Kaspersky Lab kaspersky anti-hacker 1.7 User Manual
20
Kaspersky Anti-Hacker
gram will notify you and allow you to block the unwanted action (if Me-
dium level is enabled). In order to define the simplest rule for an applica-
tion, you can simply select its type from the drop-down list (for details see
subchapter 6.3.2.1 on page 46). To define a more complicated rule, you
can specify the remote services and addresses allowed for this applica-
tion.
dium level is enabled). In order to define the simplest rule for an applica-
tion, you can simply select its type from the drop-down list (for details see
subchapter 6.3.2.1 on page 46). To define a more complicated rule, you
can specify the remote services and addresses allowed for this applica-
tion.
• Packet filtering rules allow or block network packets sent or received by
your machine. These rules review the packet header (the protocol used,
the port numbers, the IP addresses etc.), and take decisions on the basis
of this data. These rules are applied to all network applications running on
your machine. For example, if you create a rule to block a certain IP ad-
dress, all network communications to this address will be prohibited.
the port numbers, the IP addresses etc.), and take decisions on the basis
of this data. These rules are applied to all network applications running on
your machine. For example, if you create a rule to block a certain IP ad-
dress, all network communications to this address will be prohibited.
Packet filtering rules have a higher priority than application rules, i.e.
these rules are instigated first. For example, if you create a rule to block
all incoming and outgoing data packets, then the program will apply no
application rules while filtering data packets.
these rules are instigated first. For example, if you create a rule to block
all incoming and outgoing data packets, then the program will apply no
application rules while filtering data packets.
4.2. Security Levels
The program allows you to select one of the following security levels:
• Allow all – disables the security system on your machine. When this level
of security is selected, any network activity is allowed on your machine.
• Low – allows network activity of all applications except those explicitly
prohibited by user defined application rules.
• Medium – notifies you about network events related to your applications
and allows you to configure your security system for optimal performance.
If a network application on your computer tries to connect to the local
network or the Internet, the training mode will be activated. The applica-
tion and the network operation details will be displayed on your screen.
On the basis of this data the program will prompt you to select one of the
following courses of action: to allow or to block this event once, to com-
pletely block activity of this application, to allow the application activity ac-
cording to its type, or to define additional network communication settings.
Depending on your answer, the program will create a rule for this applica-
tion that will subsequently be applied by the program automatically.
If a network application on your computer tries to connect to the local
network or the Internet, the training mode will be activated. The applica-
tion and the network operation details will be displayed on your screen.
On the basis of this data the program will prompt you to select one of the
following courses of action: to allow or to block this event once, to com-
pletely block activity of this application, to allow the application activity ac-
cording to its type, or to define additional network communication settings.
Depending on your answer, the program will create a rule for this applica-
tion that will subsequently be applied by the program automatically.
• High – prohibits network activity for all applications except for those ex-
plicitly allowed by user defined application rules. When this security level