Creating and configuring firewall rules

To create and configure firewall rules using the Application Console:

1. In the Application Console tree, expand the Computer Control node.
2. Select the Firewall Management child node.
3. Click the Inbound link in the details pane of the Firewall Management node.

   The Firewall rules for inbound connections window opens.

4. Create and configure firewall rules for incoming connections.
   1. Click the Add button on the Applications tab.

      The Firewall rule for application window opens.

   2. Configure the rule settings:
      1. In the Rule name field enter the name of the edited rule.

         The name of the rule, regardless of the case of characters, must not match the reserved names All, ICMPv4, and ICMPv6; it must be unique in the list of all rules for inbound network connections.

      2. In the Rule action list, select one of the options:
         • Allow. If this option is selected, the application allows incoming network connections for the application.
         • Block. If this option is selected, the application blocks incoming network connections for the application.
      3. In the Application path field, manually or by using the Browse button, specify the path to the executable file of the application for which you are configuring the rule.
      4. In the Rule action field, specify network addresses. The application monitors incoming connections from the specified network addresses in accordance with the rule settings.

         You can only use IPv4 addresses.

      5. Click the OK button to save the rule.
   3. Click the Add button on the Ports tab.

      The Firewall rule for ports window opens.

   4. Configure the rule settings:
      1. In the Rule name field enter the name of the edited rule.
      2. In the Rule action list, select one of the options:
         • Allow. If this option is selected, the application allows incoming network connections for the ports.
         • Block. If this option is selected, the application blocks incoming network connections for the ports.
      3. In the Local ports block, specify a port or port range.
         

         For inbound network connections, specify a port or port range for the local device.

         For outgoing network connections, specify a port or port range for remote devices.

         The available values for the port number are 1–65535.

         The available port ranges are 1–10, 20–30000, and 1–65535.

         Windows XP does not support port ranges. Therefore, for devices in the rule scope that run Windows XP, the application applies the rule only to the first port of the specified range.

      4. Select the type of protocol (TCP / UDP) for which the application will control incoming connections.
      5. In the Rule action field, specify network addresses. The application monitors incoming connections from the specified network addresses in accordance with the rule settings.

         You can only use IPv4 addresses.

      6. Click the OK button to save the rule.
   5. In the Firewall rules for inbound connections window, click the OK button.
5. Click the Outbound connections link in the details pane of the Firewall Management node.

   The Firewall rules for outbound connections window opens.

6. Create and configure firewall rules for outgoing connections.
   1. Click the Add button on the Applications tab.

      The Firewall rule for application window opens.

   2. Configure the rule settings:
      1. In the Rule name field enter the name of the edited rule.

         The name of the rule, regardless of the case of characters, must not match the reserved names All, ICMPv4, and ICMPv6; it must be unique in the list of all rules for outbound network connections.

      2. In the Rule action list, select one of the options:
         • Allow. If this option is selected, the application allows outgoing network connections for the application.
         • Block. If this option is selected, the application blocks outgoing network connections for the application.
      3. In the Application path field, manually or by using the Browse button, specify the path to the executable file of the application for which you are configuring the rule.
      4. In the Rule action field, specify network addresses. The application monitors outgoing connections to the specified network addresses in accordance with the rule settings.

         You can only use IPv4 addresses.

      5. Click the OK button to save the rule.
   3. Click the Add button on the Ports tab.

      The Firewall rule for ports window opens.

   4. Configure the rule settings:
      1. In the Rule name field enter the name of the edited rule.
      2. In the Rule action list, select one of the options:
         • Allow. If this option is selected, the application allows outgoing network connections for the ports.
         • Block. If this option is selected, the application blocks outgoing network connections for the ports.
      3. In the Remote ports block, specify a port or range of ports.
      4. Select the type of protocol (TCP / UDP) for which the application will control outgoing connections.
      5. In the Rule action field, specify network addresses. The application monitors outgoing connections to the specified network addresses in accordance with the rule settings.

         You can only use IPv4 addresses.

      6. Click the OK button to save the rule.
   5. In the Firewall rules for outbound connections window, click the OK button.

Kaspersky Embedded Systems Security for Windows applies the new settings to the running task. The date and time when the task settings were changed are saved in the system audit log.