Kaspersky Lab WorkSpace Security EU ED, 25-49u, 2Y, RNW KL4851XAPDR User Manual
Product codes
KL4851XAPDR
P
R O T E C T I O N A G A I N S T N E T W O R K A T T A C K S
85
I
N THIS SECTION
Component operation layout ...........................................................................................................................................
Changing Anti-Hacker protection level ............................................................................................................................
Rules for applications and packet filtering .......................................................................................................................
Rules for security zones ..................................................................................................................................................
Changing the Firewall mode ............................................................................................................................................
Intrusion Detection System ..............................................................................................................................................
Network Monitor ..............................................................................................................................................................
Types of network attacks .................................................................................................................................................
Anti-Hacker statistics .......................................................................................................................................................
C
OMPONENT OPERATION LAYOUT
Anti-Hacker protects your computer at the network and application levels, and masks your computer on the network to
prevent attacks. Let us take a closer look at Anti-Hacker's principles of operation.
prevent attacks. Let us take a closer look at Anti-Hacker's principles of operation.
You are protected at the network level by using global packet filtration rules where network activity is allowed or blocked
based on analyzing such settings as packet transfer direction, data packet transfer protocol, and outbound packet port.
Rules for packets regulate access to the network, regardless of the applications installed on your computer that use the
network.
based on analyzing such settings as packet transfer direction, data packet transfer protocol, and outbound packet port.
Rules for packets regulate access to the network, regardless of the applications installed on your computer that use the
network.
In addition to the packet filtering rules, the Intrusion Detection System (IDS) provides additional security on the network
level (see section "Intrusion detection system" on page
level (see section "Intrusion detection system" on page
). The purpose of the subsystem is to analyze inbound
connections, detect port scans on your computer, and filter network packets aimed at exploiting software vulnerabilities.
When running, the Intrusion Detection System blocks all inbound connections from an attacking computer for a certain
amount of time, and the user receives a message stating that his or her computer underwent a network attack.
When running, the Intrusion Detection System blocks all inbound connections from an attacking computer for a certain
amount of time, and the user receives a message stating that his or her computer underwent a network attack.
The Intrusion Detection System's functioning is based on using a special database of network attacks (see section
"Types of network attacks" on page
"Types of network attacks" on page
) in analysis, which is regularly enlarged by Kaspersky Lab's specialists. It is
updated together with the application databases.