Reply to thread

Message

<blockquote data-quote="SomeRandomCat" data-source="post: 928956" data-attributes="member: 90137">By default unknown applications are &#039;restricted&#039; and a notification prompt comes up.&nbsp; I guess it is not technically default-deny, but similar.I installed ESET Internet Security on a fresh windows install recently and I am pretty sure I had to manually enable the HIPS/application control feature (whatever they call it).&nbsp; If that is not normal, then I don&#039;t really know what to say, but thanks for the information.Edit: So I think I had to change it to &#039;interactive mode&#039; like you said, which is what I remembered as &#039;enabling the HIPS&#039;, even though as you said, the HIPS was enabled by default, but it was in &#039;automatic mode&#039;, which seems to basically rely on behavior blocking / signature / heuristics?&nbsp; The impression I got, was that automatic mode was black-list oriented and did not feel like a &#039;HIPS&#039; int he sense that it did not allow white-listed applications, but instead let anything through that was not known to be bad.Although my terminology was off, hopefully you get what I meant.&nbsp; It seems we agree as to its functionality in automatic mode, though: <a href="https://malwaretips.com/threads/eset-13-1-16-0.99147/post-876467" target="_blank">Update - ESET 13.1.16.0</a></blockquote>

[QUOTE="SomeRandomCat, post: 928956, member: 90137"] By default unknown applications are 'restricted' and a notification prompt comes up. I guess it is not technically default-deny, but similar. I installed ESET Internet Security on a fresh windows install recently and I am pretty sure I had to manually enable the HIPS/application control feature (whatever they call it). If that is not normal, then I don't really know what to say, but thanks for the information. Edit: So I think I had to change it to 'interactive mode' like you said, which is what I remembered as 'enabling the HIPS', even though as you said, the HIPS was enabled by default, but it was in 'automatic mode', which seems to basically rely on behavior blocking / signature / heuristics? The impression I got, was that automatic mode was black-list oriented and did not feel like a 'HIPS' int he sense that it did not allow white-listed applications, but instead let anything through that was not known to be bad. Although my terminology was off, hopefully you get what I meant. It seems we agree as to its functionality in automatic mode, though: [URL="https://malwaretips.com/threads/eset-13-1-16-0.99147/post-876467"]Update - ESET 13.1.16.0[/URL] [/QUOTE]

Verification