Blocking an attacking computer
To block an attacking computer:
- In the lower part of the main application window, click the
button.
- In the application settings window, select Protection → Network Threat Protection.
- Select the Add the attacking computer to the list of blocked computers for N minutes check box.
If the check box is selected, the Network Threat Protection component adds the attacking computer to the blocked list. This means that the Network Threat Protection component blocks the network connection with the attacking computer after the first network attack attempt for the specified amount of time. This block automatically protects the user's computer against possible future network attacks from the same address.
You can view the block list in the Network Monitor tool window.
Kaspersky Endpoint Security clears the block list when the application is restarted and when the Network Threat Protection settings are changed.
- Change the amount of time during which an attacking computer is blocked in the field next to the Add the attacking computer to the list of blocked computers for N minutes check box.
- Save your changes.
As a result, when Kaspersky Endpoint Security detects an attempted network attack launched against the user's computer, it will block all connections with the attacking computer.