The following guide details the process to allow Self Enrolment communications through the Windows Firewall of a system that is hosting an ESET Endpoint Encryption Server. 

Please Note: This process is only required if you are using the Self Enrolment facility.  For more information on this feature please see this article: KB421 - ESET Endpoint Encryption Self Enrolment 

The steps described are for the software firewall provided with Windows Server 2012 R2.  Steps may vary on other editions of Windows.  You may need to make similar changes to hardware firewalls if present to allow communications.

There are two methods to allow the communications, either by application or directly by port only one of the methods needs to be used.

Application Exclusion

• Press the Windows Key.
• Click the Control Panel tile.
• Click System and Security.

• Click Allow an app through the Windows Firewall.

• Click Allow another app...

• Click Browse.

• Browse to C:\Program Files (x86)\ESET Endpoint Encryption Server and select dlpecsrv then click Open.

• Click Network types...

• Select the Domain network only then click OK.

• The ESET Endpoint Encyption Server Console Server will be listed, click the OK button.

Port Exclusion

• Open the Control Panel.

• Click System and Security.

• Click Windows Firewall.

• Click Advanced Settings.

• Select Inbound Rules and then click New Rule... 

• Select Port and click Next.

• Select TCP, enter port 8266 into the Specific local ports setting then click Next.  Note: This assumes you have not modified the default port used by the ESET Endpoint Encryption Server.

• Select Allow the connection then click Next.

• Select only the Domain checkbox then click Next.

• Enter a name for the rule then click Finish.

• Repeat the process above but select UDP as the type instead of TCP.