SDmitry

Cannot activate firewall

Recommended Posts

Can you please open your control panel and go to "Control Panel\Network and Internet\Network Connections". There right click your network connection and select "Properties". Is the "Emsisoft Network Filter" listed under "This connection uses the following items:" and is the check box in front of the entry set? Thanks.

Share this post


Link to post
Share on other sites

Can you please open your control panel and go to "Control Panel\Network and Internet\Network Connections". There right click your network connection and select "Properties". Is the "Emsisoft Network Filter" listed under "This connection uses the following items:" and is the check box in front of the entry set? Thanks.

 

Yes, it is listed and enabled.

 

Windows Firewall is turned off automatically after EIS installation.

PC was rebooted after a few times.

The same things with Application Rules (can`t add new rule).

post-33883-0-90788300-1410416993_thumb.png
Download Image

post-33883-0-54603400-1410417762_thumb.png
Download Image

post-33883-0-63996300-1410417764_thumb.png
Download Image

Share this post


Link to post
Share on other sites

Where to find and check these permissions?

 

I`m a Local Admin on PC.

Folder "c:\Program Files (x86)\Emsisoft Internet Security\" has default security settings (have not change it), my user have "Full сontrol" NTFS permissions on this folder.

Share this post


Link to post
Share on other sites
Ok, understood. I think the problem with the domain user.

 

If I start GUI from the local admin user (shift+right click -> Run as different user) - tab permissions appears. 

But, when I try to add a domain user (Use domain users), got the error: "There is no domain controller available at this time".

My domain user is in the local Administrators group, exactly the same as the local user.

 

And if I run the GUI as an administrator from domain user session (Run as administrator) - there is no tab permissions. UAC is active. Clicked YES to the UAC confirmation.

 

Which way I can troubleshoot the problem?

 

 

post-33883-0-70233100-1410855438_thumb.png
Download Image

Share this post


Link to post
Share on other sites

some update:

 

By clicking "Use domain user" in Wireshark I see SMB2 protocol, with NTLMSSP_NEGOTITE message (session initialization from my PC to the domain controller), and response from the domain controller "Error: STATUS_LOGON_FAILURE".

Inside the NTLMSSP_AUTH payload, I see local user credentials.
 
Local user is not authorized to negotiate SSP sessions to the domain controllers (no kerberos ticket), respectively, "No domain controller" is the correct answer, if GUI is executed from local user.

Share this post


Link to post
Share on other sites

Hello Fabian,

 

Found warning messages in eventvwr:

"A TDI filter (\Driver\EfwTdiFlt) was detected. This filter has not been certified by Microsoft and may cause system instability".

 

EventData 

\Device\Afd

\Device\Afd

 

tdi driver path in registry key is correct:

HKLM\SYSTEM\ControlSet\Services\EfwTdiFlt\

ImagePath="\??\C:\Program File (x86)\Emsisoft Internet Security\fwtdi64.sys"

 

is it normal?

Share this post


Link to post
Share on other sites

Yes, those messages are normal. We fixed a few issues that could cause problems like yours in the current beta version. Could you please try to enable beta updates under Settings/Updates and check if the problem still occurs using the beta?

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.