Help: can't disable KSN

[Bit555]

I can try.

[Bit555]

They couldn't answer any of my questions ?

I'll keep searching.

[Flood and Flood's wife]

40 minutes ago, Bit555 said:

They couldn't answer any of my questions ?

Hello @Bit555, 

You're most welcome!

1. So, Kaspersky support analysed (your) system & could not provide any information, is that correct? 
2. Which incident reference number was assigned please? 

Thank you?
Flood?+?

Edited February 13, 2023 by Flood and Flood's wife

[Bit555]

INC000015034037

Not yet, I still need to send logs.

I asked questions on whether Kaspersky changes firewall logs by itself, how to prevent it, but they didn't seem to want to answer the question.

[Flood and Flood's wife]

44 minutes ago, Bit555 said:

1. INC000015034037
2. Not yet, I still need to send logs.
3. I asked questions on whether Kaspersky changes firewall logs by itself, how to prevent it, but they didn't seem to want to answer the question.

Hello @Bit555, 

You're most welcome!

1. Thank you for the information.
2. Hmmm, without the data it's going to be extremely difficult for the Kaspersky agents to assist? 
3. Commonsense, you're asking them to: guess, to use x-ray vision, a crystal ball or tarot cards - Kaspersky support are professional experts, they base their analysis & their advice on actual data. 

Thank you?
Flood?+?

Edited February 13, 2023 by Flood and Flood's wife
modified 3

[Bit555]

It's hard for me to get the logs required.

 

I've uninstalled Kaspersky for now. Trying out other vendors AV.

[Bit555]

I did some digging and found this: https://support.kaspersky.com/KESWin/11.8.0/en-US/193496.htm

 

It seems if it's deemed "trusted" via KSN, it will alter the user defined firewall rules, regardless.

[Flood and Flood's wife]

12 hours ago, Bit555 said:

It's hard for me to get the logs required.

I've uninstalled Kaspersky for now. Trying out other vendors AV.

28 minutes ago, Bit555 said:

I did some digging and found this: https://support.kaspersky.com/KESWin/11.8.0/en-US/193496.htm

It seems if it's deemed "trusted" via KSN, it will alter the user defined firewall rules, regardless.

@Bit555, 

IF you bothered to pursue this with Kaspersky Technical Support they could explain it to you; it's also documented in the products you *actually* used. 

Thank you?
Flood?+?

[harlan4096]

 

Try disabling last option -> Load rules...