Hard_Configurator - Windows Hardening Configurator

[Andy Ful]

...
I have not been actively following the threat developments for various Windows components, so I'm somewhat unsure what are nowadays the risks for allowing the access to jscript.dll for standard user accounts (I mean from technical point of view, e.g. if there are known unpatched vulnerabilities in jscript.dll that I failed to find, or what kind of scenarios an adversary could probably try to exploit in late October 2024 by using jscript.dll, etc...).

Allowing jscript.dll is acceptable on updated machines because SRP independently blocks JScript files if the SRP default security level is set to Disallowed. Of course, caution is required when whitelisting the JScript files in UserSpace. In your case, the printer probably uses the JScript file for something, so that particular file should be whitelisted (by hash or path), too.
You can still block jscript9*.dll to prevent JavaScript exploits related to Internet Explorer (some IE compatibility is still included in other web browsers).

 

[sypqys]

if I set my computer to “Fort Firewall”, the ConfigureDefender and FirewallHardening rules will no longer be active (as I'll be disabling the Windows firewall)?

Can I set them one by one with this firewall?

Thanks

 

[Andy Ful]

if I set my computer to “Fort Firewall”, the ConfigureDefender and FirewallHardening rules will no longer be active (as I'll be disabling the Windows firewall)?

Can I set them one by one with this firewall?

Thanks

Hi,
I am not sure if your post is related to H_C.

 

[Andy Ful]

if I set my computer to “Fort Firewall”, the ConfigureDefender and FirewallHardening rules will no longer be active (as I'll be disabling the Windows firewall)?

All my applications (including H_C, Configuredefender, and FirewallHardening) should work well with Fort Firewall (it does not disable Windows Firewall).

 

[sypqys]

All my applications (including H_C, Configuredefender, and FirewallHardening) should work well with Fort Firewall (it does not disable Windows Firewall).

I use Portmaster, if I add Fort Firewall, it seem enough.

Thanks