ichkriegediekriese

@dafaher I only have this problem with transfer speeds above 30Mb/s. Normal internet browsing is limited to 5MB/s - so I don't see any issued here... @zfactor What dioyou mean by clean install? - a clean Windows install? - that would be an insane task to solve this issue. Or do you mean clean ESET re-install by using removal utility an removing and reinstalling network drivers and at the end reinstall ESET?

Hi, Sorry for the late answer but I have been quite busy. I want our servers to be as secure as the client PCs and for me it comes naturally to use a firewall on the server too. I know Windows Server has its own firewall but so does Win 7, 8 and 10 - and by having a built in firewall with security products like ESET it does provide centralizes management which is great. Could you please elaborate why you think a Server does not need a firewall? - I just can't think of a reason why a server just shouldn't be as secure as client endpoints :-) Maybe they can't make high performance firewall for server Kinda doubt it :-) - probably most people use either Windows FW or a separate product tailored to their need...ah well

Hi I am using the recent ESS v10 software under Windows 10 x64 and when I am transferring files via SMB from my NAS the network performance drops dramatically from usually 98MB/s to 28MB/s on inbound traffic - outbound traffic to my NAS is fine with around 108MB/s. The annoying fact besides this problem even exists is that disabling ESS don't help - it seems I have to de-isntall ESS in order to get the usual speed back. Anyone ever had this or know hows to solve it? - I find that issue really strange because SSDs read with more 500MB/s and there is now speed penalty under normal working conditions, so there shouldn't be any issue dealing with a 1GbE connection. Hardware: AMD 8350 with SSD and HP 1040 G3 i7 6600U with SSD (NAS: Xeon v4 with Intel i210 NICs) thx for any help regards Stephan

Hi, Sorry for the late answer but I have been quite busy. I want our servers to be as secure as the client PCs and for me it comes naturally to use a firewall on the server too. I know Windows Server has its own firewall but so does Win 7, 8 and 10 - and by having a built in firewall with security products like ESET it does provide centralizes management which is great. Could you please elaborate why you think a Server does not need a firewall? - I just can't think of a reason why a server just shouldn't be as secure as client endpoints :-)

Hi Is there any ETA on the firewall module for Windows Server 2012 as the ESET Endpoint for File Server doesn't support it? Can I meanwhile install Eset EPS for Windows on my Server 2012 to get the Firewall or will the install just fail? thx

Hi, thx for the clarification - I think this is a clarification missing in the manual. To keep track of all the rules I applied all of them to the base policy bound to IP addresses, so every client only gets the rules it needs and I can't overwrite something by accident - fine with me in my smaller setup. I think it would be sufficient to store all custom rules in the DB and make them available for programming in other polices instead of merging, as merging seems to be more complicated - just my 2c

Hi! I am having difficulties of how firewall rules hierarchy is working through a number of policies: When I set FW rules for port exceptions in policy "A" at base level ("All" group) and then later apply policy "B" at sub-group or client level with FW rules what happens to the rules applied earlier? - I assume they just great "overwritten/erased" by policy "B" because I don't see the previous rules in the config menu even if it is the same FW profile - right? If this is the case, how can I "add" another rule to client without loosing previously applied rules? Do I really have to re-enter all rules again (this would be a PITA work) !? - I was expecting that all manually entered rules are saved in the DB and could be re-used in other policies. Can someone please enlighten me, the help doesn't cover this scenario :-)

Hi After setting my rule to "force" it is now working properly. However it is strange that it doesn't work via "apply" as this is the only policy for that client and group besides the ERA policy (but there the FW isn't defined ) - possible bug? For another group I ran the "learning mode" successfully. I searched/read the KB and am still a little confused how the learning mode works in regards to policy in/for groups - does it collect data for each client and only uses the generated rules on that specific client only or is the collected data merged to the policy rule which is then distributed to all clients with that policy while set to "automatic mode"? And where can I see the generated rules from the learning mode to check? thx :-)

Hi I just duplicated my rules and configured one in learning mode and the other one with FW on and my manually set rule with the only difference that the rules are now set to "force" instead of apply". I did then apply the latter rule to one of the clients, the FW has changed to "on" (was off before) and I haven't gotten a call yet..maybe it is working this way - however during testing yesterday at night I had the feeling that FW rules/policies only were correctly applied after fresh boot

Hi MichalJ Thank you for your answer OK, I get that as this explains the error messages on my clients after I set learning mode with the policy still in the list. Mhh I only have one single policy for those clients with all the settings I need - so no root or any other policy that can interfere. So this does not explain why my FW rule is not enforced (see screenshot - currently FW is set to off so that people can work :-) ). I even created a very simple rule and only listed the ports and IP range and left any thing else empty - this should from my previous working with FWs open all the listed ports on all clients in/for this IP range - didn't work..... So to use "learning mode" I have to remove/delete my defined rule (so that the list is empty) - correct? Or does disabling the "rule" via trash bin icon suffice (rule seems still to be present then). Problem with the unsolved issue above is that when I set learning mode now and then convert it all to rules everything will be working until I have to change anything - I would have to delete all rules and do learning mode all over again because currently my manual just wasn't enforced, so new created rules alter on will also not work...

Hi I do have two issues with the ESET firewall. Because it is possible that on issues is the cause for the other issue I decided to post only one thread instead of two separate threads. OK here we go, this is the scenario: I have a number of client PCs on our networks which need open ports. So I created a FW rule to allow certain ports to be open. In the "main view" of Personal Firewall the "rule" section is set to "apply" (other option would be force - whats the difference in behavior here? However the rule just doesn't work and incoming traffic is blocked! (Management via ESET remote server.) Firewall settings: Automatic mode / Screenshot of my rule is attached In my desperation I then set the FW of those clients to "training/learning" mode. When I logged into the remote clients via RDP I saw like 50 pop-ups that there was an error with the rule creation. I checked the permission of the "EpfwUser.dat" and the permission are OK - additionally the user on those clients I was working with was the admin account. Can the error with rule creation in "learning mode" also be the reason why my rules via ERA admin are not working either? Any suggestions what to try next?

LoL :-) - yeah I will when I am at the location. Just in case anything goes wrong it is best to be there,,,

Hello community I am just trying out ESET Endpoint Sec. and the device control is giving me a little headache. My goal is to block USB storage devices but allow pretty much anything else. When I go to device control I can select "storage devices" but I can't tell ESET to only block USB attached devices - the way it says "storage devices" I do assume it will also block internal SATA/SAS hard drives as well (in the help section it says "hard discs, USB-storage" - this undermines my fear) - sub sections of manufacturer, serial etc isn't helping here as far as I can see. Is there a way to block USB storage only?