Invincea FreeSpace™
End User
Guide
Invincea FreeSpace™ v4.0 (formerly Invincea Enterprise)
Created and Maintained by Invincea, Inc.
Proprietary – For Customer Use Only
FreeSpace™ - User Guide – v4.0
Contents
Purpose and Intended Audience ................................................................................................................... 4
What is Invincea FreeSpace™? ..................................................................................................................... 4
The Invincea WebRedirector ........................................................................................................................ 4
WebRedirector Notifications ........................................................................................................................................4
Invincea FreeSpace™ Icons ........................................................................................................................... 6
Invincea FreeSpace™ Desktop Icon...............................................................................................................................6
Invincea System Tray Icon ............................................................................................................................................6
Invincea Start Menu Icons ............................................................................................................................................6
Common Applications Tasks......................................................................................................................... 7
Starting the Invincea FreeSpace™ or Launching new Browser Window .......................................................................7
Additional ways to launch a new browser window ......................................................................................................9
Invincea First Run .......................................................................................................................................................10
Changing your home page ..........................................................................................................................................12
Internet Explorer ............................................................................................................................................................................. 12
Mozilla Firefox ................................................................................................................................................................................. 13
Google Chrome ............................................................................................................................................................................... 14
Selecting your preferred browser ................................................................................................................................................... 16
Native Browser Downloads ........................................................................................................................................17
File Download Additional Dialogs.................................................................................................................................................... 18
File Upload Dialogs .......................................................................................................................................................................... 19
Safely opening documents with Invincea FreeSpace™ Document Protection ............................................................20
An additional Note about Document Protection ............................................................................................................................ 21
Enabling / Disabling Document Protection ..................................................................................................................................... 22
Invincea Suspicious Activity Detection .......................................................................................................................23
Software and Configuration Updates .........................................................................................................................24
Auto Restore ..............................................................................................................................................................26
Protected Application Drop Down Menu – Unprotect Current Page ..........................................................................27
Using the Unprotect Current Page Feature..................................................................................................................................... 28
Invincea System Tray Options .................................................................................................................... 30
Open Internet Explorer...............................................................................................................................................30
Open Firefox...............................................................................................................................................................30
Open Google Chrome .................................................................................................................................................30
Restore .......................................................................................................................................................................30
Suspect Activity Details… ...........................................................................................................................................31
Proprietary – For Customer Use Only
Release Date: July 21, 2014
2
FreeSpace™ - User Guide – v4.0
Preferences…..............................................................................................................................................................31
About….......................................................................................................................................................................32
Exit .............................................................................................................................................................................32
Preference Menu Options .......................................................................................................................... 33
General Tab ................................................................................................................................................................34
Basics ............................................................................................................................................................................................... 34
Always protect my default web browser .................................................................................................................................... 34
Load in the background when Windows starts .......................................................................................................................... 34
Border ............................................................................................................................................................................................. 34
Color Selector Dialog .................................................................................................................................................................. 35
Apps Tab.....................................................................................................................................................................36
Auto-Restore Tab .......................................................................................................................................................37
Automatic Restore .......................................................................................................................................................................... 37
Remind me to restore my browser option ................................................................................................................................. 37
Daily Option ............................................................................................................................................................................ 37
Weekly Option ........................................................................................................................................................................ 37
After Elapsed Option .............................................................................................................................................................. 37
Next auto-restore Display ........................................................................................................................................................... 38
Security Tab................................................................................................................................................................39
Activity Blocking .............................................................................................................................................................................. 39
Terminate suspect processes immediately as they are detected ............................................................................................... 39
Remove suspect documents on detection ................................................................................................................................. 39
Remove downloads from an suspect session ............................................................................................................................. 39
Clear all browsing data from a suspect session .......................................................................................................................... 39
Only open documents originating from the internet ................................................................................................................. 40
Downloads....................................................................................................................................................................................... 40
Block unsafe file extensions from downloading ......................................................................................................................... 40
Block executable downloads that are not digitally signed ......................................................................................................... 40
Update Tab .................................................................................................................................................................41
Trusted Sites Tab ........................................................................................................................................................42
Proprietary – For Customer Use Only
Release Date: July 21, 2014
3
FreeSpace™ - User Guide – v4.0
Purpose and Intended Audience
This document is intended to provide information and instruction for tasks that are considered day-to-day for users of
the Invincea Enterprise product.
What is Invincea FreeSpace™?
Invincea FreeSpace™ provides a secure container for users to run the most common web browsers and document
applications within. By running these applications in a secure container, users are protected from malicious attacks that
may come via a website or infected document. Invincea FreeSpace™ helps by securing web browsing, using the Invincea
WebRedirector to ensure that only sites that have been trusted can be opened outside of the secure container. This
experience is automated and mostly transparent to the user to ensure a consistent browsing experience.
The Invincea WebRedirector
The Invincea WebRedirector controls which websites are viewed in a user’s unprotected web browser versus a
protected browser in the Invincea secure container. When a user attempts to access a website in the unprotected
browser that is not considered “trusted” the WebRedirector will reopen the requested page in an Invincea protected
browser to ensure a safe browsing experience.
In addition to ensuring users are opening untrusted content in a protected browser, the WebRedirector also ensures
that trusted websites can be opened in an unprotected browser by the same process. If a user is browsing in a
protected browser and visits a trusted site, the requested site is then reopened in an unprotected browser. This is
generally done for internal company websites or for sites that have compatibility issues while running in the secure
container.
WebRedirector Notifications
The WebRedirector has several different notification dialog boxes that help to educate the user about when they are
moving between trusted and untrusted pages. However, to make the experience more transparent, administrators may
have disabled these notifications.
The first notification is presented to the user when a trusted site is accessed in a protected browser. This dialog gives
the user the ability to select if they want to remain within the protected browser or to continue with the unprotect
operation.
Pressing the “Unprotected” button will open the page that is being requested in the unprotected browser. This may be
necessary for sites that need additional plugins or operating system integration, such as Microsoft SharePoint sites.
Pressing the “Protected” button will continue opening the page in the protected browser.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
4
FreeSpace™ - User Guide – v4.0
By selecting the checkbox for “Remember my decision for this site” this dialog will only be presented once for the
selected domain or site name. If this option is not selected the selection dialog will be displayed after every restore or
restart of the Invincea FreeSpace™ container.
In addition, users may also see an Invincea Alert notification appear above the system tray icon during a redirection.
This notification will serve to let the user know that they have visited a trusted site and are being directed from the
protected browser to an unprotected browser. The user can check the box labeled “Don’t show me again” to disable
this notification in the future, for all protected to unprotected redirection operations.
A similar dialog box also exists for the reverse action of moving a site from the unprotected browser to the protected
browser within the secure container. This dialog can also be suppressed with the “Don’t show me again” checkbox.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
5
FreeSpace™ - User Guide – v4.0
Invincea FreeSpace™ Icons
After the Installation of Invincea FreeSpace™, one new icon will be located on the desktop, one new icon will be located
in the system tray and a new folder will be created within the Start Menu. The following section helps to identify each
of these new icons and what their functions are.
Invincea FreeSpace™ Desktop Icon
The Invincea FreeSpace™ icon found on the desktop is a point of execution for the Invincea
application. Double clicking on this icon will start the Invincea application if it is not currently running
or will launch a new browser window if it is running. This icon can
also be copied or pinned on to the quick launch tool bar to allow for easier access.
Invincea System Tray Icon
The Invincea system tray icon can be found in the system tray (next to the clock) when Invincea
secure container is running. Product actions, such as opening a new browser window,
restoring Invincea to a clean state or modifying user preferences are available from this tray
icon. More details on what options are available and how to use them can be found later in
this document.
Invincea Start Menu Icons
Invincea FreeSpace™ can also be launched (either starting the program,
or opening a new browser window) by going to the start menu, choosing All
Programs, then Invincea, then FreeSpace. Within this folder is an Invincea
FreeSpace™ shortcut that can be used to run the application. Additionally,
this folder contains a support tool that can be used to send support logs to the
Invincea Customer Care team in case of an issue with the product.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
6
FreeSpace™ - User Guide – v4.0
Common Applications Tasks
The following section offers step by step instructions for common application tasks.
Starting the Invincea FreeSpace™ or Launching new Browser Window
To start the Invincea FreeSpace™ product or to launch a new protected browser window within the secure container,
double-click on the Invincea FreeSpace™ icon on the desktop.
If the product is not running, clicking on the desktop icon will display a “Preparing protected environment” notification
as the secure container is created. Once that process has finished, a protected browser window will be displayed.
To indicate that the Invincea FreeSpace™ product is running, a system tray icon showing the Invincea Enterprise logo is
displayed in the system tray.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
7
FreeSpace™ - User Guide – v4.0
Applications running in the Invincea secure container contain a customizable border color that outline application
windows opened within the secure container. This is to help the user distinguish between the unprotected applications
and those running in the secure container.
The following screenshot displays a protected Internet Explore with a green border.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
8
FreeSpace™ - User Guide – v4.0
Additional ways to launch a new browser window
Once Invincea FreeSpace™ is running the user can open a new protected browser window by doing one of three simple
tasks.
The first is to double-click on the Invincea FreeSpace™ icon on the desktop.
The second is to right click on the Invincea system tray icon, and select “Open Internet Explorer”, “Open Firefox” or
“Open Google Chrome” from the menu. ”. Note that the preferred browser (the
one opened by double clicking the Invincea FreeSpace™ desktop icon) is
listed first and is bold. In the screen shot below, Internet Explorer is the preferred
browser. Also, only available browsers will be listed.
Finally, the user can go to the Start Menu, choose All Programs, open the Invincea
folder, then the FreeSpace folder, and finally choose “Invincea FreeSpace”.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
9
FreeSpace™ - User Guide – v4.0
Invincea First Run
When Invincea FreeSpace™ is run for the first time, the user will asked to select a few product configuration options (or
leave the defaults) and then will be guided through a brief tour of the product. This tour provides the user with a simple
overview of the product functionality. Once the tour completes, the product will finish loading.
The tour can also be accessed by right clicking on the Invincea FreeSpace™ system tray icon, choosing “About” then
pressing the “Tour” button. This second option provides the user a way to view the tour if an administrator has disabled
it from being displayed on the first run of the product.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
10
FreeSpace™ - User Guide – v4.0
The configuration screen allows users to select whether or not they want their default browser protected, if they want
document protection enabled, and which file type they want protected and also whether or not they want to show a
border around protected windows (along with what color the border will be). Users can then select “Begin Tour” to
progress through the first run tour, “Previous” to return to the prior screen, or “Skip Tour” to exit the tour and start the
Invincea FreeSpace™ product.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
11
FreeSpace™ - User Guide – v4.0
Changing your home page
Internet Explorer
The homepage of a protected browser is customizable just like an unprotected browser. To change the homepage from
the default homepage for protected Internet Explorer, select “Tools” or the tools icon, from the menu at the top of
protected Internet Explorer window. After the drop down menu appears, select “Internet Options” from the list of
options.
Note: Screenshots below are from IE9, but the outlined steps should also work for Internet Explorer 7, 8 and 10.
When the Internet Options box appears, delete any text that exists in the box below “To create homepage tabs, type
each address on its own line.” Once this box is cleared, enter the address for the new homepage, such as
http://www.google.com.
Click OK when finished. Open a new protected browser window or press the “Home” button to verify the homepage is
now set to the new URL entered.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
12
FreeSpace™ - User Guide – v4.0
Mozilla Firefox
To change the homepage for protected Mozilla Firefox, select “Tools” from the menu at the top of a protected Firefox
window. After the drop down menu appears, select “Options” from the list of options.
When the Options box appears, verify that the “General” tab is selected. Next to “When Firefox starts:” select “Show
my homepage” from the dropdown (if not selected already). Now delete any text that exists in the box labeled “Home
Page”. Once this box is cleared, enter the address for the new homepage, such as http://www.google.com. Then click
“OK”.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
13
FreeSpace™ - User Guide – v4.0
Google Chrome
To change the homepage for protected Google Chrome, select the “Customize and Control” icon to the right of the
address bar. After the drop down menu appears, select “Settings” from the list of options.
Now locate “On Startup” and click the radio button next to “Open a specific page or set of pages”. Now click on “Set
pages” link to enter your homepage.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
14
FreeSpace™ - User Guide – v4.0
After the new homepage has been entered, click the “OK” button and then close the “settings” tab to save your
changes.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
15
FreeSpace™ - User Guide – v4.0
Selecting your preferred browser
Within the Invincea FreeSpace™ secure container there is the concept of a preferred browser since the application has
the ability to protect multiple browsers. The preferred browser is the browser, within the secured container, that will be
used by default. This browser will be opened for hyperlinks or any other host request for the default browser (when
Invincea FreeSpace™ is set as the host default browser). Additionally, whenever the Invincea FreeSpace™ icon is double
clicked, the preferred browser is the browser that will open.
If multiple browsers are available for a user, the user can select which is preferred through the Apps tab on the
Preferences menu.
The user is able to select any browser from the “Protected Apps” list and check the “Use the browser to open web
pages” checkbox to set the selected browser as preferred. Only a single browser can have this option selected and one
browser must always be selected. If only one browser is available, no changes can be made.
Note, this ability may have been disabled by an administrator.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
16
FreeSpace™ - User Guide – v4.0
Native Browser Downloads
Invincea FreeSpace™ v3.1 introduced the native browser download experience. In previous versions of the product,
when a user would download a file from a browser, an Invincea controlled download dialog box would display and
would allow for the user to download the requested file. Starting in version 3.1, the Invincea dialog box has been
removed and now all native browser dialog boxes are used to allow for complete transparency when users are
downloading files.
In certain cases, administrators may enable confirmation dialog boxes to ensure that file save or open actions that will
leave the Invincea secure container alert the user. For example, if a user has confirmation dialogs enabled for open
actions and a user were to open a PDF file, no dialog box would be displayed as this the file would open in a secured
application within the Invincea container.
When the browser dialog displays and the user chooses to “Save” or “Open” a file, the Invincea confirmation dialog box
will display before the final stage of moving the download file out of the secure container. If the Cancel button is
pressed on the Invincea confirmation dialog, the download will be deleted from the secure container rather than being
copied to the host.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
17
FreeSpace™ - User Guide – v4.0
File Download Additional Dialogs
Invincea FreeSpace™ also has advanced download features that help to protect the user. These advanced options
prevent certain files from being downloaded by a protected browser in the secure container. One of these advanced
features is the ability to block downloads for certain types of files. If a file download is blocked by type, the following
message will be displayed when a request to download the file type occurs. This option can be enabled by the
administrator for a variety of file types or can be enabled/disabled through the user preferences UI. If enabled through
the preferences UI by the user, the default extension types will be blocked. These extensions include:
bas, bat, chm, cmd, com, cpl, crt, dll, exe, hlp, hta, inf, ins, isp, msc, msi, msp,
mst, pif, reg, scr, sct, shb, shs, sys, vb, vbe, vbs, wsc, wsf, wsh
When this feature is active, the following dialog will display to alert the user of the extra level of protection that is in
place.
A second advanced feature is to validate that executable files have a valid digital signature before allowing the file to be
downloaded by a protected browser. If this feature is enabled, and a requested executable file does not have a valid
digital signature, the following dialog will indicate to the user that the file cannot be downloaded.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
18
FreeSpace™ - User Guide – v4.0
File Upload Dialogs
In some cases, when a user attempts to upload a file to a website, Invincea will display an additional dialog box
indicating that the file is being “secured.”
This dialog box is an indicator that the file is being transferred into the secure container so that it can be uploaded to the
website as requested. This dialog is used to inform the user that the website action will not completed until the securing
process finishes, and the website may appear unresponsive or “hung” until the file is fully secured. Once the securing
process is completed, the Invincea dialog box will close and the website will continue its action.
Additionally, users may see the “securing” dialog when opening a large protected document, as the document may take
a moment to transfer into the container and open in a protected application.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
19
FreeSpace™ - User Guide – v4.0
Safely opening documents with Invincea FreeSpace™ Document Protection
In addition to preventing malware from infecting a computer via a web browser attack, Invincea FreeSpace™ also offers
the ability to securely open documents inside of the Invincea secure container. This helps to prevent malicious
documents from affecting computer as well.
Currently, Invincea FreeSpace™ offers a secure way to open documents for several different file types. Invincea
FreeSpace™ secures:




Adobe Reader and Adobe Acrobat: allowing secure viewing of PDF files
Microsoft Word: allowing secure viewing of DOC, DOCX and may other MS Word files
Microsoft Excel: allowing secure viewing of XLS, XLSX and may other MS Excel files
Microsoft PowerPoint: allowing secure viewing of PPT, PPTX and may other MS PowerPoint files
The protected document applications can be identified as the protected browsers are by the customized border color
that surrounds the application. The following windows provide examples of the protected applications with the border
displayed.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
20
FreeSpace™ - User Guide – v4.0
An additional Note about Document Protection
When editing documents inside of a protected application, the document application is subject to the “Restore” process,
just as the protected browsers are. When a “Restore” of the secure container needs to be executed, all protected
applications need to be closed out. To help ensure users do not lose any unsaved changes, the protected applications
will prompt the user to save the document. If the “Restore” is delayed because of an unsaved file, an additional dialog
will display over the system tray indicating that the Invincea FreeSpace™ “Restore” cannot continue until the unsaved
document is saved or closed.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
21
FreeSpace™ - User Guide – v4.0
Enabling / Disabling Document Protection
The Invincea FreeSpace™ product gives users a simple way to enable or disable document protection for protected
applications. By disabling document protection for an application, the associated file types for that application will no
longer open inside the Invincea secure container.
To control which application have document protection enabled, navigate to the Preference menu from the drop menu
or system tray menu. Choose the Apps tab.
On the Apps tab, all applications that can be protected by Invincea are listed in the Protected Apps list. By clicking on an
application name in this list, details about that application and available options are listed. To enable or disabled
document protection for a specific application, simply check or uncheck the “Enable document protection” checkbox.
This can be done for one or all available applications. The protection will be enabled or disabled for all file types listed
under “Protected file types” for the selected application.
Note, this ability may have been disabled by an administrator.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
22
FreeSpace™ - User Guide – v4.0
Invincea Suspicious Activity Detection
Invincea FreeSpace™ has a built in detection engine that detects unsafe behavior within the secure container. When a
suspicious activity is detected, Invincea FreeSpace™ indicates a restore needs to be completed to return the secure
container to a clean state. The following Invincea Alert is displayed to the user.
The user can click the “Restore” button, which will destroy the dirty container and recreate a clean container.
Alternatively, the user has the option to close the notification and continue working in the dirty state, though this is not
recommended. If the user dismisses the Invincea Alert without restoring the container the Invincea FreeSpace™ system
tray icon will turn red until the restore is completed. This serves as a reminder to the user that the container is dirty and
needs to be restored.
If an administrator chooses, the user may not be given the option to dismiss the alert as mentioned above. In this case
the user will be presented with a countdown timer that indicates when the restore will happen. Once the timer has
expired, the product will automatically execute the restore process.
It is important to note that if the restore happens by the expiring timer, a protected browser window will NOT be
displayed when the restore completes, unlike what happens during a manual restore process. A dialog box will be
displayed though to indicate that the container has been restored and the cause of the restore was a detected threat.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
23
FreeSpace™ - User Guide – v4.0
Software and Configuration Updates
The Invincea FreeSpace™ software includes a software and configuration update feature that allows administrators to
update the software version and configuration of the product remotely. When a new version of the FreeSpace™
software has been published, there are three different ways that software update may be applied.
With the first method the software upgrade will start immediately. When this method is used the following notification
will be displayed to the user. This notification contains a countdown timer, which informs the user when the update will
be applied. The user has the ability to press the “Install Now” button if they are ready for the update, otherwise the
update will be automatically applied once the timer expires.
The second method allows the user to decide when the software update will be applied. The user can choose to press
the “Install Now” or “Install Later” button. Closing the dialog has the same effect as pressing the “Install Later” button.
Pressing the “Install Now” button will immediately exit Invincea FreeSpace™, closing all protected applications, and start
the upgrade process. Once the upgrade process has finished, the product will restart and the user will be presented
with a protected browser. If the user chooses to press the “Install Later” button, this will delay the install until the next
time the product is Restored or Restarted.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
24
FreeSpace™ - User Guide – v4.0
The final method is for the software update to be applied is silently in the background with no user interaction. In this
case, the software will be silently downloaded to the client system and will go through the upgrade process the next
time the product is restored or restarted. There are no dialogs presented to the user with this method.
For all methods, while the update process is running, the user will see the following message displayed above the
system tray.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
25
FreeSpace™ - User Guide – v4.0
Auto Restore
The Invincea FreeSpace™ product has an auto restore feature that is used to restore the secure container to a clean
state at a scheduled interval. The auto-restore feature has the ability to be pre-configured by the administrator or it can
be configured via the user preferences menu.
The auto-restore can occur in two different fashions; forced or optional. When an administrator has decided that the
auto-restore does not need to be forced, the user will be presented with the below dialog box, which gives the ability for
the auto-restore to be cancelled. By pressing the “Keep Browsing” button, the auto-restore is dismissed and will trigger
again at the next scheduled time. If the user presses the “Restore Now” button, all protected applications will be closed
and the secure container will be restored to a clean state. It is recommended that users preform the restore when the
alert is displayed.
When the administrator has decided to force the restore process the user will be presented with the below dialog,
which offers a countdown timer until the restore is to occur. When the timer expires, the restore process will occur.
Optionally, the user has the ability to press the “Restore Now” button to make the restore process happen prior to the
expiration of the timer.
For users that manage the auto-restore timer via the preference menu, it is recommended that auto-restore option be
enabled to ensure that a clean protected browser is used each day. It is recommended that the Invincea secure
container be restored every 24 hours or at least once each day. Restoring the product ensures that the secure container
is always clean and free of malicious activity.
It is also important to note that the Invincea protected browser is restarted each time the computer is restarted or a
user logs onto the PC. If this occurs, the auto-restore may not be necessary till the following day.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
26
FreeSpace™ - User Guide – v4.0
Protected Application Drop Down Menu – Unprotect Current Page
Invincea FreeSpace™ adds a drop down menu on the top edge of all protected applications. The drop down menu is an
indicator that an application is protected by Invincea FreeSpace™ and also allows for quick access to features of the
product, such as the preferences menu.
The drop down menu can be found in the middle of the top edge of the any protected application window. It is a small
gray button that when clicked on displays the menu.
Besides informing the user that the application they are using is protected by Invincea, the menu also provides the user
with quick access to two different software options. The first option is the “Preferences” option, which is always
displayed at the bottom of the menu. By selecting Preferences, the user preferences UI will be displayed, as it would be
if the user selected the Preferences option from the system tray menu. This option is designed to allow the user a
second control point to access the preferences menu.
The second option, displayed “Unprotect Current Page” is used to reopen the current page being displayed in protected
browser in an unprotected browser (outside of the container). This is useful if the page being viewed in the protected
browser is not rendering correctly or if there is some sort of compatibility issue. This option is currently only available
for browsers protected by Invincea and may be disabled by an administrator, which removes the option from the menu.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
27
FreeSpace™ - User Guide – v4.0
Using the Unprotect Current Page Feature
When using the “Unprotect Current Page” feature, the user will be prompted with the below dialog before the site is
move to the unprotected browser to ensure they are aware of the potential danger of browsing outside of the protected
browser. The user can choose to continue by pressing the “Unprotect” button or they can cancel the action by pressing
the “Cancel” button. Users have the ability to select subdomains when unprotecting a page. This allows users the ability
to trust a very specific subdomain, or then entire domain, depending on the necessity.
The dialog box also contains a check box with the option “Always trust this website”. When checked, this option stores
the domain of the site that is being unprotected, so that any future visits to this domain in the protected browser will be
automatically redirected to the unprotected browser. This is convenient for business related sites that are used
frequently and do not work correctly in the protected browser. Once these sites are permanently stored, they can be
managed in the preferences menu if they need to be removed. If the site is not permanently stored, it will be removed
from the temporary trusted sites list at the next restore.
The “Trusted Sites” tab within the preferences menu allows for the user to view the sites that have been permanently
listed as trusted sites and to also remove a site if it no longer needs to be trusted. This can be done by selecting the site
in the list and pressing the “Remove” button. If the user wishes to remove all sites, they can press the “Remove All”
button.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
28
FreeSpace™ - User Guide – v4.0
Additionally, administrators have the option to require a justification of the unprotect action. When an administrator
has enabled this feature, the dialog box for the unprotecting a site will contain a text box to enter the business
justification.
This business justification and the unprotected website will be reported to the administrator when the “Unprotect”
button is pressed.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
29
FreeSpace™ - User Guide – v4.0
Invincea System Tray Options
The following section outlines the menu options available from the Invincea System Tray Icon. The System Tray Menu
can be accessed by right-clicking on the Invincea Icon in the system tray.
Open Internet Explorer
“Open Internet Explorer” is used to open an Internet Explorer browser window within the Invincea secure container. If
Internet Explorer is the only browser available or is set as the preferred browser, it will appeared bold and at the top of
the menu. In the above screen shot, Internet Explorer is the preferred browser.
Open Firefox
“Open Firefox” is used to open a Mozilla Firefox browser window within the Invincea secure container. The preferred
browser defined in the preferences menu is bold and listed first. If Mozilla Firefox is not available in the secure
container, it will not be displayed in this menu.
Open Google Chrome
“Open Google Chrome” is used to open a Google Chrome browser window within the Invincea secure container. The
preferred browser defined in the preferences menu is bold and listed first. If Google Chrome is not available in the
secure container, it will not be displayed in this menu.
Restore
The Restore option is used to restore the Invincea secure container to a clean state if suspicious activity has been
detected or if the container needs to be reset for any other reason. It is recommended that the Invincea secure
container be restored at least once a day.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
30
FreeSpace™ - User Guide – v4.0
Suspect Activity Details…
When suspicious activity has been detected by Invincea threat detection, this additional menu item will be displayed in
the system tray menu. The user may select the “Suspect Activity Details…” option to view further information regarding
the activity. The user is able to click the “Restore” button from this window to restore the Invincea secure container
back to a clean state.
Preferences…
The Preferences… option is used to configure settings for the Invincea secure container and protected applications, such
as auto-restore or setting Invincea FreeSpace™ act as the default browser. Depending on how the administrator has
configured the Invincea FreeSpace™ product, some these options may be disabled. The Preference options are
explained in greater detail in the next section.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
31
FreeSpace™ - User Guide – v4.0
About…
The About… option is used to view the current version of the Invincea software installed on the client machine, and to
view (if connected to a Invincea Management Server) the CMS group and configuration revision that is currently applied
to the client. The “Help” button can be used to open a designated Help site (either the Invincea default or a client
customized version). Finally, by pressing the “Tour” button, the first run tour will be displayed.
Exit
The Exit option is used to cleanly close down the Invincea secure container when it is no longer needed or when it needs
to be restarted completely. Using the Exit option is the only way to fully shutdown the Invincea FreeSpace™ product.
Closing all protected application windows will leave Invincea FreeSpace™ running in the background.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
32
FreeSpace™ - User Guide – v4.0
Preference Menu Options
The following section identifies the options that are available in the user preferences interface. The Preferences
interface can be accessed by right clicking on the Invincea System tray icon and selecting Preferences…
It is important to note that all of the options within the user preferences interface can be administratively controlled, so
some of the options explained in the following section may be grayed out or not configurable.
The preferences menu can also be accessed from the drop down menu that is found on the top of any protected
application.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
33
FreeSpace™ - User Guide – v4.0
General Tab
The General Tab provides options configuring Invincea FreeSpace™ as the default browser, configuring if Invincea
FreeSpace™ should start with Windows, and for changing the border color around protected windows.
Basics
The Basics section of the General tab allows modification of two different options listed below.
Always protect my default web browser
By selecting this check box, Invincea FreeSpace™ will act as the default browser and will pass information to a protected
browser any time the default browser is invoked (such as via a hyperlink) on the PC. Unselecting this check box will set
the default browser back to the previously set default browser.
Load in the background when Windows starts
This check box will define if the Invincea FreeSpace™ product will start automatically in the background each time the
computer is restarted. It is recommended that this option be checked so that the first time the product is used, there is
no delay in bringing up the browser window.
Border
The Border section of the General tab allows the option to enable or disable a colored border that is shown around
protected application windows. To enable the border, simply check the option box. When this box is not checked, no
border will be displayed. By default, the browser displays with a green border, but this can be customized by pressing
the “Pick Color…” button and choosing a new color from the color picker. The new color will take affect when the OK
button is pressed on the Preferences dialog.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
34
FreeSpace™ - User Guide – v4.0
Color Selector Dialog
To select a new border color, select one of the pre-populated colors, or enter your own color combination. Press OK to
select the new color.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
35
FreeSpace™ - User Guide – v4.0
Apps Tab
The Apps Tab provides the ability to specify which programs within the secure container will be used to handle browsing
and document protection. For web browsing, all available web browsers will be listed, and the user can choose which
browser will be preferred for browsing in the secure container. This can be done by selecting “Use this browser to open
web pages” for the browser that is preferred.
Additionally, certain application can be specified to handle different documents types. By default, Adobe Reader is
enabled to protect PDF documents within the secure container, but other applications may be available, such as Adobe
Acrobat. Document handling can also be enabled on Internet Explorer or Firefox for static htm and html pages stored on
the local PC.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
36
FreeSpace™ - User Guide – v4.0
Auto-Restore Tab
The Auto-Restore Tab provides options for configuring the Auto-Restore settings.
Automatic Restore
The Automatic Restore section of the Auto-Restore tab provides the ability to enable and disable a scheduled restore of
the Invincea secure container. The Auto-Restore can be customized to occur on a defined schedule.
Selecting the Enable Auto-Restore checkbox will enable the auto restore feature with the settings selected. The restore
will close all open Invincea protected applications and restore the Invincea secure container to a clean state. If the
checkbox is unselected, Auto-Restore will be disabled.
Remind me to restore my browser option
The “Remind me to restore my browser” options provides a drop down menu with three options; daily, weekly and after
elapsed. The end user will be able to customize the schedule based on these options.
Daily Option
The “Daily” option changes the dialog box to allow for the end user to select a specific time each day that the secure
container will auto restore.
Weekly Option
The “Weekly” option changes the dialog box to allow for the end user to select what day of the week the secure
container will auto restore and at what exact time that day the auto restore will occur.
After Elapsed Option
The “After Elapsed” option allows for the user to select the time period in hours and minutes after startup or restore
that an auto restore will be started. This time period begins when the product is started or restored. For example, if
this option is set to 12 hours, the secure container will be restored after the container has been continually running for
that period of time. The timer resets each time a restore is done.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
37
FreeSpace™ - User Guide – v4.0
Next auto-restore Display
The Next auto-restore display indicates when the next auto-restore will take place based on the settings that are
configured.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
38
FreeSpace™ - User Guide – v4.0
Security Tab
The Security Tab provides options for configuring the Security settings.
Activity Blocking
The Activity Blocking section of the Security tab gives the end user the ability to configure additional options on how
certain activities are handled. Selecting the check mark in front of an option will enable that feature.
Terminate suspect processes immediately as they are detected
This option allows for the Invincea secure container to terminate suspect processes as soon as they are detected. The
end user will be notified of the infection and prompted to restore.
Remove suspect documents on detection
This option allows for the Invincea secure container to delete documents that are located on the end user PC if a threat
is detected within the document. This document will be permanently deleted. The user will be notified if this occurs.
An example of this option would be the user opening a PDF on their desktop that contained malicious content. This file
would be deleted from the desktop and a restore of the Invincea secure container would be executed (or prompted).
Remove downloads from an suspect session
This option allows for the Invincea secure container to immediately remove any files downloaded during a session that is
deemed infected from the host machine. The user will be notified of the deleted files at the time of infection. An
example of this option would be if the user downloaded three PDF documents with the protected browser and then
browsed to a malicious site. These three documents would be removed from the location that they were downloaded
to.
Clear all browsing data from a suspect session
This option allows for the Invincea secure container to clear all browsing data (additional bookmarks, changes to
browser settings, history, cookies, etc.) during a suspect session (when a suspicious activity alert is displayed). If the
option is not checked, then the browsing history and data will remain intact when the restore happens, even if they
Proprietary – For Customer Use Only
Release Date: July 21, 2014
39
FreeSpace™ - User Guide – v4.0
have been modified by the attack (such as changing the home page to something malicious or adding in malicious
bookmarks).
Only open documents originating from the internet
This option will allow only documents that originate from the internet to be opened in an Invincea protected document
application. Documents which are created locally will be opened outside of the secure container. When not selected,
all documents will be opened in the secure container (for document types that Invincea FreeSpace™ is default program).
Downloads
The Downloads section of the Security Tab gives the end user the ability to configure additional options on how files are
handled when downloaded.
Block unsafe file extensions from downloading
This option allows for Invincea FreeSpace™ to immediately stop any blacklisted file types from being downloaded by a
protected browser. If this option is not checked, the files will be downloaded to the Invincea downloads folder unless an
infection is detected.
The following is the default list of file types that will be blocked by enabling this option (can be modified by an
administrator):
bas, bat, chm, cmd, com, cpl, crt, dll, exe, hlp, hta, inf, ins, isp, msc, msi, msp,
mst, pif, reg, scr, sct, shb, shs, sys, vb, vbe, vbs, wsc, wsf, wsh
Block executable downloads that are not digitally signed
This option allows for Invincea FreeSpace™ to immediately stop any executable without digital signature from being
downloaded. Executable downloads that are digitally signed will be downloaded. If this option is not checked, all
executable files, regardless of signature status, will be downloaded to the Invincea downloads folder unless an infection
is detected.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
40
FreeSpace™ - User Guide – v4.0
Update Tab
The Update Tab provides options for the software and configuration update settings.
Users can select the check box “Automatically check for software updates” to enable auto updates. This will allow the
product to automatically check for software and configuration updates when the product is started up and on the
interval specified in the following drop down. The options are as follows.



On Restore. Upon restore from either a suspicious activity or auto-restore.
Hourly. Invincea will check for software updates every hour.
Daily. Invincea will check for software updates every day.
Users also have the ability to press the “Check Now” button to immediately check for software and configuration
updates. This can be helpful if an administrator has posted a configuration or software update and it needs to be
applied immediately.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
41
FreeSpace™ - User Guide – v4.0
Trusted Sites Tab
The Trusted Sites Tab provides the ability to remove previously stored trusted sites.
This tab displays the sites that were trusted via the “Unprotected this page” option in the drop down menu. Domains /
URLs that were specified as “Always trust this site” will be listed. If a user wishes to remove a single domain / URL from
this list, they can select the domain / URL to be removed and then can press the “Remove” button. If a user wishes to
clear all of the domains / URLs listed, they can press the “Remove All” button.
Proprietary – For Customer Use Only
Release Date: July 21, 2014
42