[KB8181] Configure the trusted zone in an ESET Endpoint Security deployment to prevent loss of network connectivity in ESET PROTECT or ESET PROTECT On-Prem

Issue

• Prevent the loss of internet connectivity on client computers due to firewall settings when deploying ESET Endpoint Security
• Add the IP range/subnets to the trusted zone before deploying ESET Endpoint Security
• Edit or disable Firewall rules in ESET PROTECT or ESET PROTECT On-Prem

Solution

Add the IP range/subnets to the trusted zone before deploying ESET Endpoint Security

To resolve your RDP/ping issue, configure the trusted zone with the IPv4 and Remote IP addresses, ranges, masks, and subnets, including any VPN networks and all subnets inside your network.

1. Open ESET PROTECT or ESET PROTECT On-Prem.

2. Edit a policy in ESET PROTECT or ESET PROTECT On-Prem.

3. In the Settings section, click Protections → Network access protection, expand Network access protection and click Edit next to IP sets.

   

4. Select Trusted zone and click Edit.

   

5. In the Remote device address (IPv4, IPv6, range, mask) field, add your IPv4 and Remote IP addresses, ranges, masks, and subnets, including any VPN networks and all subnets inside your network. Click Save → Save → Finish.

   

6. When the system checks into ESET PROTECT or ESET PROTECT On-Prem with the new settings, you can deploy ESET Endpoint Security to your network.

Edit or disable Firewall rules in ESET PROTECT or ESET PROTECT On-Prem

1. Open ESET PROTECT or ESET PROTECT On-Prem.

2. Edit a policy in ESET PROTECT or ESET PROTECT On-Prem.

3. In the Settings section, click Protections → Network access protection, expand Firewall, and click Edit next to Rules.

   

4. Click More filters.

   

5. Select the check box next to Hide built-in (pre-defined) rules to turn it off, and click Apply.

   Modify built-in rules to resolve RDP connection issues

   You can modify the built-in rules to troubleshoot port connection issues, such as allowing RDP for non-default or custom ports. Click here for more information about how to modify built-in rules.

   

6. Deselect the check boxes next to Block incoming NETBIOS requests and Block incoming RPC requests, and click Save → Finish.

   

7. When the system checks into ESET PROTECT or ESET PROTECT On-Prem with the new settings, you can deploy ESET Endpoint Security to your network.