#Access is denied try to change avast webshield install
#Access is denied try to change avast webshield update
#Access is denied try to change avast webshield windows

#Access is denied try to change avast webshield install

What ever you install or what viruses/malware you get will stay contained inside that sandbox.

#Access is denied try to change avast webshield windows

So the answer to your question is to keep my Chrome clean and to keep my windows system clean. You can of course clean the sandbox to hide your surfings but some logs will remain. It is not a privacy tool against most things in that report. Sandboxie is one of the best inventions for keeping your computer clean in regards to internet surfing. And no trouble would have been maybe noticed. Well I had Web Shield and Mail Shield stopped permanently for Avast, if they had been on the browser would have piggypacked through that proxy just fine. This could have happened if TW had been set to an average Joe /mom & pop and also their Chrome set to start only inside a sandbox and would have cause a bit of a puzzle. That rule did not need any renewal even if Chrome updated, but was not recognized while Chrome was updating for the sandboxed instance. Now Chrome gets into the Sandboxie with the old original rule again just fine. So somehow TW was needing that pathed rule while Chrome was updating. And yes unsandboxed Chrome could use the old rule. I deleted the sandbox and removed the rule for sandboxed path Chrome. I could unblock it fine and sandboxed Chrome worked. It was Chrome but the path was the sandboxed one. Remembered TW connection window opened it and tried again and yes I saw what was blocked. Tried again, same result, no intwernet connection. Checked if the Chrome internet settings had changed, no. I knew I had a rule for it, so what is wrong. Then I tried sandbox Chrome and no internet connection for it. Involves TinyWall and Sandboxie and google Chrome updating (I found that out later) Well I was running also a VPN internet connection but that is not involving it. I had an interesting experience a few minutes ago. Otherwise this is a very flexible firewall controller already. This is a nice firewall as it is though.Д®DIT: I noticed you can make application exception being also a Windows service based and local and remote ports specific for TCP and UDP protocols so not much is in need for the Special Exceptions I did put into my wishlist.

Would be nice if there was a possibility to add/override these Special Exceptions. Network Discovery rules go propably over my head but next to do. Again I don't know if limiting ports to what are actually needed brings any more protection as it is a service limited.

#Access is denied try to change avast webshield update

Windows update is to all TCP remote ports svchost.exe, wuauserv-service. But as the only service is W32Time that is maybe unnecessary. Local port could be again if I remember right limited to also 123. : your rule allows all local ports incoming for svchost.exe, W32Time-service from remote port 123 UDP protocol. One possible tightening that should work if I remember right for Time sync. About ICMP filtering I don't know anything.

So far DHCP and DNS seem just fine and are service limited that was not possble with kerio 2.1.5. Ultim I've been checking your TW rules with my limited knowledge from kerio 2.1.5 firewall.

It can be very useful though if you are behind some other protection to makes things easy sometimes. It is more dangerous since it concerns internet access to your computer and if you have some wireless public connection your Windows should be updated. Just you know you are not having any kind of firewall protection from Windows firewall while you are in that mode.ДЄutolearn is not the same with Tinywall as with some 3rd party firewalls containing HIPS learning only for it. Or if you are behind a router/hardware firewall you can also put Tinywall into Autolearn mode which basically allows all and makes rules for them exe's taking internet access while in the Autolearn mode. It could be of use if you allow something and want to see it blocked and see what effects that might have without removing the rule from application exceptions. It is an option though and you can make such rules too. Or use the Connections window approach I described in the previous post.Дeny is pretty much useless approach with Tinywall since all is denied by default unless allowed = whitelisted. You can whitelist them by the app window click or more difficult by the process or executable.