Reply to thread

Message

<blockquote data-quote="danb" data-source="post: 867078" data-attributes="member: 62850">Hey guys, it looks like I have a few posts to catch up on, and I should be able to later.&nbsp; But I just wanted to quickly mention that most installed software should be able to auto update itself, since VS has several rules in place that automatically allow safe updates.&nbsp; For example, if a whitelisted item is signed and the installer is signed as well, odds are it is going to be allowed, assuming all of the file insight checks out.&nbsp; We have similar rules for parent processes, whether the file is signed or not, but there are always file insight checks that must be met first.&nbsp; Also, please keep in mind that VS toggles to OFF after 10 minutes of user inactivity, so the security posture is lowered so that background processes and updates are not interrupted.&nbsp; There are several other rules that we have developed over the years, but these are a few examples that come to mind.Having said that, if anyone knows of any software that does not update without being blocked, please let me know and I will see if we can find a safe way to auto allow it.Also, thanks again for all of the suggestions and ideas on the prompts and GUI... now that we have an idea of what everyone is thinking, maybe we can think and talk about it a few more days and figure out a great game plan.&nbsp; Thanks again, talk to you soon!</blockquote>

[QUOTE="danb, post: 867078, member: 62850"] Hey guys, it looks like I have a few posts to catch up on, and I should be able to later. But I just wanted to quickly mention that most installed software should be able to auto update itself, since VS has several rules in place that automatically allow safe updates. For example, if a whitelisted item is signed and the installer is signed as well, odds are it is going to be allowed, assuming all of the file insight checks out. We have similar rules for parent processes, whether the file is signed or not, but there are always file insight checks that must be met first. Also, please keep in mind that VS toggles to OFF after 10 minutes of user inactivity, so the security posture is lowered so that background processes and updates are not interrupted. There are several other rules that we have developed over the years, but these are a few examples that come to mind. Having said that, if anyone knows of any software that does not update without being blocked, please let me know and I will see if we can find a safe way to auto allow it. Also, thanks again for all of the suggestions and ideas on the prompts and GUI... now that we have an idea of what everyone is thinking, maybe we can think and talk about it a few more days and figure out a great game plan. Thanks again, talk to you soon! [/QUOTE]

Verification