Reply to thread

Message

<blockquote data-quote="Decopi" data-source="post: 976138" data-attributes="member: 67091">Hi [USER=76851]@WiseVector[/USER],I&#039;m testing WV as a standalone security software (no Windows Defender nor Windows Firewall, no another AV - firewall, nothing, just pure WV alone).For my test I&#039;m using two drives with several partitions (Windows 11 is installed on C:, and partition P: has a mix of safe and unsafe software).My WV test starts with the WV firewall.I created a firewall rule (network-type-rule) named &quot;A&quot;, where &quot;Program Path: Default Any&quot; and &quot;Program Path(Exclusions): C:\*.*│P:\Safe01\*.*&quot;. I expect to block all internet connections except C: and P:\Safe01. Please, my questions:1) Specifically for my test with WV firewall rules (&quot;A&quot;): Do you have any recommendations, improvements additions, corrections etc?2) At &quot;Program Path(Exclusions):&quot;, is it right to use &quot;*.*&quot;? Or &quot;*.exe&quot; is the correct command line syntax?3) What about sub-folders? At my &quot;A&quot; rule, will &quot;Program Path(Exclusions): C:\*.*│P:\Safe01\*.*&quot; include all sub-folders inside C: and P:\Safe01?4) In my test, C: and P:\Safe01 are exceptions to rule &quot;A&quot;. But I also have &quot;WV settings =&gt; Other =&gt; Firewall Settings =&gt; Firewall Level =&gt; High Security&quot;. Please, I want to understand how my &quot;A&quot; firewall rule coexists with my &quot;High Security&quot; firewall setting level. I don&#039;t want rule &quot;A&quot; to be applied to C:, but I want WV firewall &quot;High Security&quot; level to be applied to C:. Is that right?5) What is the hierarchical behavior between WV settings and WV rules when they conflict? Which one has more elevated permissions?6) At P:\Unsafe02 I have an unsafe software, WV detected it, and I created an exception for it (allowing it to run). In this case, does my &quot;A&quot; firewall rule work? If WV detects a malware/virus etc, the user creates an exception for it, but the user has a WV firewall rule such &quot;A&quot;, how the WV malware/virus exception coexists with the &quot;A&quot; firewall rule? Will the WV malware/virus exception allow its access to the internet?At Comodo Firewall ([USER=7463]@cruelsister[/USER] version) I can allow a malware/virus to run (exception for &quot;containment&quot;), but I can totally block its connections (incoming, outgoing) with the Comodo firewall. However, I did same test with WV, I added a WV malware/virus exception + a WV firewall rule &quot;A&quot; (in order to block P:\Unsafe02 network activity), but WV didn&#039;t block its internet connections. I&#039;m sure the problem is on my side, perhaps [USER=76851]@WiseVector[/USER] you can help me to learn how to configure the &quot;A&quot; firewall rule. As I explained, the WV firewall is only the first part of my test.Thank you!</blockquote>

[QUOTE="Decopi, post: 976138, member: 67091"] Hi [USER=76851]@WiseVector[/USER], I'm testing WV as a standalone security software (no Windows Defender nor Windows Firewall, no another AV - firewall, nothing, just pure WV alone). For my test I'm using two drives with several partitions (Windows 11 is installed on C:, and partition P: has a mix of safe and unsafe software). My WV test starts with the WV firewall. I created a firewall rule (network-type-rule) named "A", where "Program Path: Default Any" and "[B]Program Path(Exclusions): C:\*.*│P:\Safe01\*.*[/B]". I expect to block all internet connections except C: and P:\Safe01. Please, my questions: 1) Specifically for my test with WV firewall rules ("A"): Do you have any recommendations, improvements additions, corrections etc? 2) At "[B]Program Path(Exclusions):", is it right to use "*.*"? Or "*.exe" is the correct command line syntax?[/B] 3) What about sub-folders? At my "A" rule, will "[B]Program Path(Exclusions): C:\*.*│P:\Safe01\*.*[/B]" include all sub-folders inside C: and P:\Safe01? 4[B]) In my test, C: and P:\Safe01 are exceptions to rule "[/B]A[B]". But I also have "[/B]WV settings => Other => Firewall Settings => Firewall Level => High Security"[B]. Please, I want to understand how my "[/B]A[B]" firewall rule coexists with my "[/B]High Security[B]" firewall setting level. I don't want rule "[/B]A[B]" to be applied to C:, but I want WV firewall "[/B]High Security[B]" level to be applied to C:. Is that right? 5) What is the hierarchical behavior between WV settings and WV rules when they conflict? Which one has more elevated permissions?[/B] 6[B]) At P:\Unsafe02 I have an unsafe software, WV detected it, and I created an [B]exception[/B] for it (allowing it to run). In this case, does my "A" firewall rule work? If WV detects a malware/virus etc, the user creates an [B]exception[/B] for it, but the user has a WV firewall rule such "[/B]A[B]", how the WV malware/virus [B]exception[/B] coexists with the "[/B]A[B]" firewall rule? Will the WV malware/virus [B]exception[/B] allow its access to the internet? At Comodo Firewall ([USER=7463]@cruelsister[/USER] version) I can allow a malware/virus to run ([B]exception[/B] for "containment"), but I can totally block its connections (incoming, outgoing) with the Comodo firewall. However, I did same test with WV, I added a WV malware/virus [B]exception[/B] + a WV firewall rule "[/B]A[B]" (in order to block P:\Unsafe02 network activity), but WV didn't block its internet connections. I'm sure the problem is on my side, perhaps [USER=76851]@WiseVector[/USER] you can help me to learn how to configure the "[/B]A[B]" firewall rule. As I explained, the WV firewall is only the first part of my test. Thank you![/B] [/QUOTE]

Verification