Brits

I think that the option you are looking for is "Do not ask for protection type of new networks. Automatically mark new networks as public" this is in ""personal firewall"->"known networks" of the "Eset Security Product for windows" policy area. Documentation for the client side is at: https://help.eset.com/ees/6/en-US/index.html?idh_dialog_epfw_trusted_zone.htm

Hi - this policy looks fine to me (and works fine on my server). One thing to note is that the policy is evaluated on the client and this is not instant (depends upon the connection interval set for remote administrator agent) so you may need to leave it a while.

I've done something similar using three nested groups to detect whether Eset Endpoint was not installed and Vipre (my old product) was also not installed. Took a while to work out how to get this to work using three separate dynamic group templates which are applied to nested dynamic groups (each one filtering out the machines that do not match the rule) and the 'Operation" option (setting to NAND so it's looking for queries that return FALSE). My rules (nested) are: Name: "Installed Software List Populated" - Operation: "AND" - Rule: "Installed software . Application vendor" contains "Microsoft" Name: "No ESET Endpoint Security" - Operation "NAND" - Rule: "Installed software . Application name" contains "ESET Endpoint Security" Name: "No Vipre" - Operation: "NAND" - Rule: "Installed software . Application vendor" contains "ThreatTrack Security, Inc." The first rule was added because sometimes newly added clients had not populated the software list (and as such rules checking if something is not installed would always return TRUE); there will always be something from Microsoft installed so this just confirms that the list has been populated. Note that I'm not looking at whether the agent is on-line (the task triggered by the group will not run if it's not online so this is not a concern). I'm also not sure that its worth checking if the Agent is installed because the software list will not be populated if the agent is not on the machine. Hope this is of some use.