Kaspersky PURE User Guide - Kaspersky Lab

A D V A N C E D A P P L I C A T I O N S E T T I N G SE X T E N D I N G T H E R A N G E O F N E T W O R K A D D R E S S E SEach network matches one or more ranges of IP address. If you connect to a network, access to subnetwork of which isperformed via a router, you can manually add subnetworks accessible through it.Example: you are connecting to the network in an office of your company and wish to use the same filtering rules for theoffice where you are connected directly and for the offices accessible over the network.Obtain network address ranges for those offices from the network administrator and add them.To extend the range of network addresses:1. Open the main application window and click the Settings link in the top part.2. In the left part of the window, in the Protection Center section, select the Firewall component.3. Click the Settings button for the component you have selected.4. In the window that opens, on the Networks tab, select an active network connection and click the Edit link.5. In the window that opens, on the Properties tab, in the Additional subnetworks block, click the Add link.6. In the IP address window that opens, specify an IP address or an address mask.W O R K I N G W I T H F I R E W A L L R U L E SFirewall works based on rules of two types:Packet rules. They are used for posing restrictions on packets regardless of the application. Typically, suchrules restrict incoming network activity on specified TCP and UDP ports and filter ICMP messages.Application rules. They are used to set limits on network activity of a specified application. Such rules allow finetuningthe activity filtering, for example, when a certain type of network connections is banned for someapplications but is allowed for others.Packet rules have higher priority than application rules. If both packet rules and rules for applications are applied to thesame type of network activity, this network activity is processed using the packet rules. Besides, you can set a priority foreach rule.CREATING A PACKET RULEPacket rules consist of a set of conditions and operations over packets performed when these conditions are met.When creating packet rules, remember that they have priority over the rules for applications.To create packet rule:1. Open the main application window and click the Settings link in the top part of the window.2. In the left part of the window, in the Protection Center section, select the Firewall component.3. Click the Settings button for the component you have selected.4. In the window that opens, on the Filtering rules tab, select the Packet rules block and click the Add link.5. In the Network rule window that opens, specify the required settings and click the OK button.6. Assign a priority to the new rule by moving it up or down the list using the Move up and Move down links.After you have created the rule, you can modify its settings or delete it using links in the bottom part of the tab.To disable the rule, uncheck the box next to the rule's name.141