Future Changes to ESS

[Blackspear]

The aim of this thread is to give feedback to ESET as to changes we would like to see in future upgrades of ESS

Please be very specific so that your suggestion can be written in one line. After this go into DETAIL though remember to try and keep it in plain and simple terms. If it is too complex I will simply add: refer to post number XX. Basically, if I can't understand it, how can I write about it.

If your suggestion has already been discussed in previous threads please post links to such, this may help further explain your case to ESET and others reading your suggestion.

You are welcome to discuss the merits of each and every suggestion, just keep on topic, as there are other parts in the forum to discuss issues.

A list will be maintained in this first post enabling people to easily see if their suggestion is already included.

Cheers

Blackspear ;D




1. Email integration with Thunderbird.

[Jenee]

Email integration with Thunderbird

[K1LL3M]

+1 thunderbird

[kC_]

removal of built in LOCKED rules
(or create a new mode ADVANCED mode) which although similar to interactive mode.. doesnt have any premade/uneditable rules)

[sjgore]

The ability to log in to ESS for the current session (ie. until reboot or log out).

It is annoying to have to enter the password everytime there is a pop up, or every time you go in and out of settings pages in the GUI.

Steve.

[swagger01]

4. E-Mail integration with Windows Live Mail.

5. The ability to exclude applications from the firewall IN automatic mode.

[jmc777]

* Add a shortcut for 'Configure rules and zones' to the menu that pops up when you right-click on the ESS icon in the system tray.

* Make the aforementioned menu customisable: add a section to the advanced setup tree that shows all available menu options, and allow the user to tick/untick what he/she wants to show in the menu.

* Make the firewall's 'temporarily remember action for this process' customisable. Currently, you can either temporarily allow, or temporarily deny, a process. Enable the 'Show Advanced options' drop down so that I can temporarily stop my browser from making a connection attempt to a certain IP address/port, for example.

[Xophile]

* Sort by columns (sort by application, trusted zone in, etc.) in the logs

Labeled as a "bug" in this thread:
http://www.wilderssecurity.com/showthread.php?t=190011

[kC_]

ability to schedule firewall rules
e.g rule active between xx.xx pm to xx.xx pm on specific day/days

[bluesprite]

After-execution behaviour analysis. By that I mean some basic HIPS, without code injection or process launch control, but more like Threatfire's normal protection mode - i.e., known (potentially) dangerous behaviour.

[proactivelover]

make ess newer version 100% winxp sp3 compatible

[sherryxp2000]

Make the menu system more simple, more user initiative, and add CLARITY.

While I understand the normal mode, and advanced mode. Many aspects are awkward, not direct, and just a little unorthodox.

In SIMPLE mode and ADCANCED MODE, the clarity just needs to be a lot better, and items need to be easier to get to.

No matter how good EAV is, which I really like, if you make a menu system that makes it easy for total newbies, then you have accomplished something, and a lot more sales. This has often been stated in reviews about NOD/EAV/ESS being a little user unfriendly.

I always recommend your programs to my clients, and many of them make the purchase. BUT often I have to explain to them how to use it. Since 90% of my PC client base are new or unknowledgable about PCs, it just helps everyone.

[EnGenie]

An online rules database similar to Agnitum's ImproveNet (http://www.agnitum.com/support/improvenet/description.php) used by Outpost Firewall and Outpost Security Suite.

See this thread (http://www.wilderssecurity.com/showthread.php?t=197335) for details.

[Handries]

E-mail integration with the Opera Browser

[s4u]

* HIPS
* Better self defense

[toddzy]

I'd love to be able to right-click on a blocked connection in the firewall's log and have the option to "create a rule" from it. By the same token, have a button that says, "Create Rule" which lights up or becomes enabled/active once a blocked connection has been selected in the firewall's log.

[jciccone]

Thunderbird Integration

Removal of predefined rules in interactive mode. Atleast make them removable or modifyable.

Possibly add incomming rules by hand for Automatic Mode. So all outgoing traffic is allowed but incomming can be filtered by custom rules.

Possibly add Firewall rules based on the log files. So if an application is blocked, and you want to allow it later, you can right click on a log entry and select allow or block. Could be handy. Especially for adding custom rules for automatic mode, so you don't ever get prompted but it's not a bear to add rules later.

Scheduleing of the firewall rules would be a plus.

[ethernal]

i'd enjoy if ESS business edition didn't automatically drop RDP when freshly installed on a box without a grafic card. :ouch:

side note; if anyone has any good idea how i'm going to get into my Server 2003 Enterprise now that ESS firewalled it to smithereens, when i have no grafical capability in it... that'd be lofley :blink:

[adhamh]

The ability to add to Exclusions by file name, and not just location. I have 4 files that get copied around a lot, and ESET won't shut up about them being potential viruses.

[sjgore]

-{ Quote: "An online rules database" }-
A good idea perhaps, but who contributes to the database? If it would be just ESET, then fine. If users, then it kind of assumes that everybody contributing has good intentions! (ie. somebody writes a virus, then pops along to the ESET database and adds a rule for it to be allowed to access the internet).

Steve.

-EDIT- Having just visited the Outpost website:

-{ Quote: "by collecting, approving and redistributing commonly used rule sets among Outpost users" }-
Forget it. A rules database sounds like a security weakness, IMHO.

[dormix]

An automatic shutdown system after scanner on demand

[Pfredd]

IMAP and POP support for Thunderbird.

Notification (at least) or automated update when new program versions are released

[EnGenie]

-{ Quote: "A good idea perhaps, but who contributes to the database? If it would be just ESET, then fine. If users, then it kind of assumes that everybody contributing has good intentions! (ie. somebody writes a virus, then pops along to the ESET database and adds a rule for it to be allowed to access the internet).
" }-

When a user creates a new rule it would be submitted (with their permission) to Eset.
Eset would then collate these rules and either approve them as being a useful generic rule for that particular application or throw them away.

-{ Quote: "
Forget it. A rules database sounds like a security weakness, IMHO." }-

When a new program requests access, you are asked if you want to create a rule or not. You can either create your own rule or choose from one of the presets downloaded from Eset's rule database.
Even if you choose one of the presets when creating the rule, you can subsequently edit the rule for that application and refine it if you wish.

Therefore the user has total control.

Even if the preset on which the rule was based changes, the rule that you have saved for your application will not change retrospectively.

[pomocnik]

E-mail integration with the Opera Browser

[toddzy]

The ESS uninstallation process is not password-protected. I'm sure we need this so to prevent threats from removing the virus protection.

[computer geek]

regestry protection

[kC_]

*optionally allow remote dektop during installation (disabled by default/unless selected)

would be handy for some who need to install on remote machines.

best place for the setting would probably be during advanced instal after interactive mode is selected.
once the box is ticked, it then gave you options to create the specific rule/ip or ip range

[Jenee]

I think all those that want a downloadable rules database like Outpost should just switch to Outpost. I like the simplicity of ESS (having been an Outpost firewall user).
I just want to be able to edit all rules.

[GaryRW]

Whois on demand for FW logs; eg like NetPeeker v3.1

[ansys]

1. A HIPS module
2. A immunization system like in Spybot
3. A registry protection module
4. A settings protection module
5. A website advisory module
6. A reset option for the firewall rules

ansys

[ethernal]

clearer "panic button".

like, "press here in case of severe panic and major rouge network traffic", to block all incoming and outgoing traffic

[StoneDog]

Firewall improvements ....
especially
- "Game mode" where you risk to freeze when ESS is asking for a decision
- a mode that would permit know benign apps to access the internet but ask for all others (as seen with other major competitors)

HIPS as others have mentioned

... and lastly better antispam functionality as well as integration to cilents

/DOG

[ozradar]

1. Delete messages in Eset Anti-Spam email folder.
2. Scan mail before Outlook Express email rules are applied
3. Clear all log files button.
4. Ability to completely shut down ESS (while working on offline projects that ekrn.exe interupts)

cheers
Radar

[rekun]

1. Firewall exclusion in AUTOMATIC mode
2. Hips
3. A little change in the userinterface.

The GUI is a big improvement from version 2.7, but i think the GUI were better in beta 2. I better like this splash screen http://catzone.ws/uploads/posts/1190671769_eset_smart_security_3_0.jpg, just with the stats at the bottum(version signature version etc.) and the toolbar from beta 2 http://xs114.xs.to/xs114/07144/ess1.png, but ONLY the toolbar

Good to see you ask the users :thumb:

[wrathchild]

- Integration with more email clients (TheBat, Thunderbird...)
- No Hard Coded Rules
- Ability to make firewall rule from the log (in the fly)
- Improved self defense
- TCP Stateful Packet Inspection
- Better antispyware protection
- Option to rollback default firewall rules
- Less bugs
- NO HIPS PLEASE

[swagger01]

-{ Quote: "1. Firewall exclusion in AUTOMATIC mode
" }-

+1 !!!!!!!!!!!!!!!!!!!!!!!!!!!

[SoftTouchLaser]

Very much need to ability to enter Dynamic DNS names in the Trusted Zone setup (similar to the way specific IP addresses are entered).

Dynamic DNS (DDNS) allows you to create a hostname that points to your dynamic IP or static IP address.

[kringles]

Have the ESS uninstaller remove all unnecessary traces so that it would be easier to do a 'clean' reinstall. Should not have to delete files/folders/registry entries after uninstall.

[breadseed]

Anti-spam integration with more e-mail clients including Opera.

"None-changes": NO Hips, no increase in memory usage.

[Nitrous]

I want often updates of database... like Kaspersky. Not just 1-2 times in a day. I understand that ESET has good heuristics, but sometimes it's not enough.

[nodyforever]

-{ Quote: "I want often updates of database... like Kaspersky. Not just 1-2 times in a day. I understand that ESET has good heuristics, but sometimes it's not enough." }-


Eset update databse virus 4x day and whenever necessary 8) ;D


cumps

[zfactor]

-{ Quote: "+1 !!!!!!!!!!!!!!!!!!!!!!!!!!!" }-

+22222222

[MenaWSF]

Support all compression methods would be great specially Archives with Exe files, because other types of files scanned without any problems for example an mp3 file

Link for an example : http://www.wilderssecurity.com/showthread.php?t=200998

[mastabog]

(I'm not sure if feature requests can go in here or should be emailed directly to eset.)

Hello,

First of all, great work on v3.

I liked the fact that the realtime protection is configurable and that i can select it to scan files only upon execution, creation and modify or open.

I think users would want (I know I do) to see a 4th option where you separate the creation and modification into two separate options. Right now, the "creation" option also makes the protection scan files upon modification which ends up in a lot more files being scanned than only upon creation (or only upon modification).

It would be a wonderful addition in my opinion and one that will appeal to users looking for the minimum impact on system speed.

Thanks for reading,

[Nitrous]

...ad-blocker will be great too 8)

[stueycaster]

-{ Quote: "...ad-blocker will be great too 8)" }-
Use Firefox with Adblock Plus. That's all you need. I never get ads.

[mastabog]

Option to turn firewall off which is preserved between reboots. right now, the firewall is turned back on after reboot.

[kC_]

-{ Quote: "Option to turn firewall off which is preserved between reboots. right now, the firewall is turned back on after reboot." }-

use eav::)

[Corros]

anti-pishing for IE7. Just a better one as the one built in.

[mastabog]

-{ Quote: "use eav::)" }-
already thought about that but i like the antispam module :) ... besides, turningg off individual modules should be thhe users choice, not imposed by the devs

scenario: if i need it off once and the machine loses power for some reason then it will ome back up with the firewall on and i can't, for example, remote connect to it (this happened already)

[Ade 1]

-{ Quote: "...ad-blocker will be great too 8)" }-

I agree for those of us that use IE7 which I do although I currently use IE Pro to achieve this without any probs. Kaspersky has anti-banner.

There are some good ideas/features requested throughout although I don't really have any specific ones I think it is v important that ESS doesn't become bloated like a lot of all the other suites. I like the lightness of it and the fact that it offers the core protection components and not the other useless stuff you don't need.

Perhaps some form of registry protection as long as additional realtime protection doesn't slow it down. Runs light and fast at the moment and hope they keep it that way.

[xpsunny]

1. A global malware detection configuration.

2. Anti-Banner module

3. New protective defense techniques.

4. Registry malware removal feature.

[MasterTB]

-{ Quote: "After-execution behaviour analysis. By that I mean some basic HIPS, without code injection or process launch control, but more like Threatfire's normal protection mode - i.e., known (potentially) dangerous behaviour." }-


+1 for this one, it would be the best complement to NOD!!!!

[Nitrous]

unique sound signal when threat is detected

[gazzar_aus]

Option to display the rules in the order they're applied to incoming/outgoing packets..

Switch off logging for system rules



Maybe I just dont get it - but have used other commerical big box firewalls (ie Checkpoint) you display the rules in the order they're applied to the packets - that way you can see where the packet is going to fall over..

Would be nice not to flood the log files with packets you know the system is going to drop anyway. Yes I want loggin on for those packets I'm not expecting - but I dont want to log packets I know I am expecting..

[Handries]

How about identity protection?

[stueycaster]

-{ Quote: "How about identity protection?" }-
I'll second that.

[Owner]

1) HIPS Module
2) Self Protection (http://www.wilderssecurity.com/showthread.php?t=198158)
3) Active Process Scanning
4) Registry Protection

[czullo]

Smaller popup in firewall, now its big "COW".

[cham]

Allow a trusted IP even if you are in automatic mode!
Good for allowing a admin to use remote programs etc.

[RubberBandit24]

I'd also like to see a Gamer Mode (much like BitDefender and Avira) that temporarily suppresses automatic updates and sets a lower priority for scanning – overall, allowing more CPU power to go to the game, while still having decent protection (not maximum, however).

[eezdva]

make streaming to xbox360 possible in automatic mode.


i use the automatic mode as i am not very good with computers. and i want streaming in the trusted zone possible. or i want to be able to configure things in automatic mode.which now is impossible.

[Saint Satin Stain]

-{ Quote: "I think all those that want a downloadable rules database like Outpost should just switch to Outpost. I like the simplicity of ESS (having been an Outpost firewall user).
I just want to be able to edit all rules." }- I can agree with this. I list some of the other suggestions that will make ESS into what it was designed not to be, a big bloat.

-{ Quote: "Anti-Banner module
identity protection
Gamer Mode
HIPS Module
Registry Protection" }-

There are others. One of my friends wants referrer blocking and he uses Firefox so I told him about RefControl add-on. Come on now one of the reasons that we use ESS is its lightness, in addition to its effectiveness. If I had my druthers I'd drop the antispam module(let email clients do this or a standalone), but it is not too much and not a bother.

I say let the engineers and programmers at Eset do their thing without trying to follow some of our perverse desires. If you want some of these additional modules and features then use ZoneAlarm Pro or suite, Norton, or some of the other firewall.

Eset programmers are on the right path. I hope that they don't listen to much of what is written here. Increase integration to a few more email clients, but which should be determined rationally. I suggest these:
Mozilla Thunderbird
Eudora
Foxmail
Pegasus Mail
The Bat!
PocoMail

Other than the integration of these email clients I suggest this one for Eset, continue with your vision, but improve it.

[Pfredd]

Automatic program upgrade downloads.

ESS should automatically install new versions of the software, or at the very least, notify me that a new version is available.

As it stands now, I have to go to the ESET web site to see if a new version has been posted...

[kingaljr]

An actual firewall log would be nice.

[patch]

All manual / temporary selections should be included in the firewall log

-{ Quote: "I'd love to be able to right-click on a blocked connection in the firewall's log and have the option to "create a rule" from it. " }-

Agree
Should then be easily able to create a specific block or allow rule

[Jenee]

Would like to see the bug fixed where a scan in safe mode causes problems with the program display and blacked out function buttons.

[shansmi]

Add a scanner at install time to look for basic applications and services like Windows Update, Outlook, IE7, WMDC and WMP sharing to a XBOX etc. Then setup firewall rules for those applications so users when in interactive mode do not have to test all applications choosing allow/save to get everything working.

:)

[MasterTB]

Another Feature I would love to see is a sandbox for Web Browsers, not only compatible with IE, but for Firefox and Opera, so that all web browsing sessions would be completely sandboxed by ESS and thus more secure.
Perhaps something like ZoneAlarm's ForceField...

See this (http://download.zonealarm.com/bin/forcefield_x/index.html)

[diggeryo]

Scanning of the registry for malware.

The lack of this feature is the only thing stopping me from purchasing a license. I really hope to see it in the next version. I'd purchase ESS in a second then.

[pablorindt]

I would like to see the following changes:

- A better self defence, so that viruses can't take out ESS.
- A better firewall, as you can see here (http://www.matousec.com/projects/firewall-challenge/results.php), the firewall really isn't good...
- A register scanner to scan the register on viruses.
- A download mode, when i download via usenet or torrents i want my data to be scanned, this can be done in passive mode. Problem is now that i don't know whether i have to set Alt.binz as a browser or not. A download program section would be nice! :)

That's it for now.

[Galaxykiss]

it seems that the publisher detect takes time too long to wait.this happened in some situation but hope fixing it.

[Chevalier]

-{ Quote: "Automatic program upgrade downloads.

ESS should automatically install new versions of the software, or at the very least, notify me that a new version is available.

As it stands now, I have to go to the ESET web site to see if a new version has been posted..." }-

I think this is essential and fully support this idea.

[Nitrous]

Basic HIPS module is needed... 100% true

[_Logan]

I don't know if it's possible, but I'd like it if you can set incoming rules for the firewall when in automatic mode.

[nosferatu]

Allow ports other than http and pop3 to be blocked

Some customers need to block URLs beginning with https:// and there's no way. Surprisingly, ESS blocks htpps sites when they appear in an anonimyzer URL, but not when https is requested by itself.

[Ryan Hayward]

Perhaps an option for the firewall where we can choose to block all incoming ( minus those that are already allowed by program default) and only recieve alerts for outgoing....

[mauricev]

The main client screen gives a wealth of important information about clients: the last time they've checked in and their version of the virus signatures db. And even displays out of date items in red! I worry about when things don't work, not when they do, so I'd consider that most critical pieces of information.

Oddly, the reporting mechanism gives me mostly useless information. :thumbd: I think point of the program is to deal with threats, so why would I care to know about them, unless it's telling me there's some bug that just let through a threat it should have stopped?

Anyway, it would be really nice if the reporting feature could duplicate the functionality of the exporting the client list.

[MysticG]

-{ Quote: "I don't know if it's possible, but I'd like it if you can set incoming rules for the firewall when in automatic mode." }-

I know this has been requested many times and i'm just saying I'm backing this up... this is a much needed feature and would really add to the quality of the firewall.

Having your personal set rules for certain programs can be very useful for users that have special applications. This all the while not having to worry about allowing and/or denying other applications that may be running.

[ToddFibertek]

I have some suggestions:

How about ESET supporting their product 24/7 (and not just for big companies)? My system might crash on Sunday or at 8 pm.

How about having someone there to answer the phone on your support line instead of having the tech call me when I'm not at work or otherwise can't work on the problem?

How about a firewall that doesn't block internal traffic? Or regard basic protocols like NetBIOS as a threat?

How about answering emails?

Maybe consider having a specific person assigned to a ticket instead of having emails going to ~Unnecessary links removed. - Ron~ That way I can get back to the person I was talking to before.

How about having support techs that aren't condescending and impatient with users?

That would make for a rockin' 3.0.

[juguhan]

1. Allow user to select types of ICMP protocol when defining a new rule, so that user can allow or deny special ICMP types instead of all types.


2. Allow user to define remote computer address like the following:

2.a.) Define IP address shall be enhanced
IPv4:
123.123.123.*
123.123.*.*
123.*.*.*
I know this can be done by using address range or subnet, but why not make life easier;D

2.b.) Allow user to use Host name besides IP
Host name:
domain.com
sub1.domain.com
sub2.sub1.domain.com
*.domain.com
*.*.domain.com
This is useful for those remote computers with dynamic IP addresses or changing IP addresses frequently.
e.g. IP address of windows update server changes very often(like every few minutes) , and the host name is static. In order to use windows update I have to allow svchost.exe connect to ALL remote addressed at port 80/443, this is what I don't want to see:(

[Dave16]

1.HIPS
2.Behavior blocker( PDM)
3.Improved intrusion detection in firewall
4.More frequent updates
5.Improved cleaning, ex: rootkits and deeply embedded spyware.

[larryb52]

make it vista useable. I just installed this on a new vista system still will not do an on scan on a zip file unless you go to the temp dir & give it permission. It should be able to allow scanning on zip files without knowing ahead of time that the user has to do that. I'm curious how many vista users don't realize that all zip or archived files or folders are being ignored...?

[diffy]

Allow text of email tag to be modified.

The current tag:
-{ Quote: "
__________ Information from ESET Smart Security, version of virus signature database 3071 (20080502) __________

The message was checked by ESET Smart Security.

http://www.eset.com" }-
Is 1) too large , 2) poor English, and 3) no one will understand (20080502).

It is incredibly difficult to control English language statements programatically; don't even try. Let us do it.

[diffy]

Import & Export of firewall rules

If we could export the rules, modify & import, then we could:

Sort however we need to
Find duplicates easily
Modify new rules as per existing easily
See all facets in one view

[MasterTB]

How about something like McAfee Site Advisor that works with all Browsers, or something like the new AVG's Web Shield & LinkScanner...
I have been using Site Advisor plugin for IE7 and I have to tell you it would be a great add to ESS, specially because it would tell you if a web site is dangerous before going and you could avoid ESS just blocking it without further notice.

[mauricev]

I've written a followup to my initial post.

Consider this screenshot, http://www.fluxsoft.com/images/nod32confusedprotect.jpg

As you can see, there are two columns for Protection Status, which doesn't make much sense. The first one is often blank, too. This first column should just be removed.

You'll notice the dialog refers to the first client and therefore its message that the client is secure is incorrect whereas the second Protection Status column displays accurately that the data have been requested a while ago.

The dialog doesn't show the second client, but while its message, "the system is secure", would be accurate for it, the message "Ready" sounds more appropriate.

Finally, the reporting mechanism exports the first Protection status column and therefore contains inaccurate information (in both cases, it is just blank). It should export the second column instead.

[nodyforever]

-{ Quote: "How about something like McAfee Site Advisor that works with all Browsers, or something like the new AVG's Web Shield & LinkScanner...
I have been using Site Advisor plugin for IE7 and I have to tell you it would be a great add to ESS, specially because it would tell you if a web site is dangerous before going and you could avoid ESS just blocking it without further notice." }-



see: http://www.wilderssecurity.com/showpost.php?p=1165644&postcount=1


point 11


8) 8) ;D

[MasterTB]

-{ Quote: "



8) 8) ;D" }-


Nice, this will remind me to READ FIRST.. ;D ;D

PD, in any case, it was posted for EAV 3 and this is for ESS... jejeje

[GRAC]

Tools, Alerts and Notifications in ESS home, I cannot change the port number of the SMTP server used.

post.strato-mail.net uses a very different port than the standard port, thus I am not able to use that SMTP server for sending notifications to me.

This shouldn't be a big job to do I hope?

Thanks

For the rest: some want more simplicity, some want more functions. Everybody wants the system load to be low. That should be the priority.

I say: yes, super configurable for advanced users (which should also be able to log in and manage the system remotely using the IP adres and a port nr of the target machine through their browser, password protected of course) and the simple mode for non-advanced users. That way you'll keep customers on both sides of the camp. Registry protection would be nice, like the tea timer from spybot HIPS kind of thingy.

Very good product this.... I like it despite of its shortcomings. Compared to Symantec this company is doing a whole lot of good in a very small amount of time. Keep up the good work guys!

[mauricev]

-{ Quote: "Tools, Alerts and Notifications in ESS home, I cannot change the port number of the SMTP server used. " }-

What happens if you specify smtp_server:port_number?

[mauricev]

Regarding the remote administrator, I can see how the configuration editor can work as a separate program, but when making edits inside the remote console itself, the editor should be implemented as a dialog box. The reason is that a user can get confused as to what context he is in. If I have the package dialog on the screen and I open a fairly small-sized configuration editor, it can work itself behind the remote administrator screen and the user is confused as to why he is somehow stuck with a package editor dialog on the screen with all the options dimmed and no place to go. See this at http://www.fluxsoft.com/images/remotconsolehidesconfigeditor.jpg

What is also confusing about the configuration editor is that gives cryptic temp files for the names of the files it's working on. If implemented as a dialog in this context, then it can dispense with the names as they are not necessary and provide an OK button as opposed to a "quit" menu option.

Also, related to this, in the packages window, rather than having a "save" button, which should be automatic, there could be a "revert" button to retrieve an earlier version of an automatically saved configuration.

[mauricev]

Regarding the firewall rule setup in the remote admin console, some of the rules specify they are relevant to the policy-based mode, but that's confusing. The setting of interactive and policy should probably be in this dialog and then when it's changed to interactive mode, those relevant rules can be removed from the display since they are, after all, irrelevant in that mode.

Still, some rules seem to be somewhat contradictory. For example, the default rules, "Block all unknown outbound traffic" and "Allow all outbound traffic in the policy-based mode" seem to be contradictory. A number of subsequent rules starting with "Block outgoing..." seem to be in conflict with "Allow all outbound traffic.." rule. If, indeed, the intention was to say ""Allow all outbound traffic in the policy-based mode not otherwise blocked", then it should say that.

Similarly, "Block incoming NETBIOS requests" and "Allow incoming requests in the Trusted Zone" is contradictory. Why is the application for one given as "All" and the other limited to "System"?

Whenever the window opens, the names of the rules are truncated.

The "discard previous settings on the target computer" doesn't make a lot of sense. I can't think of why I'd want to keep the existing rules. That could just create chaos.

In the advanced setup, there's a specific setting to "Allow file and printer sharing in the Trusted zone", but it's not clear how this gets impacted by the NETBIOS rules. If I can't find a server, how do share it? This might be better implemented as an ordinary firewall rule, and they may be better served by being grouped hierarchically.

There doesn't seem to be much information on what the intrusion detection rules are actually doing. In fact, there isn't much documentation on how the firewall works. The manual needs to be expanded and perhaps in doing so, one will realize that how the existing default rules are rather messy and confusing.

[toddzy]

Using the latest build, 657, I was able to uninstall
ESS without specifying the password that I was using to
protect the configuration from being changed wiithout
authorisation. NOD32 v2.7 has this feature, so should ESS
and NOD32 v3. I'd like this feature to be re-introduced at
least as an advanced option if not as a mandatory feature.

[toddzy]

I'd like the feature to be able to permanently disable the spam filter and the firewall (separately) without it re-enabling itself after restarting the computer, with an option for each to ignore the fact that they are disabled so a "your at risk" message doesn't pop-up every time you turn on the computer, but keep the same red colour icon to politely indicate that something is wrong, or maybe a different colour icon if the ignore options have also been set on disabling these modules. Of course these must be advanced options which are not enabled by default. The purpose will be for troubleshooting only. For example, the no doubt infamous "web page cannot be displayed" firewall issue on Windows 2000 computers. Who's to say that something else won't go wrong in the future on other platforms. It would be good to be able to provide my clients with a temporary workaround in situations like this until the issue is fixed.

[loyukfai]

To distinguish networks *not* just based on subnet and netmask.

-{ Quote: "And yes, "The ESET Smart Security Personal Firewall only looks at subnet and netmask for distinguishing networks."

Hopefully they'll improve it soon, because it would be bothersome in some cases and there should be other information which can be used in distinguishing networks as well." }-

http://www.wilderssecurity.com/showpost.php?p=1246185&postcount=15

[jhuk]

I have not read all posts, but something that really needs added to ESS is the ability to Turn File sharing ON or OFF and Network Discovery ON or OFF in Vista.

This is done using the Windows Firewall, but since its turned off as we use ESS we cant do this.

It does support 3rd Party Firewalls controling the settings as its there in a infomation box stating so but simply ESS does not do this yet.

I do not need any of these settings on and did turn them off while running Windows firewall while Beta Testing Vista offically for MS.


http://img181.imageshack.us/img181/4326/ggggtf0.jpg

[mauricev]

To my knowledge, Smart Security is the only package out there that doesn't store client configuration on the server in some automatic fashion.

I'm only guessing that the reason it was done this way was to make it easy to reinstall the server without having to worry about reconfiguring everything. But is that really that beneficial? If, for some reason, I need to keep multiple client configurations, then I must maintain them manually. That should be the job of the program. Also, I'm not sure I could easily keep a hierarchical setup of rules.

I suggest moving the configuration of the clients into the server and then that way the configuration editor can be integrated into the remote console.

[Dramastic]

- Firewall "Notify" pop-up windows could link to more info/rule creation when clicked

- Make the order in which firewall rules are applied clear & provide move-up/move-down feature for rules

- allow specification of rules including "NOT" such as "NOT" Trusted Zone

- allow use of DOMAIN NAMES in addition to IP addresses for rules

- Option to Allow but log/queue apps for later rule creation when specified conditions met (if user is unavailable to accept / deny firewall prompts as on a server)

- Ability to request list of user contributed rules for a particular app with option to add to own rules

- Monitor actual usage over time of a given rule and suggest narrower alternative rule(s)

- Specify Apps & Apps Paths that a rule applies to with wildcards/regex

- Right-click -> Add rule from "Overview of established network connections" screen

- Ability to make rules based on signed/unsigned status of file

- Option to notify of application new access behavior even if allowed by rule

(Some of above have already been mentioned. Please consider repeated request as an additional vote for feature.)

I'll post more if any of above are ever actually implemented..

[Handries]

-{ Quote: "Allow text of email tag to be modified.

The current tag:

Is 1) too large , 2) poor English, and 3) no one will understand (20080502).

It is incredibly difficult to control English language statements programatically; don't even try. Let us do it." }-

You're so right! That is why I created by own tag for outgoing E-mails:

Outgoing mail is certified Virus Free.
Checked by ESET Smart Security 3.0.650.0
The next generation NOD32-technology
http://www.eset.com

[jhuk]

Found out 1 other aspect missing that works on all other major AV's.

Integrate with Winrar so we can scan the files from within Winrar.

[Marcos]

-{ Quote: "Found out 1 other aspect missing that works on all other major AV's.

Integrate with Winrar so we can scan the files from within Winrar." }-

You can use ecls, the command line scanner, for this purpose.

[jhuk]

I browsed to that within Winrar, but come on man, every other AV like MS/Norton/Kaspersky etc works without that.

The sooner they get it working like other AV's the better as many peeps who love Nod32 do not rate ESS so far.

This includes my previous comment in post #97.

P.S, ecls.exe actually fails and asks "Press any key to continue".

[mels]

I would like to see the TCP checksum error fixed:

http://www.wilderssecurity.com/showthread.php?p=1261060#post1261060

[bin_asc]

I`d like to see more granulas control over rules. Like, if I block a port 80, but a service uses it ( in time or realtime - in time option could be done using existing logs or such ) it would generate a message : do you want to allow x to keep listening on /use the port . Basically, if I block a port ( I`m using Win 2k3 ), it doesn`t mean an application can`t use it if I allow it. Moreover, it`s a bit hard to keep track of this.
So basically it would need a sort of mixture between : use port mode , use application mode, and the current hybrid mode.

[kennethtb]

Hi, I would like to see the blue eset icon in my system tray to be interactive throughout a scan and even auto update - either to pulse or change colour or shape in a noticable way - message balloons are timing out before the scan is completed. Also a direct link to this forum from the eset program.

[tazdevl]

Ad blocker like most of the other suites.

[ingber]

I didn't see "command line" in any search here that addressed this: Similar to other security suites, I think it would be useful to have command line control of enabling/disabling the firewall and virus/spyware, e.g., as can be done by clicking on the tray icon. This could enable more efficient batch backups, updating, etc., by including these ess commands in batch scripts.

Lester

[Marcos]

-{ Quote: "I didn't see "command line" in any search here that addressed this: Similar to other security suites, I think it would be useful to have command line control of enabling/disabling the firewall and virus/spyware, e.g., as can be done by clicking on the tray icon. This could enable more efficient batch backups, updating, etc., by including these ess commands in batch scripts.

Lester" }-

That'd be the easiest way for threats to terminate EAV/ESS

[ingber]

No. Other AV software that have such features also have password protection. The password has to be used (each time) to enable/disable such features. Scripts can be protected with passwords as well.

Lester

-{ Quote: "That'd be the easiest way for threats to terminate EAV/ESS" }-

[Hefaistos22]

my suggestion is,some kind of pop-up window when Eset firewall detect some kind of attack.Or somekind of counter,on the front page,like the counter of viruses found on pc!:) something like Detected Intrusions : 1
cause otherwise i must look at log:-/

[sakin]

In 2.7 there was a feature that showed/popped-up what a browser was downloading and allowed users to stop the download. This was cool cause any site that has ads and banners, I could just quickly and easily stop them from loading. Also allowed you to I guess "pre-check" files by having nod dl them and then load it into the page or save it. For example, youtube vids could be fully downloaded/checked by nod before it showed in the browser that it was finished loading. That was neat. Looked a lot like the firefox download thingy but you could make it transparent too. This gave me a more controlled feeling when surfing cause you knew everything you were loading was fairly safe, and gave users a powerful surfing tool.
Well point is that would be awesome to see again.

[sakin]

Also merge both the Protection status and Setup tabs together so you could enable/disable whatever you want by entering setup options in the Protection status links instead of the setup tab and have the setup tab just enter the advanced options tree.

[xpsunny]

Ability to turn on detection of "Potentially Unsafe Applications" during the installation procedure would be great.

Similar to that of detection of "Potentially Unwanted Application" option during installation procedure.

[ESS3]

1.HIPS
2.Behavior blocker( PDM)
3.Improved intrusion detection in firewall
4.More frequent updates
5.Improved cleaning, ex: rootkits and deeply embedded spyware.

+
6.Tick, the detection, the processed files, and packed, for concealment from an antivirus, with an information designation, as the prevention!:)

[crotale26]

when the antispam will be integrated in Gmail ????

[emperordarius]

1.Behaviour blocker
2.Improved spyware detection
3.Improved Firewall
4.Improved Self-Defense module
5.HIPS
6.Improved removal
7.Improved Rootkit detection

That is to keep technologies up to date for this year...The next year...who knows?

[eBBox]

I would like the ability not to install the antispam component :thumb:

[redlabour]

1. -{ Quote: "Email integration with Thunderbird" }-

Agree !

2. -{ Quote: "I would like the ability not to install the antispam component :thumb:" }-

Yes, yes, yes!!!!! :thumb:

3. - Option to download/build a GNU/Linux based Rescue/Emergency CD.

4. Option to choose which Components are secured by Password.

5. Add-On for Firefox White-Blacklist for Domainblocking.

6. Option for Firewall to import Blocklists.

[dm0000]

Improved malware detection.

I can't believe that three of the biggest threats - Smitfraud, Virtumonde & Vundo - are not fully detected by ESS.

[Teraclips]

An option to shutdown our computers when a system scan is done.

[Dave16]

Correct me if I'm wrong but I don't think ess does this.

1. in the uninstaller add an option to uninstall certain components, and keep certain components. Mainly, I would like it to keep/remember its configuration settings, and not have to re-do them every time i install a new version.

2. I think you should focus a little more on spyware/adware. ess in my experience can remove almost all the trojans it finds, but not the spyware and adware. I'm not necessarily complaining about its detection of spyware/adware, but Concentrate on removal techniques for things like Virtumonde, which is very prevalent.

[jhuk]

Why do you not use its Export/Import Option ?.

I keep my set up as I don't want to set all the firewall manually again.

[Zain]

-{ Quote: "1.Behaviour blocker
2.Improved spyware detection
3.Improved Firewall
4.Improved Self-Defense module
5.HIPS
6.Improved removal
7.Improved Rootkit detection

That is to keep technologies up to date for this year...The next year...who knows?" }-

:D :D :D

[thewinchester]

(Password protected) ability to prevent specified Outlook/Windows Mail profiles from being scanned or monitored.

This is particularly important to those who operate two or more profiles for differing email instances on a machine (like two different exchange servers). I prefer my home exchange profile being looked after by ESS, but would prefer hands off on my work/office profile..

[saffron]

A very simple request:

Change the ESS license format from "EAV-12345678 to "ESS-12345678"

[JackMauro]

I'm evaluating ESS after Outpost so, please keep ESS small, fast as it is :)
Then, i have some requests that may help a lot:

1) Allow to edit/delete pre-defined and system rules
2.1) Add in rule editor, "local" tab, the ability to specify one or more local addresses (even if not assigned to a network card), or
2.2) Allow to edit "local addresses" group (this will solve vmware bridge problems and internet connection sharing issues)
3) Allow to move rules up/down and parse them in order (so i can allow port 25 for outlook express and block it for all other applications without to add the rules in time order)

Expecially point 2 is a must before to buy it :)

Thank you

[Teraclips]

An Add-on like it will keep your passwaords and credit cards numbers so you dont have to type in and when you need that info it will auto fill. Like my norton 360 did

[1nvad3r]

A better firewall that prevent leaks.

Rated poorly on >http://www.matousec.com/projects/firewall-challenge/results.php

[rhazbun]

IMAP support and Thunderbird Support

[Nerius]

Never ever make ESS bloatware or fill it with bloatware and make it bigger and slow like norton crap.
As long as you keep it lightware and not take much of system resources as it is now, im happy 8)

[rekun]

Hips like the one in Kaspersky ie it shouldn't ask for anything but have some automatic mode like the firewall.
Exclusions for firewall in AUTIMATIC mode

[mirac]

+1 on Thunderbird support

I also wish there was localization in ESS Smart Security,
i've been wanting to recommend this product to several family members and friends, but some of them struggle with English so it isn't really an option for them.

So +1 on Swedish language support.

[gax]

Leaks Fix !

check: http://www.matousec.com/projects/firewall-challenge/results.php

[mower]

Sorting of firewall rules by rule precedence.

It would be easier to troubleshoot and plug security holes if the f/w rules could be sorted in the same order that they are processed by ESS. This KB article gives the rule priority: http://www.eset.eu/knowledge-base/how-firewall-rules-are-applied-in-ess

[PJWilkin]

some changes I'd like to see are

1) Allow rules for apps to be grouped
A good example of this is Steam applications, these all use the HL2.exe progarm but the path is different. In most cases they have the same rules

If you could "add" an application to a set of rules, this might be useful
alternatively define a group of rules and associate them to applications

2) the pop-ups to occur near the system tray or from top-right of screen. the middle of the screen causes issues on small screen resolutions if you want custom rules

3) Definable rule order (rather than those named in the KB above)
in some cases I'd like certain rules to be above others, in some below where they are.

4) The "ALL" apps group to be visible in "Application/Tree" view as some custom rules (eg to allow IDENT, DNS etc) are not visible unless to go to into "detailed view"

[dkazaz]

Allow disabling the firewall completely for specific IP addresses or zones.

That way you can use it for your Internet connection with no interference on your LAN connections.

[sxe]

Add "Parental Control" Control with New Ease to use Interface.

Thank You

[dorgane]

-1
you add, add, add...
more memory less performance

parent control is not security, it is education.
Me i want a faster and better software security not cop software with use lot memory.

[sxe]

-{ Quote: "-1
you add, add, add...
more memory less performance

parent control is not security, it is education.
Me i want a faster and better software security not cop software with use lot memory." }-

The latest version of Kaspersky and Bitdefender have "parental control" with less memory usage, why not eset can make it also. It's not possible to make less memory usage with better security.

[norky]

A silent mode that disables popups when you launch a full screen app.

[Kosak]

-{ Quote: "when the antispam will be integrated in Gmail ????" }-
How do you want to integrate EAV/ESS to webmail? It is possible only on your computer. :)

-{ Quote: "I would like the ability not to install the antispam component" }-
Why it's so big problem for you? When you don't use email client, don't use Antispam module. And finally, there is a option to disable interation to MS Outlook, Outlook Express or Windows Mail (Advanced setup tree => Miscellaneous => Email client integration).

[ESS3]

Windows Vista 64 bit Ultimate SP1- ESS 3.0.672.0

Scanning of operative memory- 0 -Object , Does not scan

Scanning of MBR Bootsector -Does not scan

Some files and folders-Does not scan

:what:

P.S.
UAC -It is impossible to switch off, not in what case!!! :P

[ESS3]

C:\Users\VITALI~1\Desktop\zabypass.exe Win32/HackTool.FWBypass.A приложение очищен удалением - изолирован Событие произошло в новом файле, созданном следующим приложением: C:\Program Files (x86)\Internet Explorer\iexplore.exe.

Scanning of operative memory-Malware The started, From a name-ADMINESTRATOR-Does not see
Модуль резидентного сканирования: 1155 (20081016)

:what:

[ESS3]

The started, From a name-ADMINESTRATOR- Eset GUI

Scanning of operative memory-Completely

[MrGSM]

1- Improve the firewall protection to place ESS in the best firewall products.
2- Add a advertising protection ( it's important).
3- Add a popup protection.

[pbmcmlxxi]

-{ Quote: "1- Improve the firewall protection to place ESS in the best firewall products.
2- Add a advertising protection ( it's important).
3- Add a popup protection." }-


Totally agree about the firewall, I believe that the firewall should be improved so that it scores better in leak tests. :)

[psychokilla]

-{ Quote: "A silent mode that disables popups when you launch a full screen app." }-

+1

I'm always getting glitches while playing games cos ESS updated itself and felt it needed to proclaim the fact. In fact I get a glitch twice, once when the popup shows and once when it goes again.

Let us have a silent mode where it will only display when it finds something wrong.

[Kosak]

Good thing should be behaviour blocker (similar tool like is in KIS). When a file wasn't caught by virus definitions, then was blocked by this module. I had to disable Anti-Malware together with System Security to infect system. So, there is good idea to have got more than one protective layer.

[ASpace]

-{ Quote: "I had to disable Anti-Malware together with System Security to infect system. " }-

What Anti-Malware and System Security ? Modules in Kaspersky or ?

Note - behaviour analysis cannot be used in corporate products and are inappropriate for servers . You mention about this feauture in Kaspersky but note their corp. products / server products are still v6 without such things like in v9 (v9 is for home users)

ESET products are the same for both home and business users , the same for home PC running Vista Home Basic or corporate user with Server 2003/2008 . Most other vendors (if not all , but let's say the biggest ones) have separate products (Norton and Symantec , McAfee , Kaspersky , Microsoft , etc - all have different home and business products)

[Marcos]

-{ Quote: "Good thing should be behaviour blocker (similar tool like is in KIS). When a file wasn't caught by virus definitions, then was blocked by this module. I had to disable Anti-Malware together with System Security to infect system. So, there is good idea to have got more than one protective layer." }-

This is what advanced heuristics does. Unlike behavior blockers that first let files execute and then monitor what they do, advanced heuristics runs files in a virtual environment and, based on the actions a file performs, decides whether it's safe to let it run in normal environment.

[Kosak]

-{ Quote: "4. E-Mail integration with Windows Live Mail." }-
V3 supports Windows Live Mail together with MS Outlook and Outlook Express.

-{ Quote: "5. The ability to exclude applications from the firewall IN automatic mode." }-
It isn't there, because in this mode firewall should work alone without user's interaction.

-{ Quote: "* Add a shortcut for 'Configure rules and zones' to the menu that pops up when you right-click on the ESS icon in the system tray." }-
If everyone will have these wishes, where should be these shortcuts?

-{ Quote: "* Make the aforementioned menu customisable: add a section to the advanced setup tree that shows all available menu options, and allow the user to tick/untick what he/she wants to show in the menu.
" }-
Unnecessary, I think.

-{ Quote: "make ess newer version 100% winxp sp3 compatible" }-
My ESS runs without one problem on XP SP3.

-{ Quote: "I'd love to be able to right-click on a blocked connection in the firewall's log and have the option to "create a rule" from it. By the same token, have a button that says, "Create Rule" which lights up or becomes enabled/active once a blocked connection has been selected in the firewall's log." }-
This option is avalaible when the application tries to connect on network.

-{ Quote: "Removal of predefined rules in interactive mode. Atleast make them removable or modifyable." }-
Avalaible from Advanced setup tree

-{ Quote: "The ability to add to Exclusions by file name, and not just location." }-
Avalaible too

-{ Quote: "POP support for Thunderbird" }-
Checking of POP3 is supported.

-{ Quote: "- Less bugs" }-
Unfortunately, every software has got bugs and probably will have in the future.

-{ Quote: "4. Registry malware removal feature." }-
V3 removes registry values, when is malware's file detected.

-{ Quote: "2. Anti-Banner module" }-
Why to add antibanner module, when it's avalaible almost for every browser (IE Pro, Adblock, etc.)?

-{ Quote: "3) Active Process Scanning" }-
Avalaible in Custom scan (Operating memory)

-{ Quote: "Automatic program upgrade downloads." }-
Upgrades of modules (Advanced heuristics, Firewall, Antispam, Antistealth,...) are included in classic update. Most of fixes are specific. When you haven't got problems, you needn't upgrade. Check changelog, please.


END for this moment. ;)

[moisesasz]

Some more skins and sounds when a threat is detected :argh:

[patch]

-{ Quote: "
I'd love to be able to right-click on a blocked connection in the firewall's log and have the option to "create a rule" from it. By the same token, have a button that says, "Create Rule" which lights up or becomes enabled/active once a blocked connection has been selected in the firewall's log.

This option is avalaible when the application tries to connect on network.
" }-
I to would like to create rules based on the firewall log. The log should also include temporary selections.

The reason is there is a variable level of expertise in our household. As such I often need to fix problem after they have occurred, so "confusing" messages do not keep coming up. Hence logging user selection & making rules from the log.

It would also address the problem that users running as without administrator rights in XP cannot create permanent rules (yes I know there is a work around by running ESS with admin rights, but I agree with the default setting preventing basic users from playing with the virus protection)

[s4u]

Will there be a new version? I hear some things about a v4 beta coming soon?

[Kosak]

-{ Quote: "Some more skins and sounds when a threat is detected :argh:" }-
Why? It isn't necessary for security software.

-{ Quote: "Will there be a new version? I hear some things about a v4 beta coming soon?" }-
Yes, during last months of this year.

[dorgane]

we can screen shot ? changelog ? date probably beta or RC ?

[Kosak]

Everything needs time. :)

[s4u]

-{ Quote: "


Yes, during last months of this year." }-
But it is November so it can start any minute now?

[nodyforever]

-{ Quote: "But it is November so it can start any minute now?" }-


Hello,


Coming soon Q4 (October, November and December) it possible at any time.


cumps

[philbates]

A single-user license ESS for Windows Server 2003.

Thanks to Microsoft's Dreamspark program I have a great operating system free of charge for my home workstation, but there is no version of ESS I can install as a trial, only an expensive 5-user commercial license pre-pay?? :thumbd:

[TBR]

Not to mention Windows Home Server, a consumer backup solution for Microsoft that i cant protect because its built around a server edition of windows.

[ASpace]

-{ Quote: "Not to mention Windows Home Server, a consumer backup solution for Microsoft that i cant protect because its built around a server edition of windows." }-


As for Windows Home Server , as it is a server you do have workstations , right ? Get a business package for 5 machines (5 is the minimum for Business edition) and use it . 1 for the server , 4 for the workstations . Although you might not have 4 additional PCs in your home , the price for 5 EAVs / ESSs Business edition is not bad at all (IMO).

[moisesasz]

tracking cookie detection, interactive-mode for realtime protection (like firewall)

[Kosak]

-{ Quote: "tracking cookie detection" }-
It's useless, because users are frightened and tracking cookies aren't so dangerous. When you will use private surfing mode (should be in prepared versions of Mozilla Firefox and Internet Explorer), it won't be needed doubly.

-{ Quote: "interactive-mode for realtime protection (like firewall)" }-
You can disable auto-cleaning in Advanced setup tree.

[ASpace]

-{ Quote: "Itracking cookies aren't so dangerous." }-

Actually , they aren't dangerous at all.

In-private function already in IE8 public builds , present in Google Chrome , as well . Firefox and Opera preparing similar functions , too. Kosak is right , these functions (anti-cookies) are obsolete and unnecessary.

[funkydude]

You can disallow 3rd party cookies in firefox/your browser and this fixes 99.9% of all tracking cookies. Assuming you don't actually browse the advertising sites, which I doubt you do.

I've had 3rd party cookies blocked forever and never had problems.

[K12RS]

I'd like to request two new features in ESSBE. The first is of much more value to me.

Feature 1 - link the target application of svchost.exe, rundll.exe, and rundll32.exe to the rule, so that I can permission them individually
Feature 2 - Allow an admin to specify which fields are automatically saved to the new rule when a user clicks add rule in Interactive mode, and allow the administrator to turn off add rule (temporary only).

The firewall would be of far more value if, when building rules sets either interactively (when prompted, in interactive mode) or directly in set up if there were an option that would allow the target application to be included in application defination for svchost.exe, rundll.exe, and rundll32.exe.

This way, "C:\windows\system32\svchost.exe{LocalService}" could be permissioned appropriated, without also permissioning "c:\windows\system32\svchost.exe{SomeMalware}" to allow traffic to the same destination port - which is especially problematic because the valid destinations to some required services (such as Automatic Updates) are nearly impossible to determine beforehand and must therefore be opened to "all", and uses the most common of destination ports (i.e. 80).

Similarly, "C:\WINDOWS\system32\RUNDLL32.EXE{C:\WINDOWS\system32\ValidApp.dll} could be permissioned without simultanously permissioning "C:\WINDOWS\system32\RUNDLL32.EXE{C:\temp\MalWare.dll}

As it is now, in a business environment where not every user can effectively manage their traffic, the firewall must be left open to allow desired service/rundll-based traffic, which opens the system more than is desirable for malware traffic.

--------------------------------

The second request would be for an administrative option on the Interactive mode, which would allow the administrator to specify the defaults for how much of the current traffic violation are included in the new rule - as it is now, in interactive mode the average user in short order permissions themselves into a state where the firewall is not blocking much of anything.

As well, there should be an option that allows the administrator to disable the creation of new rules entirely, permitting end users only "Temporily Allow".

This significantly decreases the risk of inadvertant permissioning which is too permissive, and would better allow the administrator to sift through and condense the traffic into reasonable rulesets.

Lastly, while I see significant difficulties in merging configurations if such were implemented, the ability to specify the order of and reorder the ruleset is highly desirable.

[exwoll]

i agree with the svchost.exe and rundll.exe stuff. Btw why that malware is in the computer anyway??? ESS should kill it.. but when i scanned the system with spybot, he found both of them operating there ¬¬, thats annoying.
and i'd like to see some game mode, and a advanced automatic mode that would allow you to add separate rules for some applications without changing the overall automatic protection. This would be really usefull with business software like Laser trading platform (http://www.cygrouponline.com/direct_access_software.html), that uses real-time data to work, and if u're usin ess, it just doesn't work until u uninstall ess..
Oh almoust forgott it, pls improve realtime defense against autorun viruses, ESS dont detect anythin in infected flash devices -_-.

[yaspaju]

-{ Quote: "Add "Parental Control" Control with New Ease to use Interface.

Thank You" }-

+1.....

[agoretsky]

Hello,

Support for Windows Home Server is planned for ESET Smart Security v4.0 and ESET NOD32 Antivirus v4.0 Home Edition.

You can download the beta test version from ESET's beta portal at http://beta.eset.com/.

Regards,

Aryeh Goretsky


-{ Quote: "Not to mention Windows Home Server, a consumer backup solution for Microsoft that i cant protect because its built around a server edition of windows." }-

[funkydude]

-{ Quote: "-{ Quote: "Add "Parental Control" Control with New Ease to use Interface.

Thank You" }-+1....." }-

Hmmm, -1? :p

[doktornotor]

-{ Quote: "Hmmm, -1? :p" }-

Make it -2... Seriously, there are specialized apps for this, absolutely no need to reinvent the wheel yet once again.

[Shankle]

Seems senseless to me to have a program of this quality and have to go
out and by a H.I.P.S program besides. Please think about adding some
H.I.P.S. functionality to ESS.
Thank you,

[KillerBug]

-Should have an option to dissable selected network connections before eset shuts down, and to turn them back on once eset starts back up.
-Should not give you an error about needing updates & turn red when no new updates are available on the ESET server.
-Seperate all programs/dll's out; I want to know if NERO {MALACIOUS SPYWARE} is requesting access just as much as SVCHOST {MALACIOUS SPYWARE}
-Better spyware coverage...I bought the suite for full coverage, but the spyware coverage is not enough.
-When writing to or reading from a flash drive, scanning should be done on the files on the hard-drive side. This should double read/write speeds on flash drives, and eliminate the need to scan in advance and then dissable the virus scanner to copy.

[phantomsys]

I would like to see a one click shut down pc when scan is finished and also better info when a infection is found like any damage to operating system also one click send for testing, and file lock a way to protect files I really care about and know about. I would also like to see a driver install mode so when I install new video drivers the virus shuts down until it completes same with any drivers.The best way to install drivers is with virus off. I also think when not surfing the web and playing a pc game you could have game mode or trust mode so it runs very low in back ground while I play games. Also how about password keeper for my web pages and credit card info so I could do auto log ins

[Johnny812]

Don't know if anyone mentioned this, but I would love to see some sort of an visual in/out activity meter. (similar to zone alarm, filezilla, etc?)

I would love to see something like this:

- general "Eye" icon is a dark desaturated green.

- the outer ring of the eye icon lights bright green with incoming traffic

- the inner iris/pupil of the eye turns red with outgoing traffic

with the more activity in each, the brighter the colours flash (on a five grade colour scale). what ya think?

[3nigma]

I'd like to see an in-built sandbox on Eset like they have on Norman Virus Control to analyse newer malware and trace system activity. It would have to be a good one though. I've seen new malware that can detect a sandbox environment therefore not execute as it would on a live system.

Just my 2 cents. ;)

[silverfox55]

I would expand the driver install mode to any application install mode as to be correct any application should be installed with anti-virus off. Obviously ESET would have to throw up a dialogue box to ask for confirmation before shutting down and the default would be no.

[DarrenDavisLeeSome]

Anytime you want to change settings in the Scheduler it has to be done through the EQUI and you need to put in the password for every individual setting change. Same thing for clearing the different log section entries.

How about making it so that you can make changes in the Scheduler and clear logs while in Advanced Setup so all you need to do is enter the password once?

[Football]

1. Create an option during the installation process to enable detection of potentially unsafe applications (at least at the custom installation).
2. When firewall blocks an attack (such as a worm, DNS poisoing attack etc), I would like ESET to display a message and inform the user that an attack has been blocked.
3. Improve the skin of the virus alerts. I know that an antivirus programme must do its job correctly and not be good-looking. However, it would be better in case the virus alerts were more good-looking.

[Arctucas]

I am currently using the trial version of Smart Secrity 4. I am evaluting it as a replacement for KIS 2009.

So far, I like the fact that it is far less annoying than KIS, and seems to use less system resources.

The one thing I would like to see changed; an option to disable the nag popup about the system being insecure when I choose to update manually. This popup occurs every reboot, even though no update is needed. It is quite irritating.

Thank you.

[Kosak]

It is possible to disable in Advanced setup tree.

[Farmand]

-{ Quote: "I am currently using the trial version of Smart Secrity 4. I am evaluting it as a replacement for KIS 2009.

So far, I like the fact that it is far less annoying than KIS, and seems to use less system resources.

The one thing I would like to see changed; an option to disable the nag popup about the system being insecure when I choose to update manually. This popup occurs every reboot, even though no update is needed. It is quite irritating.

Thank you." }-


Maybe this could help..

Screenshot:

http://img145.imageshack.us/img145/4329/109226222959esetsmartse.jpg

[Arctucas]

I have disabled the notification under Advanced, but it would be easier if the pop-up were disabled by default when using the manual update mode?

[ImperialOne]

An automated Gamer Mode that optimizes Firewall and the program for online gaming.

[CrunchieBite]

1. Make the about box taller along with the installed components list box so that you can see ALL of the modules without having to scroll...makes it a damned sight easier to do a screengrab before and after an update to see what modules have updated for support purposes. At the minute you have to do 2 screenshots....one for the top of the list and one for the bottom!

2. Change the events logging so that instead of just recording an entry that states "The program modules have been updated" it should actually state what module was updated, what the old version was and what the new version was (e.g. something like "The Firewall module has been updated from 1044 to 1045").


~M

[a3_alin]

all I want from eset: working as should... now has very many problems!!!

[MACHINE]

Eset Smart Security v3 & v4. If the Advanced Heuristics option is turned ON at Realtime Protection Module sometimes it will smather menus in "start" all programs tree (taskbar). Also some DIRs with mixed contents (different size and type) will block all system resources for dozens of second due to program code gap which utilizes this option rather dissapointing. There is a leakage in that peace of the code!

NOD32 2.70.39 also had the same option with primitives and coroutines in heuristics but it didn't bug at all !!! If it bugs in start menus on QuadCore machines @3GHz with 4GB of RAM @1600MHz and RAID striped disks @10K 16MB buffer it is not good at all, it is pretty bad !!! It is stupid enough, so rewrite that segment of code (to Eset experts)!!! MOST IMPORTANT is THIS: if it's bugging dll, exe, com, sfx...WHY is Advanced Heuristics bugging START MENU tree and all SUBMENUS when it should open in a few msecs, it needs 10-20s to show! Thats only shortcuts to programs, not files at all.

Best regards from Serbia

[rony474]

It would be great to integrate some HIPS ..

[ATC]

It would be nice to have ESS by default have Splash screen disabled and also have the email setting to append tag message to scanned email set to "infected mail only" instead of all messages. It'll just be more convenient this way.

[guest]

-{ Quote: "It would be great to integrate some HIPS .." }-


Nooo.... not a HIPS... this is the reason I use ESS... I want a firewall and an AV... not a program that ill look at everything I do on my system... If the hips catches something, the system is already infected...

[MACHINE]

FireWall must be more powerfull, they should concentrate on that (best FW) and on reparing options that ruin machine performance due to lack/gap of code (AdvHeur) and leave them at NOD32 2.70.39 level!!!

[captain_walker]

I hope the software does not become a victim of its own success. Over the last three years I've seen real falls in my computers' performance and an increasing tendency to conflict with other software. My internet surfing speed has fallen as well. This is with a fresh and fully updated Vista Home Premium system. I'm becoming worried about all this. There are issues cropping up all round with ESET software when you take a broad overview. ESET needs to take stock of this very quickly and carefully - else it could risk a crash and burn.

It needs to preserve speed of systems and compatibility with other software whilst providing security. No good if it's all very secure and systems underfunction. I'm not just speaking about my experience on this point.

Too often an organisation can miss the very big issues that affect people in a very practical way. Yes to security - but watch it with compatibility and speed.

[BFG]

From a customer...

When an installer is started, I would like to have the option to INSTALL or
REMOVE. This is primarily because when an install doesn't cleanly install,
there is no record on the add/remove programs menu, yet the egui.exe still
starts and prevents itself from manually being removed. The "remove" option
in the installer will eliminate the need to fully reinstall, then uninstall,
then reinstall again. It would help me greatly...

Thank you,
BFG

[MACHINE]

One stupid thing about engine update is that I must to wownload whole setup @#$&^&* Why cannot be done from within update module??? It can simply repair engine with new version and make restart...also Eset needs much stronger realtime scanner in a sense of removing residues of virus body that can be cleaned off only with automatic restart and wipeing before Win startup. Eset rearly do restarts and viruses stay in highmem!

[SwiftStryder]

1. Fullscreen/Gaming Mode; no pop-ups(on desktop but not on the fullscreen/game window)
2. Improving the firewall while maintaining good stability and performance
3. Auto shutdown after scan is finished
4. (Maybe) Check for updates automatically before a scan is initiated

[davemcl]

Support Environment Variables in exclusions:

Use case:
Say I want to exclude a particular data directory that resides in the users profile folder. The simplest implementation of this would be;

C:\Users\%USERNAME%\AppData\Vendor\Data

Without environment variable support you must hard code all paths for every user which is a maintenance nightmare.

[mulkman]

Would be great if ESET could make a uninstall removal tool like Kaspersky/norton for people that are having trouble uninstalling ESET

[BFG]

From a user:

Please add the option to schedule a scan in multiple weekly or monthly increments. For example, I want to be able to schedule in-depth scans every 13 weeks and/or every 6 months. Please add extra sections to the next version of Smart Security that allow to schedule more time between scans. I think it is overkill to scan monthly or weekly since the program is running resident and is supposed to catch anything attempting to run anyway.

[Najem1992]

hi
these are the most important things that ESS v4 needs :
1. Improving the firewall while maintaining good stability and performance

2. adding HIPS technology ( they said they added it but actually they didn't )

3- system protection ( not to be able modify any system components unless
this feature is disable )

4- for the support they should make an automated message so that the user would know that his message was recieved

5- When firewall blocks an attack (such as a worm, DNS poisoing attack etc), I would like ESET to display a message and inform the user that an attack has been blocked.

6- this one is very important I'd like to see an in-built sandbox on Eset like they have on Norman Virus Control to analyse newer malware and trace system activity. It would have to be a good one though. I've seen new malware that can detect a sandbox environment therefore not execute as it would on a live system.

7- there must be an option related only with programs notifications and it should have two buttons Enable and Disable for all and each notification

8-Change the events logging so that instead of just recording an entry that states "The program modules have been updated" it should actually state what module was updated, what the old version was and what the new version was (e.g. something like "The Firewall module has been updated from 1044 to 1045").

9- there must be a removal tool for Ess to use it when reinstalling the program


if they really make these things Ess will destroy any virus and will be the best in digital security world
and thanks for your great efforts

note : I took some ideas form people posting before me

[Najem1992]

hi again I remembered one more thing
Eset doesn't support a lot of compression methods
and that makes it week when scanning compressed files
even though that when you extract them Eset will immediately
scan them with real-time file system protection ;D

[no_idea]

-{ Quote: "4. they should make updates every 1 hour not randomly each day " }-I'd rather have excellent heuristics than potential incompatibilities and/or false positives by too frequent updates.
As Marcos has pointed out elsewhere, quality assurance takes some time.
So, even if other companies push out updates every 5 minutes, that doesn't mean, the updates cover the threats discovered 5 minutes ago!
Competitors only stress their update frequency, not the time it took them to complete the full analysis-programming-packaging-qs-delivery cycle.

-{ Quote: "6- and the support team of Ess is horrible ! they never reply to your emails at all" }-full acq - I mean, what does an automated message like this cost?

"Dear valued customer, thank you for contacting eset support. Your request has been issued ticket number 123456.
Please understand that due to the large amount of messages received from our vast customer base we cannot personally respond to each and every message sent to us."

At least we then would know our message has been received.

-{ Quote: "7- When firewall blocks an attack (such as a worm, DNS poisoing attack etc), I would like ESET to display a message and inform the user that an attack has been blocked." }-oh! - Hopefully, eset doesn't listen to this!
Imagine you are on an open wireless network directly connected to the Internet - with all the messages about blocked threats you wouldn't be able to get any real work done.
At the very least, eset should make this kind of messages optional

[Marcos]

-{ Quote: "
Imagine you are on an open wireless network directly connected to the Internet - with all the messages about blocked threats you wouldn't be able to get any real work done.
" }-
Exactly. Just try enabling logging of blocked connections in the IDS setup and you'll probably see the firewall log growing in size quickly. If a balloons was displayed as well, you might easily end up with alerts being shown up even several hours or days after disabling firewall until there's no alert to display in the queue.

[Najem1992]

-{ Quote: "Exactly. Just try enabling logging of blocked connections in the IDS setup and you'll probably see the firewall log growing in size quickly. If a balloons was displayed as well, you might easily end up with alerts being shown up even several hours or days after disabling firewall until there's no alert to display in the queue." }-
ok this point isn't necessary ...
but what about other 8 pointes I mentioned
they're so important ;D

[Najem1992]

Eset firewall is very weak make it better !
Eset doesn't clean archives he delete all archive
but it should only delete infected files inside it and leave the rest
like KASPERSKY !!!

[ESS3]

add to ESET Smart Security
SandBox, analysis file!!! :)

[ESS3]

-{ Quote: "
Eset doesn't clean archives he delete all archive
but it should only delete infected files inside it and leave the rest
like KASPERSKY !!!" }-
http://smages.com/i/84/73/84739604cb03e45146f8f55695461d7d.png
;)

[ladhani]

Hello,

Since I upgraded to ESET Smart Security (ESS) version 4, we have the following issue:

We are using in our company a number of browser applications for uploading (BIG) documents to our servers (Flash / PHP uploaders).

Since we upgraded from version 3 to version 4, the upload progress bar in the browser application does not work correctly. It immediately shows 100% upload ready with an impossible high upload speed. And next nothing happens in the Browser application for a very long time. After some time, the browser application continues (upload ready).

What ESET 4 seems to do, it directly catches the uploaded file, first storing it locally for scanning and than uploading it on the background to our servers.

This is very disturbing for us as our employees think that the browser has frozen up as they see the upload progress bar directly at 100% and nothing seems to happen (for a long time).

A crude solution for this issue is to completely disable HTTP - scanning (Advanced config -> Antivirus -> webaccess -> HTTP -> disable HTTP contol).

As a result ALL HTTP scanning is disabled.

Enabling HTTP scanning and adding our domain names to the list of domains not to be checked, DOES NOT solve the upload issue.


========================================================

Here you can try / test this your self:

http://www.tinywebgallery.com/en/tfu/web_demo2.php

The upload size of this Flash uploader is limited to 300 KB but if you squeeze your netwerk speed, you will see that the progress bar does work correctly with HTTP-filter turned OFF and goes directly to 100% if you turn the filter on again.

=========================================================




So what we would like to see is:

A - make a distinction between HTTP UPLOADING and DOWNLOADING in this setting.

B - make it possible to define domains that are free from HTTP scanning for UPLOADS. So we could add our company domains to the ESS of our empoyees so they can upload the files to our servers using our webapplications. So NO underwater caching of upload files by ESS.

This would really help our company, our employees and our system administrator to setup a better balance between using user friendly company web applications with upload fnctions - and - a good safe and secure use of ESS.

[JeroenKM]

I like to see

password protection for diffrent items (av, fw and spam)
ra remember install password !
ra remember package install (que) to client
uninstall parameters for other vendor goal
better support for lan and wan detection for updates
having id's in tasks and profiles voor added deleting and renaming
possibility for month scan by task
offering discount program for home users (make eset bigger)
component updating like patches (saw more users of this)

I now use the products( av, ess and ra) for 2 weeks :) for 320 users (ex mcafee epo user)

[a3_alin]

-{ Quote: "hi
these are the most important things that ESS v4 needs :
1. Improving the firewall while maintaining good stability and performance

2. adding HIPS technology ( they said they added it but actually they didn't )

3- system protection ( not to be able modify any system components unless
this feature is disable )

4- for the support they should make an automated message so that the user would know that his message was recieved

5- When firewall blocks an attack (such as a worm, DNS poisoing attack etc), I would like ESET to display a message and inform the user that an attack has been blocked.

6- this one is very important I'd like to see an in-built sandbox on Eset like they have on Norman Virus Control to analyse newer malware and trace system activity. It would have to be a good one though. I've seen new malware that can detect a sandbox environment therefore not execute as it would on a live system.

7- there must be an option related only with programs notifications and it should have two buttons Enable and Disable for all and each notification

8-Change the events logging so that instead of just recording an entry that states "The program modules have been updated" it should actually state what module was updated, what the old version was and what the new version was (e.g. something like "The Firewall module has been updated from 1044 to 1045").

9- there must be a removal tool for Ess to use it when reinstalling the program


if they really make these things Ess will destroy any virus and will be the best in digital security world
and thanks for your great efforts

note : I took some ideas form people posting before me" }-
you are right!!!

[ramremo]

-{ Quote: "http://smages.com/i/84/73/84739604cb03e45146f8f55695461d7d.png
;)" }-
This option isn't sufficient to clean archive from its viruses ,, ESET deletes the whole archive however cleaning mean to delete only the files of infection in it.
Do you have a reason???

[colin99]

I would strongly suggest that ESET get their firewall to pass Windows logo test (or logon test I can't remember). I tried to repair Windows XP a while ago and this error message kept comming up that eset firewall doesn't pass windows logo test, the messages kept comming up and I had to abort the repair and reinstall Windows XP after a format. Also this message pops up several times when I install eset smart security.

Next, I've had a few rootkits install themselves on my system over the course of 6 months, looks like the same one each time. eset SS can't detect it and I get lots of pop ups from the firewall that svchost is trying to communicate with someone somewhere(I'm using interactive mode). It doesn't tell you the web sites or that anything odd is happening. If I start Webroot spysweeper with av and disable eset av, webroot gives me notifications (above the task bar) of all the websites(full name) that a program on my computer is trying to connect too. This is what tipped me off that I had malware. I ended up using unhackme to remove it, webroot av couldn't find it either. Eset needs to improve their rootkit detector.

Shaun

[hamzah95]

Add HIPS
Add a behavior blocker
Make the signatures databases much bigger.
This will truly make it the best in my oppinion

[MasterTB]

-{ Quote: "Hello,

Since I upgraded to ESET Smart Security (ESS) version 4, we have the following issue:

We are using in our company a number of browser applications for uploading (BIG) documents to our servers (Flash / PHP uploaders).

Since we upgraded from version 3 to version 4, the upload progress bar in the browser application does not work correctly. It immediately shows 100% upload ready with an impossible high upload speed. And next nothing happens in the Browser application for a very long time. After some time, the browser application continues (upload ready).

What ESET 4 seems to do, it directly catches the uploaded file, first storing it locally for scanning and than uploading it on the background to our servers.

This is very disturbing for us as our employees think that the browser has frozen up as they see the upload progress bar directly at 100% and nothing seems to happen (for a long time).

A crude solution for this issue is to completely disable HTTP - scanning (Advanced config -> Antivirus -> webaccess -> HTTP -> disable HTTP contol).

As a result ALL HTTP scanning is disabled.

Enabling HTTP scanning and adding our domain names to the list of domains not to be checked, DOES NOT solve the upload issue.


========================================================

Here you can try / test this your self:

http://www.tinywebgallery.com/en/tfu/web_demo2.php

The upload size of this Flash uploader is limited to 300 KB but if you squeeze your netwerk speed, you will see that the progress bar does work correctly with HTTP-filter turned OFF and goes directly to 100% if you turn the filter on again.

=========================================================




So what we would like to see is:

A - make a distinction between HTTP UPLOADING and DOWNLOADING in this setting.

B - make it possible to define domains that are free from HTTP scanning for UPLOADS. So we could add our company domains to the ESS of our empoyees so they can upload the files to our servers using our webapplications. So NO underwater caching of upload files by ESS.

This would really help our company, our employees and our system administrator to setup a better balance between using user friendly company web applications with upload fnctions - and - a good safe and secure use of ESS." }-


I quote you entire message because the same thing is happening in the Opera Community with the new flash uploader, you put some files in the queue and then you hit upload, after that you see 100% for the first file and the browser freezes... depending on how many files and how big they are after a few minutes you see download complete or the browser crashes because it does not register activity directly.
This is baaad behavior from Eset, specially when I don't have active mode enabled for my browser.. Hence, the antivirus should check the files on disc and let the browser do it's business alone.

[OLDXTECH]

PROVIDE A "RESUME" FEATURE [ LIKE MICROSOFT! ] FOR FILE DOWNLOADING THAT HAS BEEN STOPPED AND RESET BY A DISCONNECTED DIALUP LINK.

I have just spent over 10 hours trying to download all the files after "upgrading" from 3.0.650 to 3.0.684 with my 40kps dialup connection, which is the only service I can get here in the boondocks. On the 6th try, over the weekend with lower traffic to the servers in "Lower Slobervia", I finally got them done. If there is ANY clitch in the link, the files fail and start all over again from the beginning! Microsoft solved this ages ago - time for ESET to do the same.

[simexi]

Is there feature that check rules and file paths ? I mean if you delete / uninstall some program, so no point to keep those rules.

Just tested something and the rule was still there even file didnt exist. Or is there some delay for cleaning?

[grib78]

-{ Quote: "I quote you entire message because the same thing is happening in the Opera Community with the new flash uploader, you put some files in the queue and then you hit upload, after that you see 100% for the first file and the browser freezes... depending on how many files and how big they are after a few minutes you see download complete or the browser crashes because it does not register activity directly.
This is baaad behavior from Eset, specially when I don't have active mode enabled for my browser.. Hence, the antivirus should check the files on disc and let the browser do it's business alone." }-

Yes, same problem of upload to dropbox or mobileme (see my thread)

[Atomas31]

- An anti-phising protection that could be integrated into browser (IE, Firefox, etc.)
- Improve detection and removal of virus, malware, spyware, adware, keyloggers, root-kits, etc...
- HIPS
- Cookie blocker
- An easy way to report false positive or real threats and an email like what you received it and/or that you have corrected the situation.
- improve the firewall wich seems the weakest part of the suite

[ESS_Lover]

-{ Quote: "hi
these are the most important things that ESS v4 needs :
1. Improving the firewall while maintaining good stability and performance

2. adding HIPS technology ( they said they added it but actually they didn't )

3- system protection ( not to be able modify any system components unless
this feature is disable )

4- for the support they should make an automated message so that the user would know that his message was recieved

5- When firewall blocks an attack (such as a worm, DNS poisoing attack etc), I would like ESET to display a message and inform the user that an attack has been blocked.

6- this one is very important I'd like to see an in-built sandbox on Eset like they have on Norman Virus Control to analyse newer malware and trace system activity. It would have to be a good one though. I've seen new malware that can detect a sandbox environment therefore not execute as it would on a live system.

7- there must be an option related only with programs notifications and it should have two buttons Enable and Disable for all and each notification

8-Change the events logging so that instead of just recording an entry that states "The program modules have been updated" it should actually state what module was updated, what the old version was and what the new version was (e.g. something like "The Firewall module has been updated from 1044 to 1045").

9- there must be a removal tool for Ess to use it when reinstalling the program


if they really make these things Ess will destroy any virus and will be the best in digital security world
and thanks for your great efforts

note : I took some ideas form people posting before me" }-


That's awesome !! :o
I hope ESET will do these things !

[plx]

add a "global" cleaning level control to change all the cleaning levels simultaneously

[The PIT]

Enable Jumbo Frame support so ic an use my Gigabit lan the way it should be used.

[TsunamiZ]

How about add Internet activity lights in system tray? Similar to the ZoneAlarm system tray icon? Useful for indicating Internet activity...

http://img98.imageshack.us/img98/9655/sdagdae0.gif

[rony474]

i would like to have ,

1. sandbox
2. hips

:)

[Subgud]

I would like a sanbox as many others here. But it should be userfriendly. Not to draw parallels to kasperksy 2010, but theire sanbox is a but hard to figure out when it comes to downloading files.When running IE or FF in sandbox, if you download a file it is hard to find it when the download finish.

If ESS should have a sandbox I whish it would run web browsers and email clients in sandbox bye default. And it should be possible to download files and save them wherever you want. Just like you do when you are using your browser without a sandbox. :)

[maxrockbin]

I was very disappointed that the Smart Security Firewall is unusable with Window 7 RC 64. Connection to the internet is not made for at least several minutes on Windows startup and is lost on sleep. This has been reported in the forums but seems unacknowledged by ESET.

ESET is my first choices and formerly was the best.

Other problems amount to a lack of polish and testing. This problem makes the product unusable.

[cssoz]

-{ Quote: "I was very disappointed that the Smart Security Firewall is unusable with Window 7 RC 64. Connection to the internet is not made for at least several minutes on Windows startup and is lost on sleep. This has been reported in the forums but seems unacknowledged by ESET.

ESET is my first choices and formerly was the best.

Other problems amount to a lack of polish and testing. This problem makes the product unusable." }-

the "Internet connection problem" aka (disconnects the PC due to the firewall is unstable) happens to me ALL the time before i use Personal firewall module: *1051*. BUT that doesn't mean it is fixed. I got disconnected once,the ESS v4.0.437 was install for over 3 -4 weeks; so that's any huge improvement

OS: Windows XP SP3 32-bits.

my current NOD32 Smart Security v4.0.437 spec:
-{ Quote: "Virus signature database: 4401 (20090906)
Update module: 1028 (20090302)
Antivirus and antispyware scanner module: 1234 (20090820)
Advanced heuristics module: 1097 (20090809)
Archive support module: 1101 (20090903)
Cleaner module: 1044 (20090826)
Anti-Stealth support module: 1012 (20090526)
Personal firewall module: 1051 (20090812) <----------------
Antispam module: 1012 (20090608 )
SysInspector module: 1212 (20090414)
Self-defense support module : 1005 (20081105)" }-


but few friends of mine doesn't have any problems with Vista 32 or 64 bits

[cham]

FolderSharing with windows 7 is not working, according to several posts here it is not just me.

Hope this will be fixed soon! :)

[halfhalo]

How about it working with either Thunderbird 3 or Postbox. Postbox should be a simple fix, since it already works with Thunderbird 2.

[Stoner81]

1. Make it work with Thunderbird 3.
2. Make the firewall far more configurable (to that simlar to Outpost), so you can manually block/allow applications etc.
3. Make the GUI much easier to navigate round (like in v2.7).

[agoretsky]

Hello,

Please enable Test Mode in the Update settings to download ESET Personal Firewall module v1052, which introduces support for Windows 7 homegroups.

Regards,

Aryeh Goretsky

-{ Quote: "FolderSharing with windows 7 is not working, according to several posts here it is not just me.

Hope this will be fixed soon! :)" }-

[xxJackxx]

-{ Quote: "Hello,

Please enable Test Mode in the Update settings to download ESET Personal Firewall module v1052, which introduces support for Windows 7 homegroups.

Regards,

Aryeh Goretsky" }-

It is working fine for me with this update. :thumb:

[Woodgiant]

a selective kill file opportunity

[Woodgiant]

A sandboxie browser and
the TCP three-way handshake

[Woodgiant]

make eset start as the very first application every time

[Marcos]

-{ Quote: "make eset start as the very first application every time" }-

All crucial drivers already start as soon as possible.

[nikhil_spunky]

i really feel that the trojan and spyware detection of eset is weak...firewall works good in interactive mode.plz strengthen it also boot time scanner should be introduced..at times it thus happens that eset detects a virus but is not able to delete it..can be resolved with the help of boot time scanner. and yes a sandbox for ie and firefox.. and one parental control also..

[pegas]

I noticed new firewall module 1053 has been released (probably only with the test mode enabled). Can we have a changelog or a short description of changes at least?
Thx.

[Marcos]

-{ Quote: "I noticed new firewall module 1053 has been released (probably only with the test mode enabled). Can we have a changelog or a short description of changes at least?
Thx." }-

Support for 3 new languages.

[pegas]

-{ Quote: "Support for 3 new languages." }-
Thx Marcos for clarification.

[Woodgiant]

a wlan plugin into the browser that visual show the status of your Wlan Connection

[Woodgiant]

a Eset Roboform toolbar that gives a greater protection against keyloggers and protect personal information. (AES 256 bit)

[Woodgiant]

a more easy way to renew your license

[subxero]

Can you please Add

1) A KeyBoard Scrambler - Similar to a program called KeyScrambler.
which will stop keyloggers. (Very important Feature)

2) A sandBox feature.

3) also it is possible to provide a stand-alone firewall.

thank you

[cssoz]

-{ Quote: "Can you please Add

1) A KeyBoard Scrambler - Similar to a program called KeyScrambler.
which will stop keyloggers. (Very important Feature)

2) A sandBox feature.

3) also it is possible to provide a stand-alone firewall.

thank you" }-

i don't think any anti virus program out there provide a stand-alone firewall versions. plus that would cost a lot more by having NOD32 AV + stand alone firewall.

[plassenopdestoep]

1) Also a keyboard scrambler
2) Better firewall in automatic mode, now it justs blocks incoming connection and stealths ports, now there is no outbound connection control. Interactive mode is very nice, but not for inexperienced users.
3) Detection and removal of commercial (corporate keyloggers) I know this is not practical for corporations spying on their employees, but it could be disabled default and enabled in advanced setup tree.
4) Antiphishing support like in Kaspersky(downloads a database with phising sites and then checks url's with firefox addon(don't know how it works in IE) so no sending url to eset to check but check locally on pc with updateble database for better privacy.)
5) HIPS
6) Behavourial scanner

Then it will truly be the best :)

[Woodgiant]

a possibility for encryption of selektive key files

[Woodgiant]

Parental Control Software in Eset Smart Security.........

[TheRenegade]

I think the biggest things that need adding are

1. A key scrambler
2. A link scanner like AVG, pretty cool. Web searches are ranked as safe or not
3. Anti-phishing support
4. A "game" mode. So I don't freeze when I am playing and ESS updates

[wrathchild]

A usable log when "Log all blocked connections" are checked in IDS. Right now log is pretty unusable because of flickering, every time when several lines are added.