HIPS Learning Mode

I read in the user guide that HIPS in learning mode functions for a set time before it expires, 14 days at the most. After the learning mode expired does ESET set HIPS back to auto or does it set it to something else like interactive. Also I get no pop ups at all using auto mode will we get some pop up in learning mode? reason i ask Is i shared our desktop with my family.

Thanks everyone,
and have a Happy Thanksgiving.

 

No one here knows what setting HIPS switches too once the learning period is over.

 

To my best knowledge, you should be prompted to choose between auto mode with rules and interactive mode at the end of the learning period.

 

Thanks Marco. If in the end I choose auto again will ESET also use the rules it made during learning mode? I wish there was a lot more documentation on using HIPS. In their user guide they give you 1 whole page.

 

Yes, the auto mode is actually called "Automatic mode with rules" so the rules you've created will definitely be applied.
Common users are recommended to use HIPS with default settings when crucial system settings and files are protected. Advanced users can create custom rules to make protection against malware even better, however, in this case they should know how to respond to prompts or what to do if certain actions carried out by legit applications are blocked.

 

Thanks.

 

read this can help or........... confuse you

https://www.wilderssecurity.com/showthread.php?t=309273

 

i tried this but eset simply ignores my custom rules as it wants to make choices for me and take over

 

NOD Help defines Automatic Mode with Rules - "Operations are enabled, except pre-defined rules that protect your system." It seems to me the term 'pre-defined' means rules internal to NOD32, not entered by the user.
An in-depth tutorial of HIPS would be very valuable.

To be honest, I really dislike the HIPS.

 

I agree, I dislike it too. IMO, HIPS in automatic mode dont had very much security and other mode are too difficult for many users. I think sandboxing would have been a better choice than HIPS.

 

And I disagree

Sanboxing would not require less user interaction than what the HIPS does in the default auto-mode.

AFAIK ESET is always trying to build software that requires as less user interaction as possible, and sandboxing is not ideal for that.

Also. Remember that the HIPS IS NEW and ESET has informed us several times already that it will be improved over time.
So let it mature a little before you doom it out.

Personally, I think it will be great once ESET has made all the necessary improvements to the HIPS module
Just be a little patient

 

HIPS in Automatic Mode offers very little extra protection.

 

At the moment yes. But that's not what I wanted to say with my post.

 

never heard that sanboxing needs user interaction

and if HIPS is not finish why include it in V5 ?