User Guide - Kaspersky Lab

Protection against network attacks 145
• General list of rules. If Group the rules by application is unchecked,
then each line in the general list displays complete information for a rule:
the application name and the command for starting it, whether to allow or
block network activity, the data transfer protocol, the direction of data
(inbound or outbound), and other information.
Using the Add button, you can create a new rule, and you can alter an
existing rule by selecting it on the list and clicking the Edit button. You
can also edit the basic settings in the lower part of the tab.
You can change their relative priority with the Move up and Move down
buttons.
12.1.1.2.1. Creating rules manually
To create an application rule manually:
1. Select the application. To do so, click the Add button on the Rules for
Applications tab. This will display a context menu which will take you
to a standard file selection dialog through its Browse option or to a list
of running applications through its Applications option allowing you to
make your selection. A list of rules for the application selected will open.
If rules for it already exist, they will all be listed in the upper part of the
window. If no rules exist, the rules window will be empty.
2. Click Add in the rules window for the selected application.
You can use the New rule window that opens to fine-tune a rule (see 12.1.1.6 on
pg.152).
12.1.1.2.2. Creating rules from template
Anti-Virus includes ready-made rule templates that you can use when creating
your own rules.
The entire gamut of existent network application can be broken down into several
types: mail clients, web browsers, etc. Each type is characterized by a set of
specific activities, such as sending and receiving mail, or receiving and
displaying html pages. Each type uses a certain set of network protocols and
ports. This is why having rule templates helps to quickly and easily make initial
configurations for rules based on the type of application.
To create an application rule from a template:
1. Check Group the rules by application on the Rules for
applications tab, if not checked already, and click the Add button.