Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 903197" data-attributes="member: 32260">You do not need to install H_C. There is a standalone portable version of FirewallHardening available:[URL unfurl=&quot;true&quot;]https://github.com/AndyFul/ConfigureDefender/blob/master/H_C_HardeningTools.zip[/URL]You can download it and keep it together with SWH. Next, the &quot;C:\Windows|Hard_Configurator&quot; folder can be deleted to remove the H_C files. The SWH and H_C are not fully compatible, so run SWH again to see if everything is OK.I would recommend you to stop the hardening for a while and use the current setup (SWH + FirewallHardening). This reduces the attack surface significantly without losing usability. If there will not be the issues, then after a month or two you can go further (this will require some learning).Please remember, that custom hardening will require looking at the SWH and FirewallHardening Logs (from time to time) to see for the possible block events.You can use in SWH the option &lt;Elevation of unsigned executables&gt; = Restricted, if you mostly use digitally signed applications. If not then some unsigned applications will be blocked by this setting.</blockquote>

[QUOTE="Andy Ful, post: 903197, member: 32260"] You do not need to install H_C. There is a standalone portable version of FirewallHardening available: [URL unfurl="true"]https://github.com/AndyFul/ConfigureDefender/blob/master/H_C_HardeningTools.zip[/URL] You can download it and keep it together with SWH. Next, the "C:\Windows|Hard_Configurator" folder can be deleted to remove the H_C files. The SWH and H_C are not fully compatible, so run SWH again to see if everything is OK. I would recommend you to stop the hardening for a while and use the current setup (SWH + FirewallHardening). This reduces the attack surface significantly without losing usability. If there will not be the issues, then after a month or two you can go further (this will require some learning). Please remember, that custom hardening will require looking at the SWH and FirewallHardening Logs (from time to time) to see for the possible block events. You can use in SWH the option <Elevation of unsigned executables> = Restricted, if you mostly use digitally signed applications. If not then some unsigned applications will be blocked by this setting. [/QUOTE]

Verification