Contains packet rules. A packet rule consists of a set of conditions and actions performed on packets and data streams by Firewall when specific conditions are met. Packet rules have higher priority than application rules.

By default, the application uses packet rules to restrict inbound network activity over specific TCP and UDP ports and filter ICMP messages.

This column displays the name of a network service. A Network service is a collection of settings that describe the network activity for which you are creating a rule.

This column contains information on traffic direction.

The column may have the following values:

• Inbound (packet). Kaspersky Security Cloud applies the rule to data packets received by your computer. It is not applied in the application rules.
• Inbound. Kaspersky Security Cloud applies the rule to network connections opened by a remote computer.
• Inbound/Outbound. Kaspersky Security Cloud applies the rule both to inbound and outbound data packets or streams, regardless of which computer (your computer or a remote computer) initiated the network connection.
• Outbound (packet). Kaspersky Security Cloud applies the rule to data packets sent by your computer. It is not applied in the application rules.
• Outbound. Kaspersky Security Cloud applies the rule to the network connection that was opened by your computer.

Network connection protocol

This column shows the Firewall action upon detection of network activity for which the packet rule was created. You can use the context menu of the cell in this column to change the action:

• Allow. Kaspersky Security Cloud allows the network connection.
• Block. Kaspersky Security Cloud blocks the network connection.
• By application rules. Kaspersky Security Cloud does not process the data stream according to the packet rule, but instead applies an application rule. This option is available during packet rule creation only.

This field displays the rule status: Active or Inactive.

If the Active status is selected for the packet rule, Firewall applies the rule.

If the Inactive status is selected for the packet rule, Firewall does not apply the rule.

Clicking this button opens the Edit packet rule window. In this window, you can edit the packet rule selected in the list.

Clicking this button causes Kaspersky Security Cloud to remove the selected rule from the list.

Clicking this button moves the rule to the line above, thereby assigning it a higher priority.

Clicking this button moves the rule to the line below, thereby assigning it a lower priority.

Clicking this button opens the Add packet rule window. In this window, you can create a new packet rule.