Disabling HIPS alert in v9

[hihi 0]

Hi there,

 

I just upgraded to EAV v9 and I am impressed that UI is much bigger in higher resolution which makes it easier to read.

 

I had disabled HIPS and now in v9 it comes with security alert which I can't find a way to disable the alert in User Interface Elements > Statuses > Application statuses.

 

Any idea?

 

Thanks.

[TomasP 316]

Hello,

This is a desired behaviour, as disabling HIPS can lower the protection level and should be done only for short periods of time as part of troubleshooting or testing.

[ManiusNG 0]

It's bad, because I use f.e. HIPS from other security application (Agnitum FW).

Now I'm gonna have exclamation mark all the time -> I can miss a real threat...

[Marcos 5,072]

By disabling HIPS you effectively also disable Advanced memory scanner, Exploit Blocker as well as Self-defense. The first two are essential security features that work as the last layer of defense as they enable detection of otherwise obfuscated malware in memory upon execution. That said, disabling HIPS prevents ESET products from providing maximum protection and your computer is more vulnerable to threats.

[thor3 0]

Hi moderator - I think you're missing the point: ManiusNG is choosing to disable HIPS because that's what he wants to do, and he accepts any risks due to that choice. And, in his case, his risks are mitigated anyway because he's using another application to provide HIPS. With no context it makes sense for EAV to throw an alert when HIPS is disabled, but not enabling a user to disable or hide that alert actually *increases* risk because if a user chooses to keep HIPS disabled, as ManiusNG points out, a red alert icon will always appear in the system tray, making it so that a user will not be easily made aware if EAV is throwing an alert for a different reason. So, the way this should work is that a user should be able to disable such an alert if they choose to disable HIPS.

[Marcos 5,072]

I doubt that the OP is aware of the interconnection of HIPS with other protection features. My understanding is he wanted to disable HIPS in order to use an alternative HIPS solution. However, in ESET's products HIPS is utilized by other protection module so disabling it would cripple protection capabilities to a bigger extent than one could think of.