Firewall rules cannot be changed in override mode (ESET Endpoint Security 11.0.2044.0)

[labynko 6]

Hello.

In ESET Endpoint Security 11.0.2044.0, firewall rules cannot be changed in override mode: almost all parameters are not configurable.

[Marcos 5,741]

In override mode you can only disable particular rules, editing was probably never supported.

[labynko 6]

This is sad news. It is very, very unfortunate that the functionality in ESET Endpoint Security is degrading.

[Marcos 5,741]

10 hours ago, labynko said:

It is very, very unfortunate that the functionality in ESET Endpoint Security is degrading.

I dare to disagree with this statement since editing rules in override mode has never been supported in the past so there's no change from old versions in this regard.

Please elaborate more on the use case. Would you like to fine tune a specific firewall rule locally on an endpoint in override mode before you make the change in a policy for more clients?

[labynko 6]

11 hours ago, Marcos said:

I dare to disagree with this statement since editing rules in override mode has never been supported in the past so there's no change from old versions in this regard.

You are mistaken about this. This functionality works fully in many versions, but often, like some other functionality, it stops working in some versions.

Here are the versions in which the firewall override works:

• 9.0.2046.0
• 10.0.2045.0
• 10.1.2050.0
• 10.1.2058.0

Here are the versions in which the firewall override does not work:

• 9.1.xxxx.0
• 10.0.2034.0
• 11.0.2032.0
• 11.0.2044.0

11 hours ago, Marcos said:

Would you like to fine tune a specific firewall rule locally on an endpoint in override mode before you make the change in a policy for more clients?

Yes.

11 hours ago, Marcos said:

Please elaborate more on the use case.

Here are typical situations when you may need to change firewall settings in override mode:

1. Temporary creation and change of any rules: locally you can make changes that are valid for no more than 4 hours. If you use a policy, you can accidentally forget about the applied policy, but it will continue to be in effect.

2. Convenient local debugging of firewall rules: no need to wait a minute each time until the policy is applied again.

3. If you need to change the firewall settings without disabling it, when there is no connection with ESET PROTECT, this cannot be done without locally overriding the firewall rules.