HIPS Learning Mode

Discussion in 'ESET NOD32 Antivirus' started by gugarci, Nov 24, 2011.

Thread Status:
Not open for further replies.
  1. gugarci

    gugarci Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    288
    Location:
    Jersey
    I read in the user guide that HIPS in learning mode functions for a set time before it expires, 14 days at the most. After the learning mode expired does ESET set HIPS back to auto or does it set it to something else like interactive. Also I get no pop ups at all using auto mode will we get some pop up in learning mode? reason i ask Is i shared our desktop with my family.

    Thanks everyone,
    and have a Happy Thanksgiving.
     
  2. gugarci

    gugarci Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    288
    Location:
    Jersey
    No one here knows what setting HIPS switches too once the learning period is over. o_O
     
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    To my best knowledge, you should be prompted to choose between auto mode with rules and interactive mode at the end of the learning period.
     
  4. gugarci

    gugarci Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    288
    Location:
    Jersey
    Thanks Marco. If in the end I choose auto again will ESET also use the rules it made during learning mode? I wish there was a lot more documentation on using HIPS. In their user guide they give you 1 whole page. o_O
     
  5. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Yes, the auto mode is actually called "Automatic mode with rules" so the rules you've created will definitely be applied.
    Common users are recommended to use HIPS with default settings when crucial system settings and files are protected. Advanced users can create custom rules to make protection against malware even better, however, in this case they should know how to respond to prompts or what to do if certain actions carried out by legit applications are blocked.
     
  6. gugarci

    gugarci Registered Member

    Joined:
    Mar 30, 2009
    Posts:
    288
    Location:
    Jersey
    Thanks.
     
  7. piranha

    piranha Registered Member

    Joined:
    Mar 21, 2005
    Posts:
    623
    Location:
    Laval, Qu?bec, Canada
  8. tommy456

    tommy456 Registered Member

    Joined:
    Jun 11, 2011
    Posts:
    137
    i tried this but eset simply ignores my custom rules as it wants to make choices for me and take over
     
  9. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,731
    Location:
    New York City
    NOD Help defines Automatic Mode with Rules - "Operations are enabled, except pre-defined rules that protect your system." It seems to me the term 'pre-defined' means rules internal to NOD32, not entered by the user.
    An in-depth tutorial of HIPS would be very valuable.

    To be honest, I really dislike the HIPS.
     
    Last edited: Dec 3, 2011
  10. piranha

    piranha Registered Member

    Joined:
    Mar 21, 2005
    Posts:
    623
    Location:
    Laval, Qu?bec, Canada
    I agree, I dislike it too. IMO, HIPS in automatic mode dont had very much security and other mode are too difficult for many users. I think sandboxing would have been a better choice than HIPS.
     
  11. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    And I disagree :)

    Sanboxing would not require less user interaction than what the HIPS does in the default auto-mode.

    AFAIK ESET is always trying to build software that requires as less user interaction as possible, and sandboxing is not ideal for that.

    Also. Remember that the HIPS IS NEW and ESET has informed us several times already that it will be improved over time.
    So let it mature a little before you doom it out.

    Personally, I think it will be great once ESET has made all the necessary improvements to the HIPS module :thumb:
    Just be a little patient :isay:
     
  12. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,731
    Location:
    New York City
    HIPS in Automatic Mode offers very little extra protection.
     
  13. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    At the moment yes. But that's not what I wanted to say with my post.
     
  14. piranha

    piranha Registered Member

    Joined:
    Mar 21, 2005
    Posts:
    623
    Location:
    Laval, Qu?bec, Canada
    never heard that sanboxing needs user interaction

    and if HIPS is not finish why include it in V5 ?
     
Thread Status:
Not open for further replies.