Eset Issue Using Windows Defender Application Guard

[itman 1,748]

I upgraded to Win 10 Pro yesterday and playing with its additional security features. I set up Windows Defender Application Guard (WDAG) and installed its extension in FireFox.

I opened an Edge WDAG virtualized window from Firefox and navigated to the Iranian web site shown here: https://forum.eset.com/topic/29021-threat-htmlscrinjectb-trojan/#elControls_136135_menu  known to be malicious and blocked by Eset in normal Firefox mode. The site opened w/o issue in Edge WDAC session window.

Appears Eset's Internet Protection is totally non-functional in the Edge WDAG virtual container. I also assume Eset can't filter any Internet traffic from the vEthernet network connection WDAG uses.  

Edited August 1, 2021 by itman

[itman 1,748]

I guess its academic if Eset works or not in a WDAG browser session. If WDAG settings are left at default, anything downloaded is dropped in the virtual container and flushed when the WDAG browser session is closed. On the other hand, you could still fall victim to a phishing spoof or the like since your only protection in that and other like browser malicious activities is Win SmartScreen.

-EDIT- Of note is one big reason for using WDAG is to protect MS Office apps as shown here: https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/security/office-365-security/install-app-guard.md . The article notes that Defender Endpoint works with WDAG and it appears it is the only AV solution that does.

Edited August 2, 2021 by itman