Filtering modes

Three filtering modes are available for the ESET Endpoint Security for macOS firewall. Filtering mode settings are under Setup > Enter application preferences...  > Firewall. The behavior of the firewall changes based on the selected mode. Filtering modes also influence the level of user interaction required. Following are the modes:

All traffic blocked – This mode blocks all inbound and outbound connections.

Auto with exceptions – This mode is the default mode. This mode is suitable for users who prefer easy and convenient use of the firewall with no need to define rules. Automatic mode allows standard outbound traffic for the given system and blocks all non-initiated connections from the network side. You can also add custom, user-defined rules.

Interactive – This mode enables you to build a custom configuration for your firewall. When communication is detected and no existing rules apply to that communication, a dialog window reporting an unknown connection is displayed. The dialog window gives the option to allow or deny communication, and the decision to allow or deny can be remembered as a new rule for the firewall. If you create a new rule, all future connections of this type are allowed or blocked according to the rule.


To record detailed information about all blocked connections to a log file, select Log all blocked connections. To review the firewall log files, from the main menu click Tools > Logs and select Firewall from the Log drop-down menu.