Kaspersky Internet Security 2018

1. In the main window of Kaspersky Internet Security 2018, click the gear button .

1. If you have problems opening the application window, see this guide.

2. Go to the Protection section in the Settings window and select Firewall.

3. In the Firewall settings window, click Networks.

4. In the Network properties window, select the connection for which you want to change the status. Choose the type of the network from the drop-down list. 

1. In the main window of Kaspersky Internet Security 2018, click the gear button .

1. If you have problems opening the application window, see this guide.

2. Go to the Protection section in the Settings window and select Firewall.

3. In the Firewall settings window, click Configure application rules.

4. In the Application network rules window, select the application and select Deny in the drop-down list.

1. In the main window of Kaspersky Internet Security 2018, click the gear button .

1. If you have problems opening the application window, see this guide.

2. Go to Settings → Protection → Firewall.

3. In the Firewall settings window, click Configure packet rules.

4. In the Packet rules window:
   • Click Add to create a new rule. 
   • You can also use packet rule templates by selecting them from the list.

Firewall checks the rules from the top of the list and uses the first rule which meets the network packet parameters. Further rules are not applied. To change the priority of the rules, move them up or down using the button .

5. Select the action:
   • Allow 
   • Block
   • By application rules In this case, the application rule will stop being active if another rule for the application exists.

6. Specify the name for the rule.
7. Select the direction:
   • Inbound (packet) is applied to network packets received by your computer.
   • Inbound is applied to network connections opened by a remote computer.
   • Inbound/Outbound is applied both to inbound and outbound network packets or data streams, regardless of which computer initiated the connection.
   • Outbound (packet) is applied to data packages sent by your computer.
   • Outbound is applied to network connections opened by your computer.

8. Select the protocol. For ICMP or ICMPv6 protocols, set the type and ICMP packet code.

9. Specify the address:
   • If you select Any address, the rule is applied to any IP address.
   • Subnet addresses. Select the subnet: Trusted, Local, or Public network. The rule is applied to the IP addresses of specified networks which are connected at the moment.
   • Addresses from the list: the rule is applied to the specified IP range. learn how to set a range of IP addresses in Kaspersky Internet Security 2018 in the next block of this article.

10. Select the status for the rule:
    • Active
    • Inactive

11. To display the results of the packet rule in the report, select the check box Log events.

12. Click Save.

1. In the Packet rules window, select Addresses from the list.
2. In Remote addresses or Local addresses, enter the range of addresses in the Classless InterDomain Routing (CIDR) format.

See the example below.

How to specify the range of addresses in CIRD routing

To enter the range of the IP addresses of the 10.96.0.0/11 type, the subnet mask is 11111111 11100000 00000000 00000000 in the binary format, or 255.224.0.0 in the decimal format. 11 digits of the IP address are intended for the network number, and the other 21 digits (32 - 11) are for the local address in the network. 10.96.0.0/11 means the range of the addresses from 10.96.0.1 to 10.127.255.255.

For converting IP addresses to CIDR, we recommend using online services like http://ip2cidr.com/.