we are thinking about the Boot up quarantine function that is introduced in HIPS version 7.x. The purpose for the function is to restrict traffic at boot up, before the firewall drivers has been loaded.
Now - does anyone have a clue how HIPS is blocking traffic before the drivers are loaded? I mean then it must be some other mechanism stopping traffic. But how/what?