CIS default custom rule when allowing a program connection has changed in v6.2

After intalling Nvidia drivers, a CIS popup window appears and daemonu.exe requests a connection to loopback ip UDP, port 48001. If I select “Allow”, the following rule is added to Application Rules: “C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe : Allow IP Out From MAC Any To MAC Any Where Protocol Is Any”. On previous versions of CIS, a most restrictive rule would be enabled when selecting “Allow”: “Allow IP Out From MAC Any To UDP port 48001”.

Do you know why the previous default behaviour (in CIS v6.0) has been changed?.

Are you sure you clicked “Allow” and not treat application as allowed application? I don’t see this behaviour. Also make sure the alert setting for the firewall is not set wrong.

You will need you alert setting at high or very high for a more restrictive rule to be created.

I’ve set the alert setting to very high and now the most restrictive rule is created. It seems that alert setting is at low by default in CIS v6.2 and I didn’t know that alert setting level determines how new rules are created.

Thank you so much for your help!.