Security Basics mailing list archives

RE: Sandboxie


From: "Nathan B. Heck" <nbheck () cs purdue edu>
Date: Tue, 31 Oct 2006 11:30:12 -0500

Ironically I found just the opposite having used it the last 4 years. It was
the prefect solution for our needs and a fantastic replacement for Roxio's
GoBack (our extremely slow previously used return-to-state software).
Personally I don't believe the size of the organization has anything to do
with if deepfreeze is an appropriate solution for you or not. University wide
we have 10+ thousand workstations, 10+ employees and right around 40 thousand
students (what I would call a large sized organization) and deepfreeze works
great for us.

Your need(s) for the product will determine whether deepfreeze will be a good
solution for you or not, not your size. We use it for instructional labs and
publicly available machines (kiosks, conference rooms, shared offices, ...).
Personally, I wouldn't want to use it for regular office workstations as
there would be a lot of forethought and configuration required to make sure
that all your applications and user settings (profiles) would work as you'd
like them to in your environment.

The only bug I have had with it in all my years of use was a few months back.
Occasionally a machine would hang when it was idle for many hours. This was
easily resolved by uninstalling deepfreeze and reinstalling it. However, this
didn't happen all that often and I believe it has since been fixed in current
version (at least I haven't had it happen to me in some time now).

**These are just my personal observations and opinions, take them as you
will**


Nathan


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Kimberly F. Adams
Sent: Monday, October 30, 2006 9:48 AM
To: Patrick Wade; Saqib Ali; barcajax () gmail com
Cc: security-basics () securityfocus com
Subject: RE: Sandboxie

In my extensive experience with Faronics DeepFreeze (5 years), we found
it to be very glitchy. It does not play nicely with a lot of our
applications and caused us way too much grief compared to the benefits
it brought to our organization. We finally made the decision to phase it
out of our system. It would probably be fine for a small organization,
but with an organization of our size, and the vast number of
applications used throughout our organization, it created more headaches
than not.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Patrick Wade
Sent: Friday, October 27, 2006 4:46 PM
To: 'Saqib Ali'; barcajax () gmail com
Cc: security-basics () securityfocus com
Subject: RE: Sandboxie

What about Faronics DeepFreeze?
http://www.faronics.com/html/deepfreeze.asp

I have evaluated both the standard and enterprise versions and was
pleasantly surprised. 


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On
Behalf Of Saqib Ali
Sent: Wednesday, October 25, 2006 10:42 PM
To: barcajax () gmail com
Cc: security-basics () securityfocus com
Subject: Re: Sandboxie

I haven't tried sandboxie, but another interesting approach to run IE
in a virtual layer:
See
http://www.svsdownloads.com/
http://juice.altiris.com/article/690/virtualizing-internet-explorer-7-on
-win
dows-xp

Or if you want your sandbox IE to be portable (i.e. no install
required, and use on any computer) try:
http://www.mightykey.com


On 25 Oct 2006 07:18:14 -0000, barcajax () gmail com <barcajax () gmail com>
wrote:
Anyone tried this product and does it perform as advertised?
http://www.sandboxie.com/
Would appreciate any feedback.


------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence
in Information Security. Our program offers unparalleled Infosec
management
education and the case study affords you unmatched consulting
experience.
Using interactive e-Learning technology, you can earn this esteemed
degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus

------------------------------------------------------------------------
---




-- 
Saqib Ali, CISSP, ISSAP
http://www.full-disk-encryption.net

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence 
in Information Security. Our program offers unparalleled Infosec
management 
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---



------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence 
in Information Security. Our program offers unparalleled Infosec
management 
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: