ESET Endpoint Security - Local Firewall Rules Edit

[EjEm 1]

Hello, 
where am I able to edit firewall rules locally ? 
Firewall blocking ssh&vnc connection. 
I'm able to do that via management console ofc. but is there any way to do it locally, like on "windows" product ? 

[Marcos 5,277]

Endpoint Security v8 is meant to be managed primarily via ESET PROTECT. It is not possible to edit rules locally.

[erpomik 0]

YIKES!

So because we were forced to update ESET Endpoint Security for macOS on Tuesday this week, due to the release of macOS 15, we have lost a very important feature for all our developers?

I sincerely hope, this is not true.

Regards
Ernst Mikkelsen
Trifork IT Services

[Marcos 5,277]

If you don’t need to manage ESET via ESET PROTECT, you can install ESET CyberSecurity v8 with a simple firewall rule editor once it is released next month.

[EjEm 1]

Yes we wanna manage via ESET Protect, but in our setup, settings are open to edit for Developers, because lot of them use specific tooling and it's impossible to setup it via policies. I understand that you have CyberSecurity for non-managed environments, but with CyberSecurity we also lose other management options and deployment am I right ? 

[Feign 0]

On 9/20/2024 at 12:06 PM, Marcos said:

Endpoint Security v8 is meant to be managed primarily via ESET PROTECT. It is not possible to edit rules locally.

😢

These are the tools I know of that does NOT work with ESET Endpoint Security version 8 on macOS (both macOS 14 and macOS 15). All of them worked fine with ESET Endpoint Security v6 (and customized firewall rules).

The typical error reported by the tools below is a "broken pipe" error - it more or less happens for any tool doing anything but http traffic - how this was not found during testing is beyond my comprehension. 

• Gradle builds (specifically the daemon),
• Android Studio compile (gradle),
• adb,
• azure cli,
• TestContainers / container commands over tcp

and the list keeps growing.

We have a company policy that requires the developers to have ESET Endpoint Security installed and active. But at the moment this prevents them from doing their jobs.

The only workaround we know of at the moment is for the developer to temporarily disable the ESET Network Filter in macOS settings (it is not enough to disable web filtering/firewall in ESET settings - broken pipe still occurs).

Since the developers work with these tools all day - they more or less have to disable the ESET filter throughout the entire workday - rendering ESET Endpoint Security v8 more or less useless for that type of work.

So, please reconsider the decision about rules in Endpoint Security 8 being controlled solely by PROTECT. Getting the basic rules from PROTECT would be fine. But for this type of use case the users need to be able to adjust the basic rules. 

I agree with @EjEm that CyberSecurity does not sound like a solution, unless it has management/deployment options like Endpoint Security does.

[erpomik 0]

Hi

Sometimes major changes to a product are needed. This we can understand.

Just as @EjEm, we need to deploy and configure ESET Endpoint Security for Mac (and other platforms) from ESET PROTECT.

Our current problem is that the release of macOS 15 on Tuesday last week forced us to change our policies for Mac to deploy V8 instead of the good old V6. The result of this is, that our developers (200+) are no longer able to add entries to their local firewall which renders the following tool unusable:

• Cannot connect to Apple Vision Pro headset

• Cannot compile in Android Studio (Gradle)

• Cannot debug using IntelliJ IDEA

• Cannot do Gradle builds (Unable to communicate with the Gradle daemon)

• Cannot use Android Debug Bridge

• Cannot use Azure CLI

• Cannot send command to TestContainers when running integration tests on java/kotlin projects

We might have overseen the tool, that can tell us which firewall rules, content filters or application filters we need to add to the policies we deploy for macOS. We might also have overseen the page in the documentation, that describes the defaults for Automatic filtering mode.

In short: We need a guide or at least a hint on how to determine, which rules are needed to make our developers happy again.

Thank in advance
Ernst Mikkelsen
Trifork IT Services