Blocking an attacking computer
To block an attacking computer:
- In the main application window, click the button
.
- In the application settings window, select Essential Threat Protection → Network Threat Protection.
- Select the Add an attacking computer to the list of blocked computers for N min check box.
If the check box is selected, the Network Threat Protection component adds the attacking computer to the blocked list. This means that the Network Threat Protection component blocks the network connection with the attacking computer after the first network attack attempt for the specified amount of time. This block automatically protects the user's computer against possible future network attacks from the same address.
You can view the block list in the Network Monitor tool window.
Kaspersky Endpoint Security clears the block list when the application is restarted and when the Network Threat Protection settings are changed.
- Set a different blocking duration for an attacking computer in the field to the right of the Add an attacking computer to the list of blocked computers for N min check box.
- Save your changes.
As a result, when Kaspersky Endpoint Security detects an attempted network attack launched against the user's computer, it will block all connections with the attacking computer.