ESET Internet Security 10 : Recommended settings

Discussion in 'ESET' started by viktik, Jan 10, 2017.

  1. viktik

    viktik Level 24

    Sep 17, 2013
    1,377
    3,795
    Unoccupied
    Hazaribagh
    Windows 10
    Kaspersky
    General Settings


    • Click “Advanced setup
    [​IMG]

    • Enable “integrate into system
    [​IMG]

    HIPS RULE SETTINGS

    • HIPS rule can be created to protect user files stored in certain folders.
    • Click “Edit” next to Rules


    [​IMG]

    • Click “Add
    [​IMG]

    • Set “Rule name” as “PROTECTED FILES
    • Set “Action” as “Ask
    • Under “Operations affecting“, enable “Files
    • Click “Next


    [​IMG]

    • Select “All applications
    [​IMG]

    • Enable “Delete file“, “Write to File” and “Direct access to disk” as shown below
    ESET INTERNET SECURITY 10  HIPS SETTINGS_28-12-2016_19-36-58.jpg

    • Select “Specific files” as shown below
    • Click “Add
    [​IMG]

    • Click “” as shown below
    [​IMG]

    • Select D:\ partition
    • Click “OK
    [​IMG]

    • Click “OK
    [​IMG]

    ESET INTERNET SECURITY 10  HIPS SETTINGS_28-12-2016_19-37-30.jpg

    • Similarly add other partitions in which files has been stored, as shown below
    • Don’t add C: partition in which Windows OS is installed
    • Click “Finish
    ESET INTERNET SECURITY 10  HIPS SETTINGS_28-12-2016_19-38-19.jpg

    • Click “OK
    [​IMG]

    • Click “OK
    ESET INTERNET SECURITY 10  HIPS SETTINGS_28-12-2016_19-38-34.jpg

    HIPS Alerts


    • When an application tries to access files, ESET HIPS generates alerts as shown below.
    • Allow only safe applications. Deny if you don’t want application to modify protected files.
    • To permanently allow safe application access to files, select “Create rule and remember permanently
    • Tick “Only for operation” and select “All file operations
    ESET INTERNET SECURITY 10  HIPS ALERT_28-12-2016_19-40-55.jpg



    • To check the reputation of the application, click “Details
    [​IMG]

    • Next to “Reputation:” you can see the Eset rating of the application.
    • Green color means the application is safe.
    • Yellow color means application is unknown
    • Red color means Application unsafe
    [​IMG]

    FIREWALL INTERACTIVE MODE

    • Set “Filtering mode” to “Interactive Mode
    • Click “OK
    ESET INTERNET SECURITY 10  INTERACTIVE FIREWALL SETTINGS_28-12-2016_19-59-55.jpg

    • When an application tries to connect to Internet (network), Eset Firewall shows this alert.
    • If application is safe then click “Allow“, otherwise “Deny
    • If you want to permanently allow a safe application to have access to internet, then select “create rule and remember permanently
    • Click “Allow
    ESET INTERNET SECURITY 10  INTERACTIVE FIREWALL ALERT_28-12-2016_20-02-02.jpg

    ESET INTERNET SECURITY 10  INTERACTIVE FIREWALL ALERT_28-12-2016_20-03-24.jpg


    • If you want to block access to the Internet for an application click “Deny” when Firewall alert is shown.
    ESET INTERNET SECURITY 10  INTERACTIVE FIREWALL ALERT_28-12-2016_20-22-54.jpg

    • To see Reputation of an application click “details
    ESET INTERNET SECURITY 10  INTERACTIVE FIREWALL ALERT_28-12-2016_20-29-18.jpg



    • When installing an application, if application tries to connect to internet, then select “Remember until application quits
    • Click “allow” or “deny” as you wish
    ESET INTERNET SECURITY 10  INTERACTIVE FIREWALL ALERT_28-12-2016_21-39-16.jpg
     
  2. Oxygen

    Oxygen Level 42

    Feb 23, 2014
    3,135
    6,060
    United States
    Windows 10
    Emsisoft
    Thanks for taking the time to post all of this @viktik.
     
  3. ant_gamal

    ant_gamal Level 4

    Dec 30, 2016
    197
    322
    Egypt
    Windows 10
    ESET
    Thanks alot
     
    ravi prakash saini and novocaine like this.
  4. Adz.

    Adz. Level 1

    Dec 15, 2016
    43
    101
    elsewhere
    Great tutorial, was looking for this.
     
    ravi prakash saini and novocaine like this.
  5. novocaine

    novocaine Level 4

    Aug 19, 2016
    165
    2,678
    Surabaya
    Windows 7
    Comodo
    thanks @viktik well done, have you tried the HIPS settings against ransomware?
     
  6. viktik

    viktik Level 24

    Sep 17, 2013
    1,377
    3,795
    Unoccupied
    Hazaribagh
    Windows 10
    Kaspersky
    tested one time.
    HIPS does protect from ransomware, if user takes correct decision.
     
  7. cryogent

    cryogent Level 3

    Oct 1, 2016
    113
    403
    DTP&GD
    Romania
    Windows 10
    Emsisoft
    #7 cryogent, Jan 14, 2017
    Last edited by a moderator: Mar 23, 2017
    @viktik Thanks for sharing with us such good info.
    I only have one problem , in my ESET IS 10 HIPS section i don't have "Enable Protected Service" !!!

    And other problem although HIPS remain in Automatic Mode I can not delete any folder created even in the C partition.
    I don't no why is doing that, but does that after i make this settings in HIPS rules.
    I had to reset ESET to default.
    Remained the only settings for firewall and document protection.

    Ok...its a complet mistery for me but after 4 times trying to make the HIPS settings now its working.:eek:
    I'm sure i have done the right settings from the first time.
     
    ravi prakash saini likes this.
  8. Syafiq

    Syafiq Level 7

    May 8, 2017
    332
    2,139
    Student
    Indonesia
    Windows 10
    Emsisoft
    Hmm.. you should enable the Advanced Heuristics/DNA(Smart Signatures) on Real Time Protection ThreatSense Parameters.:)
     
    ravi prakash saini likes this.
  9. Malware Person

    Malware Person Level 4

    Jun 8, 2016
    156
    244
    United States
    Windows 10
    BitDefender
    thanks for this post! Very useful for ESET users!
     
    jadinolf and ravi prakash saini like this.
  10. HarborFront

    HarborFront Level 34
    Content Creator

    Oct 9, 2016
    2,305
    5,771
    Far East
    #10 HarborFront, Sep 24, 2017
    Last edited: Sep 24, 2017
    Thanks

    I'm late but I'll catch up :)

    One question. I'm not using any desktop email client (using only web based emails) so should I disable EVERYTHING under the 'Email Client Protection' section. This will include the

    Email Clients
    Email Protocols
    Threatsense Parameters
    Alerts and Notifications
    Antispam Protection
    Antispam Address Book

    My thinking is that disabling all those not needed will help to speed up ESET. Parental Control is another example which I disabled since I'm the only one using my tablet

    Thanks again
     
    Siavash and Daniel Hidalgo like this.
  11. clyde

    clyde Level 1

    Nov 14, 2012
    131
    25
    Wow,I haven't seen this around in a while.Thanks again.
     
  12. Rebsat

    Rebsat Level 5

    Apr 13, 2014
    218
    604
    Sulaimaniya, Iraq
    Windows 7
    Emsisoft
    Thank you very much for posting this great tutorial bro(y):love:
     
  13. jadinolf

    jadinolf Level 4

    Jun 20, 2014
    152
    841
    Retired
    California U.S.A.
    Windows 7
    ESET
    Great information.
    Many thanks
     
  14. Sunshine-boy

    Sunshine-boy Level 22

    Apr 1, 2017
    1,184
    5,226
    IRAN
    Windows 10
    ESET
    #14 Sunshine-boy, Jan 19, 2018 at 4:17 PM
    Last edited: Jan 19, 2018 at 4:35 PM
    @viktik
    Your rules are not correct! with such rule, every 30 sec you have an ugly alert from HIPS.
    1-Because the windows stuff tries to write To C.
    2-When you browse the web the browser want to write to his folders(Again C).
    3-It will make a lot of alerts If you want to install an App!Also a lot of pain for user:notworthy:
    I have no idea why did you create such rules!?
    If someone wants the right way to protect his files with Eset Hips:
    Place your important files on somewhere and inside a folder then set a block rule for all file operation! like I put my Text files on D:\new folder\example.rtf and set block rules for this file via HIPS. don't forget that Eset Hips will not protect your files from access or copy.it only protect from writing to file or delete the file(doesn't work/probably bug?!).
    There is another bug in Eset Hips that Auto allow an operation if you don't answer the alert in provided time(around 45 sec)!So an ask rule for your files is the worst thing that you can do lol! it should be a block rule not ask because the asks rule will auto allow the access so ransomware will encrypt your files if you don't answer the alert fast(as I said about 45 sec) I used to answer Eset alerts fast!
    I use Easy File Locker(but also Eset hips) which protects my files in a better way than Eset!
    i just gave you another reason that why you shouldn't pay for any Av :giggle::cautious:
     
    dinosaur07 and Azure Phoenix like this.
  15. Slyguy

    Slyguy Level 22

    Jan 27, 2017
    1,114
    4,448
    Fortinet Engineer
    USA
    Other OS
    Speaking as a network security guy, ESET has a REALLY GOOD Firewall if you tweak it. I don't run ESET, but there is no denying it's efficacy.

    I'll have to put it in a VM and go through the settings. But the ability to block WSD polling, LLMNR, UPNP, SMB, IGMP, RD, Bridging, Metro Apps and other crap is priceless really.. ARP request blocking outside of trusted zones is also awesome to avoid ARP spoofing or poisons. It makes me feel like I should use ESET if my network wasn't already well protected. I'd certainly recommend it based on the firewall alone to be honest.

    Oh, the ability to disable some of the logging, disable sending in files and turning off the 'sharing with community' stuff is icing on the cake. Good stuff.
     
  16. Sunshine-boy

    Sunshine-boy Level 22

    Apr 1, 2017
    1,184
    5,226
    IRAN
    Windows 10
    ESET
    #16 Sunshine-boy, Jan 19, 2018 at 5:05 PM
    Last edited: Jan 19, 2018 at 5:34 PM
    Slyguy I also Love Eset and the Hips in policy mode is strong(lockdown mode for HIPS) I have no problem with it because I learned how to handle the bugs! Ofc it has the best firewall among others, A smart hips and its the lightest av in the world! but there are HIPS bugs that Eset doesn't care much about them(because no one uses their hips maybe rare ppl)! that's why I say you shouldn't pay for any Av because the developers don't fix bugs fast or even ignore you :) its true for all other Avs as well! the good thing is Eset fix the bugs but so late...Eset is my first choice! but I will not pay for any Av never xd
    For fixing bugs you need to run it in interactive mode+some custom rules +asnwer the alert fast or bb protection:D it needs learning curve like I wasted about 4 months of my life on it haha.anyway I like it:D
    For you but not for Asian countries!
     
  17. Hero7

    Hero7 New Member

    Oct 25, 2017
    6
    2
    Alex
    Windows 7
    Norton
    would love that you make one for norton
     
Loading...
Similar Threads Forum Date
Video Review ESET Internet Security Review | V11 | 2018 Video Reviews Nov 30, 2017
Help Me Decide ESET Internet Security 2018 vs G Data Internet Security 2018 Compare Apps Nov 11, 2017
Video Review ESET Internet Security 2018 Video Review Video Reviews Oct 29, 2017