Custom firewall rule for signed application on network share

[Guest Daniel]

Hi

When we start our application from a network share, a path-independent firewall rule does not work, signer is not recognized. No signer is listed in the log.

If the application is started from a local path, the firewall rule works and the signer is listed in the log.

Is this behavior intended if no path is used?

Thank you for your support

---

ESET Endpoint Security: Version 11.1.2039.2

[Marcos 5,277]

That's correct. It's not possible to verify file signature in a network share since ekrn.exe runs in the local system account. Use the network path instead.