EIS - Purpose of Ask in firewall custom rules

[Charyb 2]

While creating a custom rule, what is the purpose of 'Ask' in the firewall actions?

 

Is there an 'Allow once' and 'Block once' option?

 

Please see attached.

[Christian Peters 99]

Hello,

 

if you select Ask you will get a alert from the Firewall. For all options take a look on the attached screenshot.

[Charyb 2]

Under what circumstances would you use this? You already have ask under the firewall automatic rules settings. It would make sense if there was an allow once or block once option but there isn't.

 

Why would anyone go into a custom rule and select ask then when the program runs they are only given four options which boil down to allow and block. Once a person selects one of these four options, the action changes from ask to, either, allow or block depending on what the user selected. This turns it into a one-time deal at which time a person is not asked again.

[hjlbx 2]

Hello Charyb,

 

The console you show is for setting the automatic creation of firewall rules for applications - which is

 

not the same as the actual IN/OUT firewall rule set itself.  Using "ASK" for Trustworthy Programs will

 

generate a Firewall Alert when such programs attempt to make a network connection.  How you

 

respond within the Alert will create an Autorule.  Autorules specify the automatic application of an

 

existing firewall rule set.

 

 

What you are asking for is a permanent "ASK" Firewall Autorule and then the option to reply "Allow

 

Once" or "Block Once" in the Firewall Alert.

 

 

As Fabian Wosar explained (on the other thread with same topic), such functionality not been added to EIS

 

as it has not been widely requested by users.

 

 

You obviously think it should be added so why not submit a request here?:  

 

http://support.emsisoft.com/forum/50-feedback-comments-and-suggestions/

 

If enough requests are made by users then it will probably be placed on the list of items to added to EIS in a

 

future build.

 

I certainly think it is worthwhile.

 

hjlbx

[Fabian Wosar 390]

Under what circumstances would you use this? You already have ask under the firewall automatic rules settings. It would make sense if there was an allow once or block once option but there isn't.

It is quite helpful when trying to catch changes in network access patterns. For example you can create an allow rule to allow the connection you expect the application to make and create an ask rule for all others. That way you will get an alert if the application makes a connection that you don't expect.