For me it's not a case of either or. People should take a layered approach to security and I don't mean adding 50 security programs that do the same job. Windows 10 comes with WD enabled so that's signatures sorted, then there's SRP, SUA, backups and, then some solid zero day protection CF, VS ect. Add an Ad blocker and use common sense and you're good to go.
Default Deny VS traditional AVs
- Thread starter JM Safe
- Start date
Just to add; Default deny is definitely not only for advanced users, average users would see more benefit from it. Kaspersky seem to agree when it comes to TAM:
For internet connection help, see: Manage Wi-Fi networks - Chromebook Help
You can also use a Printer on a Chromebook... I am not sure where you heard that you could not. For some Printers with vendors like HP, there may be an app available to ease the process [HP Printers - Printing from a Chromebook | HP® Customer Support]. Google Cloud Print is also a thing.
F
ForgottenSeer 58943
Say what?
Chromebook is actually really really good dealing with printers, especially in that 100% of the time it will instantly find the right driver for virtually any printer in existence. WiFi is easy to configure on CB's, and you have flexibility such as changing your DNS and such. Modem? As in dialup? All cable modems have a web gui, so of course Chromebook can access their panels.
ok. thank you both. my next computer will be a chromebook.Say what?
Chromebook is actually really really good dealing with printers, especially in that 100% of the time it will instantly find the right driver for virtually any printer in existence. WiFi is easy to configure on CB's, and you have flexibility such as changing your DNS and such. Modem? As in dialup? All cable modems have a web gui, so of course Chromebook can access their panels.
Kaspersky TAM could be useful for anyone.
i think its not available for kav/kfa/kscf , right ?
RoboMan
Level 38
Verified
Honorary Member
Top Poster
Content Creator
Well-known
High Reputation
Forum Veteran
I can assume the whole purpose of using a default-deny solution as a standalone layer of protection is to have control over unexpected matters when you're on full knowledge of what you do and execute. If you need the signatures of an AV, then you're probably downloading and executing unknown stuff.
Yeah, it's only available in KIS, KTS and security cloud paid. It can be useful to anyone, but average users would benefit from it more in my opinion. An advanced user is a lot less likely to try and run unknown files than your average day to day user. I enable TAM on all the systems I have Kaspersky installed on in the house, but on my own system I use a completely different setup.
The point I was making above is that even Kaspersky being the huge security company that it is feels that TAM their kind of anti-exe is optimal for beginners. It should go without saying that anyone can use it and benefit from it, but an advanced user is going to need it a lot less than the average Joe who clicks on anything.
thats not avaliable for kaspersky small office security or other endpoint versions too. but its not hard to make your own TAM with application control.
- Apr 18, 2016
- 3,676
- 28,872
- 4,599
if your kaspersky product has application control, you can replicate what Trusted application mode does. They work the same
- go to application control setting menu
- uncheck trust digitally signed application
- "change trust group for unknown applications" => untrusted
I see Lockdown
That's how I set KIS up alongside TAM too. It's a solid setup isn't it.
- Apr 18, 2016
- 3,676
- 28,872
- 4,599
yes, extremely solid, close to impenetrable but I truly believe TAM and the changes I showed above are identical because I tried to monitor what TAM did and it simply put every single file which were unknown to KSN to untrusted = block/not executable. I don't know how they are different from each other
I noticed some performance drop with TAM but maybe not with the replicated settings
I think with the above settings, TAM can be safely disabled, for better system performance
according to kaspersky
I agree it's simple. there's multiple softwares that can do it. But, again - The only reason I posted the screenshot above was to show which users Kaspersky really aim TAM. Personally I could run Windows or any other OS with nothing and be perfectly fine. The only reason I bother with security tweaks and software is for fun and to see what setups would suit certain family members. I think KIS is extremely good value for money for my family members, it has multiple layers of security plus the software updater comes in handy for them. But I have a couple of family members who only use an ad blocker and VS and they're perfectly fine, but they're not happy clickers. If someone knows how to really make the most of Windows built in security all they really need is that, a decent browser and an ad blocker.
I agree. I use 3rd party software in my config because of fun of tweaking and trying new combo but I could use my PC with WD enabled (+PUA protection enabled with Powershell command) and UAC & SmartScreen and a backup image. That would be enough because of my experience and safe habits.
Same here. I think a lot of us here at MT just use third party security software for a bit of fun lol.
And if the family members are under-aged, adult filtering will do much by blocking proxies /p2p where the youngster gets their games/warez from
:emoji_ok_hand
y)I remember the times when I did so. I inspected every outbound connection using Windows Firewall Control (Sphinx Software). I also used many Sysinternals and NirSoft tools to inspect the system. But, I knew much less about infection vectors as compared to the present day.
I have the impression that almost all good AVs lose much energy and unnecessary impact the computer resources to inspect & analyze & mitigate the threats which can be simply blocked in the home computers (scripts, admin tools, SMB, unnecessary services, etc.). It is like they believed that computers in the home network require similar protection architecture as computers in enterprise networks.
Blocking the exploit/malware is always safer than inspecting & analyzing & mitigating.
Last edited:
It's a double-edged sword. Default-deny integrated into AVs usually works off a massive whitelist so it makes it a lot more user friendly than something like VS or SAP. The problem is, if a malicious application triggers a block, the majority of the population would instantly allow the offending application to run and then be outraged when they got infected.
Happens with "advanced" users too. Drop a piece of malware called "GoogleUpdate.exe" onto an advanced user's system and watch them either allow it to execute because they assume it's legitimate or have a small panic attack while debating with themselves whether it's legitimate or not.
Last edited:
You may also like...
-
AI-Powered Antivirus: The Future of Cybersecurity or Just Hype?- Started by Bot
- Replies: 10
-
What does Kaspersky's default deny/zero trust mode do and how to set it properly?
- Started by nonamebob567
- Replies: 1
-
Paid vs Free Antivirus in 2026: What are you using, and is it worth paying for?
- Started by Bot
- Replies: 61
-
The Trifecta Threat. Comodo vs. ESET vs. McAfee - Which Security Suite Wears the Crown?- Started by Divergent
- Replies: 31