Changing the Firewall action for network rules in a local interface

In the Light Agent for Windows local interface, you can change the Firewall action for a network rule of an application or an application group:

• For all network rules created by default for an application or an application group.
• For an individual network rule manually created for an application or an application group.

To change the Firewall action for all network rules created by default for an application or an application group in the local interface:

1. On the protected virtual machine, open the application settings window.
2. In the left part of the window, in the Anti-Virus protection section, select Firewall.

   In the right part of the window, the Firewall component’s settings are displayed.

3. Click the Application network rules button.

   The Firewall window opens to the Application control rules tab.

4. In the list of applications, select the application or application group for whose default network rules you want to change the Firewall action. The manually created network rules for this application or application group remain unchanged.
5. In the Network column, open the context menu and select the action that you want to assign:
   • Inherit.
   • Allow.
   • Block.
6. In the Firewall window, click OK.
7. To save changes, click the Save button.

To change the Firewall action for an individual network rule manually created for an application or an application group in the local interface:

1. On the protected virtual machine, open the application settings window.
2. In the left part of the window, in the Anti-Virus protection section, select Firewall.

   In the right part of the window, the Firewall component’s settings are displayed.

3. Click the Application network rules button.

   The Firewall window opens to the Application control rules tab.

4. In the list of applications, select the application or application group for whose network rule you want to change the Firewall action.

   If the settings in the local interface are not available, this means that the values of settings defined by the policy are used for all protected virtual machines of the administration group.

5. Click the Edit button or open the context menu and select Application rules or Group rules.

   This opens the Application control rules or Application group control rules window.

6. In the window that opens, select the Network rules tab.
7. In the list of network rules select the network rule for which you want to change the Firewall action.
8. In the Permission column, open the context menu and select the action that you want to assign:
   • Allow.
   • Block.
   • Log events.
9. Click OK in the Application control rules or Application group control rules window.
10. In the Firewall window, click OK.
11. To save changes, click the Save button.