User manual ESET PERSONAL FIREWALL

[. . . ] ESET Personal Firewall User Guide we protect your digital worlds Contents 1. . 2. . Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 ESET Personal firewall concepts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 2. . 1 Filtering modes in ESET Personal firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 2. . 2 Zones. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2. . 3 Strict rules & security levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 2. . 4 Rule configuration strategy for large networks . . . . . . . . . . . . . . 9 3. . Creating rules and zones in the ESET graphical interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Solution 1: Createanewzone, addtheIPaddresses217. 67. 22. 98and72. 32. 7. 91andnameit"InternetFTPservers". Createanew rule allowing outgoing FTP communication. On the Remotetab, addthezones"Trustedzone"and"InternetFTP servers". Task 2: Client computers need to use DNS services within the local network. These services mustn't be accessible from outside the network (i. e. , from the Internet), because the server is also an Internet gateway for the network. Solution 2: Createanewrulenamed"DNSforclientcomputers", usingthefollowingparameters: General tab - Direction: IN, Action: ALLOW, Protocol: UDP. 2. . 3 Strict rules & security levels The administrator can select one of the following scenarios for deployment of the ESET Smart Security Personal 8 firewall: · LeaveAutomatic filtering mode enabled on the Personal firewall and redefine the Trusted zone, if necessary. With this configuration, users will not be prompted to select a protection mode if they connect to a new network (e. g. , with mobile devices such as notebooks). Keep in mind that outgoing communication will not be completely filtered. · SelecttheInteractive filtering mode in the Personal firewall. This mode is not suitable for inexperienced users, since any new communication not specified by a rule will prompt to create one. This may cause problems and is not recommended. · SwitchtothePolicy-based filtering modeinthePersonalfirewallandcreatemore"lenient"rules. Forexample, all SMTP, HTTP and POP3 communication would be allowed, regardless of the application establishing them. Such rules should be set up by an experienced network administrator. · SelectthePolicy-based filtering mode in the Personal firewall with additional rules which dictate that certain networking services can only be used by specific applications or processes. For example, communication for the process firefox. exe will be allowed only on remote ports 80 (HTTP) and 443 (HTTPS); Outlook Express only on ports 25, 110, 143 and limited to the IP addresses where the company's email servers are located, etc. Thislastscenarioisthemostcomplexandmayrequirefine-tuningofsomerules, butitalsooffersthehighestlevel of security. For example: Malicious code which is not recognized by the resident antivirus protection attacks a computer. The code creates a local SMTP server and sends spam messages on behalf of a remote web server from a predefined public IP address. This type of infiltration will be automatically blocked in the last scenario, because SMTP communication is enabled only for Outlook Express and HTTP traffic only for Mozilla Firefox. 2. . 4 Rule configuration strategy in large networks If you wish to set the most strict level of network access for client computers, use Policy-based filtering mode, because it allows no user intervention. 2 The successful deployment of Policy-based mode requires thorough preparation, as blocking of legitimate applications must be avoided. There are several methods for deploying Policybased mode: · Definerules"fromscratch"anddirectlyinstallESETSmartSecuritywithPolicy-basedmodeturnedon. The risk is that you may forget to specify rules for some applications and their communication will be automatically blocked. Click Toggle detailed view of all rules to toggle rule display modes. Double click on any item (or mark it and select the button Edit) to obtain dialog showing its detailed settings. [. . . ] When the process (application) terminates, the temporary rule is discarded. 15 3. . 3 XML Configuration files & ESET Configuration Editor The ESET Configuration Editor is included with ESET Remote Administrator and can read configuration files exported by ESET Smart Security (for more information, see the ESET Remote Administrator manual). These configuration files also include rules and detailed configuration settings from the Personal firewall. The Personal firewall settings can be found in the Configuration Editor's tree structure under ESET Smart Security, ESET NOD32 Antivirus > Personal firewall > Setup. The most important attributes in the Personal firewall > Setup section are Filtering mode and Rule setup. [. . . ]