Reply to thread

Message

<blockquote data-quote="Parsh" data-source="post: 866578" data-attributes="member: 58090">Old ESET users are gonna rejoice! ESET at forum used to keep the stand that some suspicious actions are not blocked, or even flagged, in order to reduce FPs and to not worry the average user.As [USER=29489]@Azure[/USER] shared, now that the default protection &quot;Balanced&quot; is <a href="https://help.eset.com/eis/13/en-US/idh_config_scanner.html" target="_blank">indicated</a> as stronger than the earlier default, advanced users must be happy. And there&#039;s one more level above the default <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />I noticed another change. The option to disable &quot;Access Setup &gt;&gt; Require full administrator rights...&quot; has been removed from the GUI and subsequently from the config file ---&gt; [CODE=xml]&lt;ITEM NAME=&quot;EKRN_CFG&quot;&gt;&nbsp; &nbsp; &nbsp; ...&nbsp; &nbsp; &nbsp; &lt;NODE NAME=&quot;RequireElevation&quot; TYPE=&quot;number&quot; VALUE=&quot;0&quot; /&gt;[/CODE]The user now has to answer UAC prompts for every (interactive mode) Firewall alert in case of saving rules. Not applicable to HIPS alerts.</blockquote>

[QUOTE="Parsh, post: 866578, member: 58090"] Old ESET users are gonna rejoice! ESET at forum used to keep the stand that some suspicious actions are not blocked, or even flagged, in order to reduce FPs and to not worry the average user. As [USER=29489]@Azure[/USER] shared, now that the default protection "Balanced" is [URL='https://help.eset.com/eis/13/en-US/idh_config_scanner.html']indicated[/URL] as stronger than the earlier default, advanced users must be happy. And there's one more level above the default :) I noticed another change. The option to disable "Access Setup >> [B]Require full administrator rights...[/B]" has been removed from the GUI and subsequently from the config file ---> [CODE=xml]<ITEM NAME="EKRN_CFG"> ... <NODE NAME="RequireElevation" TYPE="number" VALUE="0" />[/CODE] The user now has to answer UAC prompts for every (interactive mode) Firewall alert [I]in case of saving rules[/I]. Not applicable to HIPS alerts. [/QUOTE]

Verification