Geswall intrusion prevention system , The Free Version.

GeSWall is intrusion prevention system that is non-intrusive and easy to use.

Do I Need This?    Absolutely   YES!

This is not a Firewall and this is not a anti-virus,malware,spyware software. Geswall does what they can't do!

Geswall is a wall of protection between you and the world online. Sound like what a firewall does. But it does much more than a Firewall does. Geswall runs all applications in an isolated enviorment. Put as basically as I can.  Geswall run all applications inside a box that does not have access to any part of your computer. So if there is a virus hidden in the application, the virus will run it's instructions. But Geswall stops it from accessing the parts of your computer that the virus was intended to target.

To have complete protection from internet threats you need a Firewall, a good reliable Anti-virus/malware software and a good reliable Intrusion Protection system (HIPS).

Geswall is  easy to install and configure. In fact, it just about configures itself. Needs to be understood that this is a combo of isolator (similar to Sanboxie) and a Host Prevention System (HIPS) that sits behind the scenes and will not come into play until some app shows some suspicious behavior. What I like about it, aside from its simplicity, is that it prevents access to the OS kernel, allows read only access to files, registry and processes - meaning good-bye to rootkits, keyloggers, and malwares. In addition, it also prevents
restarts due to backdoor, zombie bots and worms. It may be a bit overwhelming for newbies, specially the Console and how it is accessed, but overall, this is an outstanding program for those who want
top-notch security, and free for personal use.

What is GeSWall?

GeSWall (GentleSecurityWall) is a cross between an isolator, like Sandboxie, and a Host Intrusion
Prevention System (HIPS). For Windows 2000, XP, 2003, Vista, and Windows 7, it sits quietly in the background until an application exhibits suspicious behaviour (such as accessing predefined Trusted, System, or Confidental resources) at which point it jumps into action and delivers a simple pop-up asking if
you want to isolate the application from the rest of the system. If you answer yes, it isolates the program and limits its actions.

GeSWall is intrusion prevention system that is non-intrusive and easy to use.
With GeSWall, you can safely surf the web, use e-mail, chat, exchange files etc, regardless of the security threats posed by the Internet.

GeSWall is a required supplementary to your anti-virus, anti-spyware and personal firewall as it blocks unknown threats missed by those solutions.

anti-virus, anti-spyware and personal firewall are particularly good to find and remove known viruses,
trojuns and spy-ware. However they fail in front of unknown mal-ware, targeted intrusions and zero-day attacks. GeSWall prevents unknown or missed threats while anti-virus would detect and remove particular
mal-ware traces when it is aware of them.

GeSWall Restrictions and Effect:

• No access to kernel - prevents kernel mode rootkits and key
  loggers
• Read only access to trusted files, registry, processes etc.
  - prevents user mode rootkits, keyloggers, malware infections.
• No local communications to trusted processes, e.g. windows
  messages, RPC, COM, WMI - prevents shatter attacks, user mode rootkits,
  keyloggers and malware infections.
• No scheduled re-start - prevents backdoors, zombie bots and
  worms.
• No access to confidential files - prevents leaks of
  confidential information.

Addtionally, GeSWall's data-flow control policy locks malware or intruder within an isolation layer. For instance, whenever an isolated application creates a file, GeSWall tracks it down. If that file is:

• executable - GeSWall classifies a process as posing threat
  and isolate it on execution;
• driver or DLL - GeSWall prevents its loading into kernel
  and trusted processes;
• VBS script - "Windows Script Host" gets isolated on script
  translation, and so forth.

Instead of blocking particular attack techniques, GeSWall focuses on attack objectives such as taking control of a PC, stealing data, breaking system integrity etc. By this approach, GeSWall prevents all
attacks that involve damage, e.g. malicious software (viruses, trojans, spyware), software vulnerabilities (buffer overflow, privilege escalation, etc.), mis-configuration and unknown attacks based on
"zero-days" vectors, e.g. GeSWall has been stopping Windows Metafile exploits.



GeSWall isolates applications that may serve as entry points for malicious software and targeted intrusions. Isolation applies access restrictions that effectively prevent damage.



GeSWall focuses on attack objectives such as taking control of a PC, stealing data, breaking system integrity and prevents damage regardless particular attack techniques.

It protects you from intrusions and malicious software by isolating Internet exposed applications. Isolation applies an access restriction policy that effectively prevents all kinds of attacks, known and unknown.

Once installed, GeSWall dynamically isolates web browsers, e-mail, chat, P2P, IRC clients and other applications that may serve as entry points for malicious software or intrusions. Viruses, trojans, spyware and exploits cannot pass through an isolated application and so cannot cause any damage.

Geswall is a must!  Anti virus / Anti malware software removes threats that is already on your system and some do a adiquate job of detecting threats. But not 0-day threats. 0-day threats are maleware,
viruses that came out today and are not in the anti virus software database yet. Geswall will protect you from 0-day threats and much more.