Jump to content

How can our signed installer add firewall rules or whitelist our app?


SandyEggoScott

Recommended Posts

Our Windows desktop app installer adds exception rules for our app to Windows Defender Firewall, but many of our users have Malwarebytes, and lots of them show up on our support channel after trying to use our app and getting frustrated at their inability to connect.

Even though we warn them about third-party firewalls, many of them don't know how to whitelist a program, and we have to ask which product they have and then walk them through the process.

Does Malwarebytes offer some means for a signed installer (or app running with elevated privileges) to programmatically add firewall exception rules like we do for Windows Defender Firewall?

Link to post
Share on other sites

OK, my apologies. I was looking at a list of the top security products for Windows, and most of them have firewall functionality as well. I thought I'd checked Malwarebytes prior to posting, but I must have missed it.

Thanks for the instructions on manual whitelisting.

As for the ZIP -- our product installs several major executable components (a Windows Desktop .NET app, a display driver, some COM objects). Everything is installed either under "Program Files" or "Program Files (x86)" -- given that, is a ZIP still the best choice?

Link to post
Share on other sites

Quote

So are you saying we're blocking your site from users downloading your program or once they have downloaded it we're blocking it?

No. My primary reason for posting was to determine whether it was possible to programmatically add rules to your firewall component (which I now realize you don't have). Right now we have a lot of Windows user support traffic due to third-party security software, and I mistakenly thought that Malwarebytes was one of the products involved.

A secondary (and much less pressing) issue is whether or not our product, once installed, would be flagged in a malware scan as a PUP. To be clear, I have no evidence that this is happening. If there is a simple process to vet an app, it may be worth doing for our app simply as a precaution against trouble going forward. On the other hand, if this represents a significant amount of work on your side, there's probably not a justification for doing it.

Quote

What is the link to your site?

https://www.immersed.com

(scroll down to the Windows logo for a download link to our .msi)

Link to post
Share on other sites

  • Root Admin

We don't block the site. As far as the application goes you'd probably be best off installing our program on a VM to test it out and verify if we block it or not.

It is a 14 day trial of the premium program. Save a snapshot in your VM in case you want to retest because after the 14 days it will go into Free mode.

MB4 Offline Installer
https://downloads.malwarebytes.com/file/mb4_offline

Thanks @SandyEggoScott

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.