Default deny vs default allow antivirus/antimalware

what do you think is best and Why?

  • A mix of both(Example how?)

    Votes: 0 0.0%

  • Total voters
    9

Dani Santos

From Xvirus
Thread author
Verified
Top Poster
Developer
Well-known
Forum Veteran
Jun 3, 2014
1,145
6,382
2,079
35
Portugal
To know the diference watch this videos:



 
Not just in terms of security, but overall(protection, system resources usage, annoyance, if easy to use, ect)
 
Tiranium is more superior ! :cool:

The best is like Avira and Tiranium, decide automatically because the user decision can be cheated/
 
Tiranium is more superior ! :cool:

The best is like Avira and Tiranium, decide automatically because the user decision can be cheated/
Your is a default deny with cloud... because if unkown send to cloud to scan
 
Depends on your usage situation.

I've run secure servers where a default deny policy was essential. Nothing was allowed to run without my explicit permission and consent. On the other hand, I've set up computers for novice users and used a default allow policy which has worked best for them (because they most certainly don't want/need to be spammed with 50 popups about processes wanting to start while their just browsing the local news online, especially since I'd then get 50 phone calls asking me whether to allow or deny each 'mysteriously named' but ultimately harmless process).
 
In work computer i think the better option it's default deny (in work computer you only need "company" software).
Computer user basic default deny.
Computer user intermediate mix.
Computer user advanced mix but allow like.

And finally, I like mix but more near to deny.
 
None, default deny is bad for people that have low knowledge, default allow is bad because malware will install like there is no tomorrow. Something like AVG Identity Protect is good or Threat Fire.
 
Default Allow - If a program/file is detected as malicious it will be removed. Simple-as.

I compare Default Deny to running trusted and untrusted software in the same environment, but without an Antivirus available to help identify real threats.

Edit: Work/Business networks operate differently to home environments, and require tighter control over their networks, therefore my opinion is based around home use only.