Traffic blocking

[Sergyi 0]

ESET Smart Security Premium has a function Block all traffic on the Firewall.  Is this feature turned on only manually or does it turn on automatically when certain actions trigger?

Edited July 15, 2019 by Sergyi

[Marcos 5,069]

It can be triggered only manually. However, it's possible to create a new firewall profile that will block all traffic (with some exceptions, e.g. to DHCP server, ESMC server, ESET's servers, etc.) and such policy can be assigned to a dynamic group which will activate, e.g. when an active threat was found (applicable only for business products  managed by ESET Security Management Center).

[Sergyi 0]

Thanks for reply Marcos. Can you show the settings (screen)  ESMC for EES,  situation when an active threat is found and all traffic is blocked, except for connecting to the ESMC. How can i configure this posibility?

[Marcos 5,069]

It's in the list of default policies:

[Sergyi 0]

Thanks. I saw this politic. But how to make it work when an active threat is found.

[Marcos 5,069]

You can create a new dynamic group (DG) template with an expression like this:

Then create a new DG using this template and assign it the desired policy (ie. the one that will limit network connections to ESMC and EEI servers). As of then, any computers with active threats will fall into this DG and the policy will be applied to them automatically as long as they will stay in the DG.

To make it clear, consumer products which ESET Smart Security Premium is cannot be managed by ESMC.

[Sergyi 0]

It need to create dynamic group and apply policy to group.  I considered the home and business versions.

Quite understandable. Thanks

Edited July 15, 2019 by Sergyi