iWarren

EIS: Create Custom Rule - Window issue.

Recommended Posts

EIS 2017.7.0.7838

Windows 7 32-bit

 

Try opening a program with no firewall rules, trigger the firewall. (Tested with svchost)

Click "Create Custom Rule"

click "Add new Rule"

then press the Enter key.

 

The focus seems to toggle back to the original Alert, but locks you out from doing anything,
press Enter again, to get the focus back to the rule creation dialog.

Share this post


Link to post
Share on other sites

I don't think we really intend on the alerts being open while creating rules, however I will ask to confirm whether or not they should be accessible while an alert is open.

Does this also happen with Behavior Blocker alerts? You can test them with the batch file at the following link (just don't select "Allow always" as it will make it useless for testing in the future):
https://www.gt500.org/emsisoft/bb_test.zip

The batch file just uses the code from BatchGotAdmin to reopen itself with administrative rights, which triggers the Behavior Blocker. The batch file doesn't do anything else.

Share this post


Link to post
Share on other sites

Well, if a user cancels the rule editing.... they still have the option of going back to the Alerts window, and "Allow once" or "Block once" etc.
 

I haven't tried with behavior block alerts,  because I can't get my applications into a Custom Mode "before" they run    (didn't some user mention that recently?) :P

also your bb_Test for elevations, did not trigger the behavior blocker for me, and it did ask (and got) permissions.

Also..... I've been noticing, there hasn't been a "Create Custom Rule" on some of the alerts.... even when the application has no rules created for it  either.

 

Share this post


Link to post
Share on other sites
21 hours ago, iWarren said:

also your bb_Test for elevations, did not trigger the behavior blocker for me, and it did ask (and got) permissions.

Anything in the Forensics log about the batch file?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.