Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 729648" data-attributes="member: 32260">.I wrote the below on another thread:&quot;NVT SysHardener and NVT OSArmor are very useful in the default-allow type security configuration applied by standard AntiVirus. But, the default-deny configuration, based on SRP, is much more restrictive, so most SysHardener &amp; OSArmor features will be not triggered at all.Anyway, Hard_Configurator + NVT SysHardener + NVT OSArmor can be used together (after adding some exclusions) when the user likes using default-allow configuration for a daily work and default-deny for some unsafe tasks.&quot;.default-allow = application is OK until it tries doing malicious/suspicious things..default-deny = every application is blocked except Windows system programs or applications already installed in Program Files, or applications manually whitelisted by the User.Some SRP applications may add more allowed locations..Hard_Configurator uses smart default-deny configuration based on SmartScreen Application Reputation filter. The files (EXE and MSI) which are normally blocked by SRP can be run by the user if they pass SmartScreen filter via &#039;Run As SmartScreen&#039; option in Explorer context menu.</blockquote>

[QUOTE="Andy Ful, post: 729648, member: 32260"] . I wrote the below on another thread: "NVT SysHardener and NVT OSArmor are very useful in the [B][COLOR=rgb(41, 105, 176)]default-allow [/COLOR][/B]type security configuration applied by standard AntiVirus. But, the [B][COLOR=rgb(41, 105, 176)]default-deny[/COLOR][/B] configuration, based on SRP, is much more restrictive, so most SysHardener & OSArmor features will be not triggered at all. Anyway, Hard_Configurator + NVT SysHardener + NVT OSArmor can be used together (after adding some exclusions) when the user likes using default-allow configuration for a daily work and default-deny for some unsafe tasks." . [COLOR=rgb(41, 105, 176)][B]default-allow[/B][/COLOR] = application is OK until it tries doing malicious/suspicious things. . [COLOR=rgb(41, 105, 176)][B]default-deny[/B][/COLOR] = every application is blocked except Windows system programs or applications already installed in Program Files, or applications manually whitelisted by the User. Some SRP applications may add more allowed locations. . Hard_Configurator uses [B][COLOR=rgb(0, 168, 133)]smart[/COLOR][/B] [COLOR=rgb(41, 105, 176)][B]default-deny[/B][/COLOR] configuration based on [B][COLOR=rgb(0, 168, 133)]SmartScreen [/COLOR][/B][COLOR=rgb(0, 0, 0)]Application Reputation filter. The files (EXE and MSI) which are normally blocked by SRP can be run by the user if they pass[/COLOR][COLOR=rgb(0, 168, 133)] [/COLOR][B][COLOR=rgb(0, 168, 133)]SmartScreen filter via 'Run As SmartScreen' [/COLOR][/B][COLOR=rgb(0, 0, 0)]option in Explorer context menu.[/COLOR] [/QUOTE]

Verification