GentleSecurity's Blog

We are pleased to announce of GeSWall 2.7 Beta1 release. Among main features: Untrusted Files and Isolated Applications browsing.

1. Untrusted Files folder in the GeSWall Console allows to scan for untrusted files. Additionally, it provides information on application that created or modified a particular untrusted file.

The feature is useful for composing application rules and analyzing suspicious application's behavior.

2. Isolated Applications folder displays the list of running isolated applications and provides an option to terminate them.

In summary, these features provide a better control over isolated applications for advanced users.

GeSWall 2.6 is out! You can download GeSWall Freeware and Professional Edition from here »

What is new

1) Application Wizard. A flawless execution of isolated application may require specific access rules. The rules describe important resources (files, registry, etc.) application must have unrestricted access to. GeSWall has pre-configured rules for most popular internet applications: web browsers, e-mail clients, messengers, file sharing clients, office applications. etc. However, in some cases it is required to customize pre-configured rules or add support for new application. Application Wizard aims to automate and simplify the task.

2) One-click termination option for the applications with malicious activity detected. That is extension of GeSWall’s attack’s notification policy.

3) Smooth support for Adobe Acrobat, Microsoft Word and Excel. Now each untrusted document is opened in a separate processes. This feature essentially improve experience with untrusted documents you download from the Internet or receive by e-mail.

4) Improved attack detection

5) Windows Explorer context menu to set trusted/untrusted file labels

6) More pre-configured safe applications

7) Windows Vista 32 bit is supported now and 64-bit is on the way. As you probably know, it became a problem to find new machine without Windows Vista pre-installed.

GeSWall 2.6 gets Release Candidate status. Beside bug fixes this release has finalized features and various improvements. The list of changes since first beta:

1. Polished Application Wizard. Beside configuring additional applications the Wizard particularly useful for automatic troubleshooting. In case of problem with isolated application just start it with Wizard in Expert Mode. GeSWall tracks access to all resources (files, registry, etc.) accessed by application during this procedure and determines what rules are required for that application.

2. You can label a file as trusted or untrusted by Windows Explorer context menu

3. Improved one-click termination. You have an option to terminate malicious application by clicking on 'Terminate' button. Additionally, you can adjust termination behavior for auto-termination whenever an attack detected.

4. A smooth support for Adobe Acrobat, Microsoft Word and Excel. Each untrusted document is opened in a separate processes. This feature essentially improve experience with untrusted documents you download from the Internet or receive by e-mail. Details »

Learn more about new features from Online Documentation.

GeSWall 2.6 Beta is released. Please contact our support if you would like to try it.

What is new:

1. Windows Vista support. GeSWall works on Windows Vista 32bit now and we introduce 64bit version in the next GeSWall’s release. Stay tuned!

2. Application Wizard. The wizard is called from Windows Explorer context menu and assists the process of constructing application rules. With wizard you can
  - Add new application to the Application Database
  - Configure application rules
  - Change application settings

3. One-click termination for the applications with malicious activity detected. That is extension of GeSWall’s attack’s notification policy.

Advanced Process Termination provides numerous options to terminate given processes. GeSWall enforces its policy by means of kernel mode driver and termination of the processes doesn’t impose a direct threat to GeSWall. However, it is a good test for the security measures as the same methods can be used for other attacks, not only for process termination.

GeSWall successfully prevents all types of process manipulations (Kill, Suspend/Resume, Kernel Kill, Crash)

Link: http://www.diamondcs.com.au/downloads/apt.zip