Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

security programs dont need firewall access.


  • Please log in to reply
8 replies to this topic

#1 bigrobifer

bigrobifer

  • Members
  • 92 posts
  • OFFLINE
  •  
  • Local time:08:34 PM

Posted 05 February 2015 - 11:10 PM

Running windows 8  i look at the control panel - firewall - allow/block an app through firewall. None of my security programs need firewall access (Mbam anti-exloit, zemana antilogger, and Winpatrol nor my on demand scanners Mbam or super antispyware).  Can someone please tell if i should give them this access and if not why wouldnt they need it? I always thought them running as admin would give them this access.



BC AdBot (Login to Remove)

 


m

#2 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:03:34 AM

Posted 06 February 2015 - 04:28 AM

Hello there,

Running windows 8  i look at the control panel - firewall - allow/block an app through firewall. None of my security programs need firewall access (Mbam anti-exloit, zemana antilogger, and Winpatrol nor my on demand scanners Mbam or super antispyware).  Can someone please tell if i should give them this access and if not why wouldnt they need it? I always thought them running as admin would give them this access.

Security solution like MBAM definitely need firewall access in order to update their database.

Running as administrator does not immediately grant firewall access to these programs - you need to set rules for them to work.

Hope this helps.

Regards,
Alex

#3 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,205 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:09:34 PM

Posted 06 February 2015 - 07:25 AM

It's been a while since I last used the Windows Firewall without using a third-party firewall. Once I go home, I could check if Malwarebytes (or any other of the programs you mentionned) indeed need to be allowed through the firewall, since I have Malwarebytes installed on some VMs with the default Windows Firewall enabled, never added them as an exception and it can update just fine.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:34 PM

Posted 06 February 2015 - 07:30 AM

Windows Firewall Tools which can be used to extend the default Windows firewall behavior and used for quick access to define rules and configure the most frequently used options.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,622 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:34 AM

Posted 06 February 2015 - 11:07 AM

The Windows 8 firewall settings you refer to are for listening ports, e.g. incoming connections. The programs you mention don't need this kind of access.

These programs need outgoing connections, but those are not automatically blocked by the Windows firewall. So these programs can update their signatures without the need for a specific firewall configuration.

 

By default, Windows Firewall allows all outbound network traffic


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#6 bigrobifer

bigrobifer
  • Topic Starter

  • Members
  • 92 posts
  • OFFLINE
  •  
  • Local time:08:34 PM

Posted 06 February 2015 - 05:59 PM

Thanks for the quick replies. and links to the firewall management software. I'm looking at connections using currports. 



#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:34 PM

Posted 06 February 2015 - 08:34 PM

You're welcome on behalf of the Bleeping Computer community.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,205 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:09:34 PM

Posted 06 February 2015 - 10:22 PM

Windows Firewall Tools which can be used to extend the default Windows firewall behavior and used for quick access to define rules and configure the most frequently used options.


That first program, Windows Firewall Control looks very neat, taking a look at it. So thank you also quietman :P

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:34 PM

Posted 06 February 2015 - 10:37 PM

You're welcome.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users