Best settings for CF

What are the most secure settings without enabling HIPS?

Enable “Proactive Security Configuration” and then go to HIPS setting and disable the HIPS.
This is what I use :-TU Very strong configuration!

You can also try Chiron’s recommendations: .

Sandbox settings on default?

Set proactive and disable HIPS…leave all settings as defaul proactive settings. Ok :-TU