Roak Static 0 Posted August 24, 2019 Share Posted August 24, 2019 Hi All, I've noted for some time now the ESET is blocking me from uploading to my local NAS. When I uninstall ESET I can upload no issues as soon as the software is installed I'm immediately unable to upload anything. I've tried adding rules for the IP address, Zones, switching it interactive mode to create a whole bunch of rule for the NAS. The only thing that if found that works is uninstalling. I'd appreciate any help! Link to comment Share on other sites More sharing options...
Administrators Marcos 5,267 Posted August 24, 2019 Administrators Share Posted August 24, 2019 Does any of the following make a difference? - pausing ESET's firewall - pausing real-time protection - disabling protocol filtering in the advanced setup - disabling HIPS and rebooting the machine Roak Static 1 Link to comment Share on other sites More sharing options...
Roak Static 0 Posted August 24, 2019 Author Share Posted August 24, 2019 Disabling HIPS and rebooting the machine did the trick! Is there anyway of getting around this without disabling HIPS? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,267 Posted August 24, 2019 Administrators Share Posted August 24, 2019 Please do the following now: - re-enable HIPS - in the advanced HIPS setup enable logging of blocked operations - reboot the machine - reproduce the issue - disable advanced HIPS logging - collect logs with ESET Log Collector and upload the generated archive here. Link to comment Share on other sites More sharing options...
Roak Static 0 Posted August 24, 2019 Author Share Posted August 24, 2019 Logs a requested essp_logs.zip Link to comment Share on other sites More sharing options...
Administrators Marcos 5,267 Posted August 24, 2019 Administrators Share Posted August 24, 2019 Does temporarily disabling Self-defense and rebooting the machine resolve the issue? Link to comment Share on other sites More sharing options...
Roak Static 0 Posted August 24, 2019 Author Share Posted August 24, 2019 No, issue still purists even when Self-defense is disabled. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,267 Posted August 24, 2019 Administrators Share Posted August 24, 2019 That is weird because only self-defense rules blocked some operations according to the log. I assume that you rebooted the machine after disabling SD, didn't you? If that actually didn't help, I'll need to discuss further steps with engineers next week. One more thing I've noticed, you have the LiveGrid reputation system disabled. It's an important feature that protects you from new borne threats, improves performance and cleaning of threats, hence I'd strongly recommend enabling it. Link to comment Share on other sites More sharing options...
Roak Static 0 Posted August 24, 2019 Author Share Posted August 24, 2019 Yep, rebooted the machine after disabling Self-Defense (Screenshot Below) I likely disable LiveGrid as apart of testing, I'll re-enable it now. Thanks for looking further into this for me, I'll be great to get a permanent solution to this. Link to comment Share on other sites More sharing options...
itman 1,746 Posted August 24, 2019 Share Posted August 24, 2019 It might be Eset's IDS protection detecting an ARP poisoning attack. Ref.: https://forum.eset.com/topic/20321-create-an-exception-for-arp-cache-poisoning-attack/?tab=comments#comment-98876 Check your Eset Network log for any like related event entries. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,267 Posted August 24, 2019 Administrators Share Posted August 24, 2019 Since disabling HIPS helped, it should have nothing to do with the firewall (IDS). Link to comment Share on other sites More sharing options...
Roak Static 0 Posted August 25, 2019 Author Share Posted August 25, 2019 Disabling IDS didn't do anything, uploads are still being blocked to the NAS. Link to comment Share on other sites More sharing options...
Recommended Posts