After intalling Nvidia drivers, a CIS popup window appears and daemonu.exe requests a connection to loopback ip 127.0.0.1 UDP, port 48001. If I select “Allow”, the following rule is added to Application Rules: “C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe : Allow IP Out From MAC Any To MAC Any Where Protocol Is Any”. On previous versions of CIS, a most restrictive rule would be enabled when selecting “Allow”: “Allow IP Out From MAC Any To 127.0.0.1 UDP port 48001”.
Do you know why the previous default behaviour (in CIS v6.0) has been changed?.
Are you sure you clicked “Allow” and not treat application as allowed application? I don’t see this behaviour. Also make sure the alert setting for the firewall is not set wrong.
I’ve set the alert setting to very high and now the most restrictive rule is created. It seems that alert setting is at low by default in CIS v6.2 and I didn’t know that alert setting level determines how new rules are created.