Reply to thread

Message

<blockquote data-quote="cruelsister" data-source="post: 973477" data-attributes="member: 7463">I guess some clarification is needed&nbsp; as I tend to be a bit vague at times: First off, as WVSX version 3 is being actively pushed out I suggest all upgrade from version 2.73. As to the settings in different scenarios, for those using cruelCF, add WVSX 3.03 with both the HIPS and CF modules at Automatic mode. This is actually what I am using on my production systems, and they work seamlessly together. With WVSX alone (no CF) by all means set both HIPS and FW at High Security. When considering the HIPS and FW modules of CF and WV independently, although I haven&#039;t done any extensive testing, some differences can be seen by running more subtle things like LoLbin scriptors. by doing this, it was seen that CF (HIPS and FW on Safe Mode) is essentially equivalent to WV (with HIPS and FW on High Security). However in these cases CF HIPS tends to blocks things more silently than WV but in both cases protection is afforded. As to the FW comparison, CF is more restrictive as a file mist be rated (even if totally legitimate) before it is allowed to connect out without alerts.In short, for CF users that want a superb AV module adjunct, add WVSX 3 at default. For those without CF, use WVSX with HIPS and FW set at High.</blockquote>

[QUOTE="cruelsister, post: 973477, member: 7463"] I guess some clarification is needed as I tend to be a bit vague at times: First off, as WVSX version 3 is being actively pushed out I suggest all upgrade from version 2.73. As to the settings in different scenarios, for those using cruelCF, add WVSX 3.03 with both the HIPS and CF modules at Automatic mode. This is actually what I am using on my production systems, and they work seamlessly together. With WVSX alone (no CF) by all means set both HIPS and FW at High Security. When considering the HIPS and FW modules of CF and WV independently, although I haven't done any extensive testing, some differences can be seen by running more subtle things like LoLbin scriptors. by doing this, it was seen that CF (HIPS and FW on Safe Mode) is essentially equivalent to WV (with HIPS and FW on High Security). However in these cases CF HIPS tends to blocks things more silently than WV but in both cases protection is afforded. As to the FW comparison, CF is more restrictive as a file mist be rated (even if totally legitimate) before it is allowed to connect out without alerts. In short, for CF users that want a superb AV module adjunct, add WVSX 3 at default. For those without CF, use WVSX with HIPS and FW set at High. [/QUOTE]

Verification