Running Endpoint Security without Firewall possible?

[TPok 1]

Hi,

we hust upgraded from Endpoint Antivirus to Endpoint Security. I wanted to do a "smooth" upgrade and so I thought I just disable all additional features and enable them afterwards one by one. I alos did this with the firewall. I created a policy (in ERA) and set the firewall to diabled. I thought this would disable the ESET firewall and the WIndows firewall would step in and continue to work.
But now the Windows 10 Security Center complains that there is an issue as you can see in the attached pictures.

Is it possible to use Endpoint Security without the ESET firewall (using the Windows firewall)? What is best practice here?
If I enable the ESET firewal and use the setting "adapt Windows firewall rules" will I still be able to deploy firewall rules through group policy?
What are the advanteges of the ESET firewall instead of the WIndows firewall? I think basically both are packet filters.

Thanks.

 

[Marcos 5,143]

This is ok and this panel is fully under control of the OS. You should see this in the firewall setup:

The good thing is that even with the firewall disabled, Botnet protection and Network protection modules remain enabled. Thanks to that the computer will remain protection from possible attacks via vulnerabilities in network protocols coming from unpatched computers.

 

[TPok 1]

Yes I can see in this window that the Windows firewall is on. So am I right that the Windows Security Center is a bit dumb and I can ignore the warning?

Anyway, what are the advantages of the ESET firewall if I choose to enable it?

Edited July 24, 2018 by TPok

[Marcos 5,143]

Yes, you can ignore it. We cannot affect what is reported in the WD Security Center.

ESET firewall is an advanced one and provides additional features, such as: IDS and exploit detection, dynamic firewall profiles, learning mode support, monitoring of changes in network-aware applications, etc. A part of the firewall is Botnet protection and Network protection. While the former serves to detect malicious communication of bots and thus can detect and block brand new malware not detected by other protection layers, the latter protects the computer from exploits exploiting vulnerabilities in network protocols. They are not included in ESET Endpoint Antivirus. However, these features are not disabled by disabling the firewall in the advanced setup.

[TPok 1]

Ok. Thank you. I'll have a look at activating the additional features step by step.