New filterin for the Firewall?

Discussion in 'ESET Smart Security' started by MasterTB, Apr 1, 2009.

Thread Status:
Not open for further replies.
  1. MasterTB

    MasterTB Registered Member

    Joined:
    Jun 19, 2007
    Posts:
    547
    Location:
    Paran?, Argentina
    The details posted by Agoretsky here: https://www.wilderssecurity.com/showthread.php?t=237773 say that one of the improvements on the new versions firewall is
    * Added detection for Win32/Conficker worm in firewall

    BUT, as you can see from my pic, there is no mention of it on the Intrusion detections list..
     

    Attached Files:

  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Temporarily the rules fall under "Sasser worm attack" detection.
     
    Last edited: Apr 1, 2009
  3. MasterTB

    MasterTB Registered Member

    Joined:
    Jun 19, 2007
    Posts:
    547
    Location:
    Paran?, Argentina
    Ok, Thanks for clarifying.
     
  4. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,855

    Bump, it's been 2 versions later, I don't see the option.
     
  5. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    It will be added as a separate option to the upcoming version of the firewall module which will be available to those with test mode enabled some time soon.
     
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    I didn't say that a newer module is already available, please read the end of my post again ;) By the way, detection of the Conficker worm at network level was already added about a couple of weeks/months ago so it's nothing new. Once you have Sasser worm detection enabled, it will also detect Conficker.
     
  7. Novicex

    Novicex Registered Member

    Joined:
    Jan 21, 2009
    Posts:
    72
    Who told you that it should be in this Intrusion detections list? Maybe is there a thousand of different kind trojans or viruses, would you like to (un)check them all?
     
  8. MasterTB

    MasterTB Registered Member

    Joined:
    Jun 19, 2007
    Posts:
    547
    Location:
    Paran?, Argentina
    It was an assumption but since Marcos said: "Temporarily the rules fall under "Sasser worm attack" detection" this kind of confirms my assumption.
     
  9. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Some threat attacks are done at level so it's possible to intercept them while inspecting data packets by the firewall. For these, there are specific options in the IDS section of the firewall setup.
     
Thread Status:
Not open for further replies.