|
The majority of Application filter options are set on station only, see Dr.Web for Windows. User Manual. |
Application level filtering helps you to control access of various applications and processes to network resources as well as to enable or disable applications to run other processes. You can create rules for both system and user applications.
To set operation mode
Select one of the following operation modes:
•Allow unknown connections—free access mode, when all unknown applications are permitted to access networks.
•Block unknown connections—restricted access mode, when all unknown connections are blocked. For known connections, Firewall applies the appropriate rules.
•Interactive learning mode—learning mode, when the user is provided with full control over Firewall reaction.
•Allow connections for trusted applications—an access mode, when all trusted applications are allowed to access network resources , for all other applications, a warning is displayed. You can set an application rule via such warning (set by default).
In this mode, Firewall allows all unknown applications for which filtering rules have not been set to access network resources, including the internet. No notification on access attempt is displayed by Firewall.
In this mode, Firewall automatically blocks all unknown connections to network resources, including the internet.
When a user application or the operating system attempts to connect to a network, Firewall checks whether filtering rules have been created for the application. If there are no filtering rules, Firewall blocks network access for the application without displaying any notifications to the user. If filtering rules for the application are set, Firewall processes the connection according to the specified actions.
In this mode, you have total control over the Firewall reaction to the detection of unknown connections. Thus, the program is trained while you work on your computer.
When a user application or operating system attempts to connect to a network, Firewall checks whether filtering rules have been created for the application. If no filtering rules have been set, you are prompted to select a temporary solution or create a rule to be applied each time this type of connection is detected.
Allow connections for trusted applications
This mode is set by default.
In this mode, all trusted applications are allowed to access network resources, including the internet. Among trusted applications are system applications, applications with Microsoft certificate, and applications with a valid digital signature. Rules for such applications are not displayed in the rule list. For other applications, Firewall prompts you to allow or block the unknown connection manually, as well as create a new rule for it.
When a user application or operating system attempts to connect to a network, Firewall checks whether filtering rules have been created for the application. If no filtering rules have been set, you are prompted to select a temporary solution or create a rule to be applied each time this type of connection is detected.
The Allow local connections option allows all applications on you computer to interconnect ((i.e., allow unlimited local connections (to or from 127.0.0.1 interface (localhost)) between applications installed on your computer). This option is applied after verifying that the connections match the set rules. For this type of connection, no rules are applied. Disable this option to apply filtering rules to connections carried out both through the network and within your computer.