylon and some stupid screensaver which I needed 4 tools to remove it completely...
In fact Web protection should be a part of Real Time protection and never to run separately. But there are users that just clicks everywhere, commercials, ads and warez and stuff and they are numbered... To get yourself "phished" you have to be... really... but, chrome's and IE's phishing signatures sometimes comes much later than BitDefender's, Kaspersky's or ESET's for example. Some parts of Firewall's in some suites comes to filter pop3, imap, and of course http protocols and still is classified as Web Protection.
When CIS 6 came out I tested it and when other (ESET, Kaspersky) blocked some Java exploits but CIS failed, I was not sure the affect or symptoms of infection but in any case...
I have also conducted and watched some tests where signatures for Web protection comes before Antivirus real time got it. Think it was Bitdefender or some of his derivatives. So after turning off web filter computer got infected by rogue AV (UAC was off. it irritates people)and the same page was blocked by web filer when it was not turned off in the first place.
I just don't like bloat or security overlapping, chocking the system or be paranoid.
In the time when malware technology is so sophisticated it's better to be more careful than too confident.