Applies to Kaspersky Small office Security 2 for Personal Computer
All network connections on your computer are monitored by Firewall. Firewall assigns a specific status to each connection and applies various rules for filtering of network activity depending on that status, thus, it allows or blocks a network activity. Firewall works based on rules of two types: packet rules and rules for applications.
Packet rules have a higher priority compared to the application rules. If both packet rules and application rules are applied to the same type of network activity, this network activity will be processed using the batch rules. Packet rules are used in order to restrict packets transfering regardless applications.
How to create a packet rule
In order to create a packet rule, perform the following actions:
- open the main application window
- on the upper right hand cormer of the window, click on the Settings link
- on the upper part of the Settings window, go to the Protection tab
- on the left hand part of the Settings window, select Firewall
- on the right hand part of the window, click on the Settings button
- on the Firewall window, go to the Filtering rules tab
- double-click the folder Packet rules
- click on the Add link to create a new packet rule
- specify the required parameters and click on the OK button to save the rule.
To the contents ↑
Network rule parameters
Action to be performed by the product
While creating a packet rule you can specify an action performed by Firewall if it detects the network activity:
- Process according to application rules. The packet rule is not used, but the rule for the application is used.
The Allow or Block rules can be logged. In order to do this, check the Log events box.
If you want to create a packet rule you need to set network service. Network service contains types of network activities, which are restricted according to a network rule. You can select the type of network activity or create a new by clicking the Add link.
Network service includes the following parameters:
Protocol. Firewall restricts connections via TCP, UDP, ICMP, ICMPv6, IGMP and GRE protocols. If you selected ICMP or ICMPv6 protocol, then you can specify a type and a code of ICMP packet.
Direction. Firewall controls connections with the following directions:
Inbound. The rule is for data packets received by your computer
Inbound (stream). The rule is for network connections created from another computer.
Inbound / Outbound. The rule is for inbound and outbound data packets and data streams regardless the direction.
Outbound. The rule is for data packets sent from your computer.
Outbound (stream). The rule is only for network connections created by your computer.
Remote and Local ports. You can specify ports which are used by your and remote computers for TCP and UDP protocols. These ports will be controlled by Firewall.
You can also specify network addresses. You can use an IP address as the network address or specify the network status. In the latter case the addresses will be copied from all networks that are connected and have the specified status at the moment.
You can find detailed instructions on how to set a range of IP addresses in KB6480.
You can select one of the following addresses types:
Addresses from group. The rule will be created for IP addresses from the specified range of IP addresses. Select one of the address groups. If there are no address groups you want to add, you can create a new group. In order to do this, click the Add link in the lower part of the section and in the Network addresses window that will open specify the addresses.
To the contents ↑