Jump to content

Can't add or edit firewall rules


Recommended Posts

Until a year ago, I had been using a trial version of ESET Internet Security without any problems. Then I bought a licence for a different antivirus software. Now that it's expired, I decided to buy a licence for ESET. And it's working fine, except for the fact that I can't add or edit rules. It says that there was an error while saving and to make sure I have privileges to change settings. I have no idea what's wrong and how to fix it.

Link to comment
Share on other sites

  • Administrators

Are you able to change other settings and cannot save only firewall rules?

What OS do you have? Do you have UAC enabled?

Link to comment
Share on other sites

Posted (edited)

It would appear so, but I didn't check all settings. 

Win 7 64bit Ultimate. UAC disabled.

Edited by konradk
Link to comment
Share on other sites

As a test, create a HIPS rule; you can delete it afterwards. Is the rule created and saved w/o issue?

Link to comment
Share on other sites

  • Administrators

Please provide a Procmon log from time when you attempt to save a firewall rule.

Have you tried uninstalling ESET and installing it from scratch?

Link to comment
Share on other sites

  • Administrators

1, Start logging with Procmon
2, Attempt to save a firewall rule
3, Stop logging
3, Save the log, compress it and upload it here.

Link to comment
Share on other sites

I was asking if I'm supposed to create both logs that are mentioned there. But that tells me the process log is enough.

So, here it is Logfile.zip

Link to comment
Share on other sites

  • Administrators

Please check if the Administrators group and System account have full control granted for C:\ProgramData\ESET\ESET Security.

Link to comment
Share on other sites

I don't know how to check that, but I can't access the ESET folder. I'm getting the "You don’t currently have permission to access this folder" error. So, I guess I don't have full control.

Link to comment
Share on other sites

  • Administrators

Please run:

icacls C:\ProgramData

and provide the output of the command.

Link to comment
Share on other sites

"C:\ProgramData Everyone:(F)"

"Successfully processed 1 files; Failed processing: 0 files"

 

Btw, the original output was in Polish, but from what I googled it's how it should read in English.

Link to comment
Share on other sites

  • Administrators

Please uninstall ESET temporarily and make sure that the folder C:\ProgramData\ESET\ESET Security doesn't exist. If exists, are you able to delete it? Are you able to create it manually and create and write to files in that folder? For an unknown reason ekrn was getting access denied when attempting to save rules there.

Link to comment
Share on other sites

Posted (edited)

It didn't exist. I was able to create it and write files into it. 

But I think I solved the problem. I played with permission settings on the security tab of the ESET folder. I don't know if I should've done that in the first place, but it seems to have helped. 

Edited by konradk
Link to comment
Share on other sites

 

2 hours ago, konradk said:

It didn't exist. I was able to create it and write files into it. 

But I think I solved the problem. I played with permission settings on the security tab of the ESET folder.

Did you uninstall Eset, then re-install Eset after deleting the C:\ProgramData\ESET\ESET Security folder you created? The Eset installer will create this folder and populate it with data.

Link to comment
Share on other sites

Actually, it was just C:\ProgramData\ESET folder. Somehow I didn't notice it was supposed to be C:\ProgramData\ESET\ESET Security. 

Anyway, no, I didn't delete that folder. But after reinstalling ESET, it became inaccessible. Then I checked the properties of the folder and fiddled with the security settings and got it working.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...