TOPIC TITLE
When attempting to create firewall application rules two processes are not listed when selecting:
Application Rules/Add/Browse/Running Processes
The processes are ‘System’ and ‘Windows Operating System’ (System idle Process) Although the latter is not a true process it is helpful when creating log filtering rules, particularly with P2P applications. The former is used when creating rules for file sharing and is a key process.
A. The bug/issue
- What you did:
Install CIS V6 and attempth to create rules for the ‘System’ process and Windows Operating System (WOS)
- What actually happened or you actually saw:
Both of these processes are absent from the list of those available.
- What you expected to happen or see:
I would have expected to see these processes.
- How you tried to fix it & what happened:
Checked the installation on several different PCs to discount the possibility of corruption.
- If its a software compatibility problem have you tried the compatibility fixes (link in format)?:
N/A
- Details & exact version of any software (execpt CIS) involved (with download link unless malware):
Windows 7 x64 and Windows 7 x86 bare metal and VMWare Workstation 9.1
- Whether you can make the problem happen again, and if so exact steps to make it happen:
The situation is reproducible always
- Any other information (eg your guess regarding the cause, with reasons):
It’s possible they’ve been purposely removed, which is a mistake.
B. Files appended. (Please zip unless screenshots).
N/A
- A diagnostics report file (Click ‘?’ in top right of main GUI) Required for all issues):
Attached
- Screenshots of the 6.0 Killswitch Process Tab (see Advanced tasks ~ Watch Activity) or 5.x Active process list. If accessible, required for all issues:
Attached.
- Screenshots illustrating the bug:
Attached.
- Screenshots of related CIS event logs:
Attached - The logs still capture WOS events but there appears no way to deal with the entries
- A CIS config report or file.
Attached.
- Crash or freeze dump file:
N/A
- Screenshot of More~About page. Can be used instead of typed product and AV database version.
Attached.
C. Your set-up
- CIS version, AV database version & configuration used:
CIS v6 Firewall only
Customised Firewall Configuration
- a) Have you updated (without uninstall) from from a previous version of CIS:
b) if so, have you tried a clean reinstall (without losing settings - if not please do)?:
Clean install.
- a) Have you imported a config from a previous version of CIS:
b) if so, have U tried a standard config (without losing settings - if not please do)?:
Newly created configuration
- Have you made any other major changes to the default config? (eg ticked ‘block all unknown requests’, other egs here.):
N/A - See attached configuration file for details.
- Defense+/HIPS, Autosandbox/BBlocker, Firewall & AV security levels: D+/HIPS= , ASB/BB= , Firewall = , AV =
N/A - Firewall only - Custom Policy mode/Alerts very high
- OS version, service pack, number of bits, UAC setting, & account type:
N/A - Windows 7 x64/x86 SP1 + Hotfixes - UAC off/Administrator
- Other security and utility software currently installed:
None.
- Other security software previously installed at any time since Windows was last installed:
None.
- Virtual machine used (Please do NOT use Virtual box):
Bare metal and VMWare Workstation 9.1
[attachment deleted by admin]