Bug with Firewall module when using Interactive Mode (EIS) (still isn't solved)

[Andrew_ESET_account 0]

Eset Interactive Firewall can stop appearing suddenly

'Reset window layout' button doesn't help

The new connections are blocked until restart, no pop up window
I think there are not so many eset-users who uses an interactive firewall and the problem doesn't seem big for developers. But it's been so long and developers haven't solved the problem yet. Maybe they don't even use this functionality by themselves. And there is a not so obvious line of the code.

I noticed the bug happened last time when it looked like I had plenty of requests of one app, it's also possible that Eset Firewall can't proceed with the big list of requests.. It happened when I locked the computer (Win+L) and came back in a few minutes when the firewall could keep some apps requests. One day it happened when I just changed the active desktop (Ctrl+Win+Left or Right). I was trying to find this window thinking it's just hidden (with WinCheat app) but failed (I also thought it was Windows bug)
I perfectly understand I need to point it out as deep as possible. I can't really find out when exactly the bug appears but it exists. Some people have sent you logs/settings in the previous topics... it didn't help

Maybe you don't have enough time to fix this GUI problem, but you've updated GUI almost when Windows 11 appeared although it looked good. Please, Eset, draw your attention to the feature.

I've never participated in any topics like this... so maybe it'll help

Thanks

[Marcos 5,468]

Are you able to reproduce this if you install v18.0.12 from scratch with default settings and change only the firewall mode to interactive? If so, please create a full dump of ekrn via the advanced setup -> tools -> diagnostics (make sure to change the type to full first and save the settings). Create a dump of egui.exe via the Task manager. Then collect logs with ESET Log Collector and supply us with the generated archive along with the dump of egui.exe.

 

[Andrew_ESET_account 0]

OK. I'll try.

[Andrew_ESET_account 0]

Did I understand you correctly I need to create a full dump of ekrn and a dump of egui at the time of the problem?

[Andrew_ESET_account 0]

I have good news. I've just reinstalled ESET. Switched its firewall to Interactive mode and successfully got this problem again.

So I created the dump files. How can I send you the dump files securely? Do they have any danger information from the memory inside?

[Andrew_ESET_account 0]

I tried to open a few apps and one of them was trying to connect to different servers a lot of times.

It fells like ESET Firewall can't handle all the requests and then its interactive window stops appearing.

[Andrew_ESET_account 0]

P.S.

I also want to point out the last version with trial mode was installed

I can also confirm the fact that ESET doesn't allow any new connections (which are not described in the created ESET firewall rules) after this bug appears in interactive mode. It feels like that interactive window is bugged and it's waiting for an answer somewhere.

But if the firewall switched to 'auto', all the outgoing connections are allowed as defined by default.

[Andrew_ESET_account 0]

Oh.. I forgot to collect logs using ESET Log Collector so I successfully faced with the problem again and made all the dumps one more time with the log as well. The question is how to send the files securely. I can't attach them here because it's gonna be public and I don't want my information to be public.

Can I send the files to this chat so you could get them?

[Marcos 5,468]

You can upload the file(s) to a file sharing service, such as Google Drive, One Drive, etc. and drop me a DM with a download link. Anyways, files that you upload here are available only to ESET staff and are removed after some time.

[Andrew_ESET_account 0]

The files are in DM

[Andrew_ESET_account 0]

On 11/30/2024 at 3:13 PM, Marcos said:

You can upload the file(s) to a file sharing service, such as Google Drive, One Drive, etc. and drop me a DM with a download link. Anyways, files that you upload here are available only to ESET staff and are removed after some time.

Have you got the files?

[Marcos 5,468]

I'll update you when there's an update to the ticket from developers.

P_ESSW-19188