Creating and configuring firewall rules

To create and configure firewall rules using the Administration Plug-in:

Expand the Managed devices node in the Kaspersky Security Center Administration Console tree.
Select the administration group for which you want to configure application settings.
Perform one of the following actions in the details pane of the selected administration group:
- To configure application settings for a group of protected devices, select the Policies tab and open the Properties: <Policy name> window.
- To configure the settings of a task or application for an individual protected device, select the Devices tab and go to local task settings or application settings.
In the Network activity control section, in the Firewall Management section, click the Settings button.
The Firewall Management window opens.
On the General tab, in the Inbound connections section, click the Rules list button.
The Firewall rules for inbound connections window opens.
Create and configure firewall rules for incoming connections.
1. Click the Add button on the Applications tab.
  The Firewall rule for application window opens.
2. Configure the rule settings:
  1. In the Rule name field enter the name of the edited rule.
    The name of the rule, regardless of the case of characters, must not match the reserved names All, ICMPv4, and ICMPv6; it must be unique in the list of all rules for inbound network connections.
  2. In the Rule action list, select one of the options:
    - Allow. If this option is selected, the application allows incoming network connections for the application.
    - Block. If this option is selected, the application blocks incoming network connections for the application.
  3. In the Application path field, manually or by using the Browse button, specify the path to the executable file of the application for which you are configuring the rule.
  4. In the Rule action field, specify network addresses. The application monitors incoming connections from the specified network addresses in accordance with the rule settings.
    You can only use IPv4 addresses.
  5. Click the OK button to save the rule.
3. Click the Add button on the Ports tab.
  The Firewall rule for ports window opens.
4. Configure the rule settings:
  1. In the Rule name field enter the name of the edited rule.
  2. In the Rule action list, select one of the options:
    - Allow. If this option is selected, the application allows incoming network connections for the ports.
    - Block. If this option is selected, the application blocks incoming network connections for the ports.
  3. In the Local ports block, specify a port or port range.
    For inbound network connections, specify a port or port range for the local device.
    
    For outgoing network connections, specify a port or port range for remote devices.
    
    The available values for the port number are 1–65535.
    
    The available port ranges are 1–10, 20–30000, and 1–65535.
    
    Windows XP does not support port ranges. Therefore, for devices in the rule scope that run Windows XP, the application applies the rule only to the first port of the specified range.
  4. Select the type of protocol (TCP / UDP) for which the application will control incoming connections.
  5. In the Rule action field, specify network addresses. The application monitors incoming connections from the specified network addresses in accordance with the rule settings.
    You can only use IPv4 addresses.
  6. Click the OK button to save the rule.
5. In the Firewall rules for inbound connections window, click the OK button.
On the General tab, in the Outbound connections block, click on the Rules list button.
The Firewall rules for outbound connections window opens.
Create and configure firewall rules for outgoing connections.
1. Click the Add button on the Applications tab.
  The Firewall rule for application window opens.
2. Configure the rule settings:
  1. In the Rule name field enter the name of the edited rule.
    The name of the rule, regardless of the case of characters, must not match the reserved names All, ICMPv4, and ICMPv6; it must be unique in the list of all rules for outbound network connections.
  2. In the Rule action list, select one of the options:
    - Allow. If this option is selected, the application allows outgoing network connections for the application.
    - Block. If this option is selected, the application blocks outgoing network connections for the application.
  3. In the Application path field, manually or by using the Browse button, specify the path to the executable file of the application for which you are configuring the rule.
  4. In the Rule action field, specify network addresses. The application monitors outgoing connections to the specified network addresses in accordance with the rule settings.
    You can only use IPv4 addresses.
  5. Click the OK button to save the rule.
3. Click the Add button on the Ports tab.
  The Firewall rule for ports window opens.
4. Configure the rule settings:
  1. In the Rule name field enter the name of the edited rule.
  2. In the Rule action list, select one of the options:
    - Allow. If this option is selected, the application allows outgoing network connections for the ports.
    - Block. If this option is selected, the application blocks outgoing network connections for the ports.
  3. In the Remote ports block, specify a port or range of ports.
  4. Select the type of protocol (TCP / UDP) for which the application will control outgoing connections.
  5. In the Rule action field, specify network addresses. The application monitors outgoing connections to the specified network addresses in accordance with the rule settings.
    You can only use IPv4 addresses.
  6. Click the OK button to save the rule.
5. In the Firewall rules for outbound connections window, click the OK button.
Click the OK button in the Firewall Management window.

Kaspersky Embedded Systems Security for Windows applies the new settings to the running task. The date and time when the settings were changed are saved in the system audit log.

Page top