Configuring Dr.Web Firewall

To start using Firewall, do the following:

•Select the operation mode;

•List authorized applications;

•Configure parameters for known networks.

By default, Firewall automatically creates rules for known applications. Regardless of the operation mode, events are logged.

The default settings are optimal for most cases. Do not change them unnecessarily.

The Allow local connections option allows all applications on you computer to interconnect (i.e., allow unlimited connections between applications installed on your computer). For this type of connection, no rules are applied. Disable this option to apply filtering rules to connections carried out both through the network and within your computer.

To set operation mode

Select one of the following operation modes:

•Allow unknown connections—free access mode, when all unknown applications are permitted to access networks.

•Create rules for known applications automatically – training mode, when rules for known applications are created automatically (set by default).

•Interactive mode—learning mode, when the user is provided with full control over Firewall reaction.

•Block unknown connections—restricted access mode, when all unknown connections are blocked. For known connections, Firewall applies the appropriate rules.

Allow unknown connections

In this mode, Firewall allows all unknown applications for which filtering rules have not been set to access network recourses, including the Internet. No notification on access attempt is displayed by Firewall.

Create rules for known applications automatically

In this mode, rules for known applications are created automatically. For unknown applications, Firewall gives you the opportunity to manually allow or block connections or create new rules.

When a user application or operating system attempts to connect to a network, Firewall checks whether filtering rules have been created for the application. If no filtering rules have been set, you are prompted to select a temporary solution or create a rule to be applied each time this type of connection is detected.

This mode is used by default.

Interactive mode

In this mode, you have total control over Firewall reaction to the detection of unknown connections. Thus, the program is trained while you work on your computer.

When a user application or operating system attempts to connect to a network, Firewall checks whether filtering rules have been created for the application. If no filtering rules have been set, you are prompted to select a temporary solution or create a rule to be applied each time this type of connection is detected.

Block unknown connections

In this mode, Firewall automatically blocks all unknown connections to network resources, including the Internet.

When a user application or the operating system attempts to connect to a network, Firewall checks whether filtering rules have been created for the application. If there are no filtering rules, Firewall blocks network access for the application without displaying any notification to the user. If filtering rules for the application are set, Firewall processes the connection according to the specified actions.