I am using Eset Smart Security package version 5. My question is related to firewall module. For most of the time I am in administrator mode. It means that access to network is enabled only for those applications which have rules created for them. Other applications are automatically banned.
When I need to enable network access to new application, I simply temporarily switch to interactive mode, add new rule, and switch back to administrator mode. Besides better security this system has additional benefit in limiting amount of data on network interface. This is very important to me because I am using mobile internet with data quotas.
Now to the core of my question. Earlier I used Windows 7 firewall which can selectively enable access to network for system services hidden behind svchost.exe process. There are many of system services.
I permitted only most critical from them notably those needed for Windows Update to function correctly. Now this cant be set in Eset firewall. I have two options now (if I dont want to mess with IP addresses and ports) - to allow network access for svchost.exe as whole or to forbid this.
Is there some hidden configuration setting for enabling network access only for example for BITS (Background Intelligent Transfer Service) that is needed for Windows Update?
This solution would have additional advantage in higher system security because there can be some viruses masked behind svchost.exe process.
