Skip to content

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Microsoft Defender Application Guard Deprecated #96

Closed
FowlFunction opened this issue Jul 25, 2024 · 2 comments
Closed

Microsoft Defender Application Guard Deprecated #96

FowlFunction opened this issue Jul 25, 2024 · 2 comments

Comments

@FowlFunction
Copy link

According to the article linked in the recommended reading section:

Microsoft Defender Application Guard, including the Windows Isolated App Launcher APIs, will be deprecated for Microsoft Edge for Business and will no longer be updated.

Are there any native alternatives you'd recommend? From a brief search it appears the closest replacement would be either windows sandbox or hyper-V. I'm looking for a long-term solution that provides browser isolation for edge.

Copy link

Message that will be displayed on users' first issue

@simeononsecurity
Copy link
Owner

According to the article linked in the recommended reading section:

Microsoft Defender Application Guard, including the Windows Isolated App Launcher APIs, will be deprecated for Microsoft Edge for Business and will no longer be updated.

Are there any native alternatives you'd recommend? From a brief search it appears the closest replacement would be either windows sandbox or hyper-V. I'm looking for a long-term solution that provides browser isolation for edge.

All the solutions purposed are mostly just workarounds. They are only as secure as how you use them.
Easiest one to set up would be the windows sandbox. However the sandbox is basically just a vm running on your computer.
It has some benefits over just a normal vm. But in reality, you can probably just use vmware workstation or virtualbox and get the same level of separation. If you're in an enterprise, v-app would be another option. It's really just up to you. IMO they are all terrible.

Repository owner locked and limited conversation to collaborators Jul 26, 2024
@simeononsecurity simeononsecurity converted this issue into discussion #98 Jul 26, 2024

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants