Host Intrusion Prevention System

[Dieselman]

But no where did I say turn off HIPS now did I. 

Go with a firewall that does not have HIPS. There is nothing wrong with Windows 7 firewall once you configure the advanced security options. Use the tools you already have.

[Hermite15]

Go with a firewall that does not have HIPS.

... oh , because some firewall have HIPS are you for real?

[Dieselman]

OutPost,Comodo and Online Armor all have HIPS.

[doktornotor]

As you'll see from my signature, I had acquired both a HIPS and HIDS before BS was rolled out, and I'm happy with them both - they both prompt me on things I expect them to (which is not very often). Having said that, if the nett effect is decreased security if an attack ever comes, I would get rid of something.

Most users are absolutely annoyed by HIPS & Co. popups and plain unable to select a proper answer. So, you will not really get any solution here.

[Dieselman]

Exactly dok...............Go ahead and install CIS on your average users pc. They wont have a clue on how to answer all the pop ups. HIPS is for advanced users who know how to read and interpret the meanings.

[firzen771]

Where did I say disable HIPS? I did not. There are plenty of firewalls without HIPS such as Windows 7 Firewall.

Well, that's how I interpreted this (reply 17)
'BTW the way people you cannot use a HIPS and a BB together. Its one or the other.'

So since avast now has a behaviour shield, this seemed to suggest to me that you think the BS or the HIPS should go - wrong interpretation?

well its not that u outright cant use them together, but its better not to to avoid problems that are much more probable by using the 2 together

[Charyb-0]

Since you guys are discussing HIPS and Behavior Blocker, can you tell me the difference between the two? My take on it is that HIPS is a dumbed down behavior blocker. Behavior blocker has logic in it that will automatically make decisions for the user and HIPS has a learning curve which requires user interaction and knowledge and creates a whitelist of programs. Seems like they tend to do much of the same thing but use a different method of handling things.

BTW, I like HIPS better due to the fact that I can see what is making changes to my system and I get to make the decisions.  Also, the popups decrease over time as the whitelist is created. Kind of similar to a firewall in learning mode. I also have my firewall set to "ask". With a behavior blocker I have no idea what the underlying logic is so I have more trust in using a HIPS program.

Hope you can shed some light on this. There seems to be confusion everywhere you look on the differences.

[Hermite15]

OutPost,Comodo and Online Armor all have HIPS.

meaning that for you, Comodo, Outpost and OA firewalls have HIPS onboard, this must be cool

to make things clear and what seems to confuse many users here, you included: HIPS when present are part of suites integrating multiple components, separate components, firewalls don't have HIPS jesus

[MAG]

.... you will not really get any solution here.

I am beginning to think you're probably right Dok, but by nature I'm a simple, optimistic and patient soul - so I'll press on.

Does anyone think avast should have offered advice to consider turning off third party firewall HIPS components to avoid conflicts when they rolled out the BS?

[Dieselman]

If you disable the HIPS in either OutPost,Online Armor or Comodo then you have comprised its ability to have leak proof detection. Especially Comodo since D+ is its strong point.

[Asyn]

Since you guys are discussing HIPS and Behavior Blocker, can you tell me the difference between the two?

Read here: http://antivirus.about.com/od/antivirussoftwarereviews/a/hips_behavior.htm
This should answer some questions.
asyn

...and Asyn is confident in her use of both - but then as she says, she knows what she's doing - I couldn't make that claim!

She is a he, but never mind.

[Lisandro]

Does anyone think avast should have offered advice to consider turning off third party firewall HIPS components to avoid conflicts when they rolled out the BS?

Right now, avast behavior shield is NOT a HIPS program.
You can let the firewall HIPS on and use avast.

[Dch48]

Will avast! Free Antivirus be equipped with a Host Intrusion Prevention System (HIPS), if possible, in the near future?  With an added HIPS, this popular antivirus software will be much better as expected.

A. Chung

There should NEVER be a HIPS in Avast!. If it's ever added, I will switch products in a heartbeat to one that does not have HIPS.

The HIPS component (D+) of Comodo was the single biggest reason why I stopped using their product. The terrible implementation of sandboxing was another factor.

[Charyb-0]

Since you guys are discussing HIPS and Behavior Blocker, can you tell me the difference between the two?

Read here: http://antivirus.about.com/od/antivirussoftwarereviews/a/hips_behavior.htm
This should answer some questions.
asyn

...and Asyn is confident in her use of both - but then as she says, she knows what she's doing - I couldn't make that claim!

She is a he, but never mind.

Thanks Asyn! I have been searching for an article like this.

I guess you would have to still know the logic behind the behavior blocker. The article stated that HIPS monitors each activity that a program attempt and notifies the user. Registry mods, processes, etc. However, I would think that a Behavior Blocker would monitor the same type of things but just not bother the user with each detail.

I found this interesting in the article.

"When combined, behavior blocking technology can make the decision for the HIPS side of the equation - something both novice and experienced users will appreciate. Even more of a plus, both HIPS and behavior blockers can be run together (and both in conjunction with traditional signature based antivirus software and firewalls)."

[Asyn]

Thanks Asyn! I have been searching for an article like this.

I found this interesting in the article.

"When combined, behavior blocking technology can make the decision for the HIPS side of the equation - something both novice and experienced users will appreciate. Even more of a plus, both HIPS and behavior blockers can be run together (and both in conjunction with traditional signature based antivirus software and firewalls)."

NP, Charyb..!
And, you're right that's the interesting part also some others here should read.
asyn