The priority of a network packet rule is determined by its position in the list of network packet rules. The topmost network packet rule in the list of network packet rules has the highest priority.
Every manually created network packet rule is added to the end of the list of network packet rules and is of the lowest priority.
Firewall executes rules in the order in which they appear in the list of network packet rules, from top to bottom. According to each processed network packet rule that applies to a particular network connection, Firewall either allows or blocks network access to the address and port that are specified in the settings of this network connection.
You can raise or lower the priority of a network packet rule.
To change the network packet rule priority via Kaspersky Security Center:
Open Kaspersky Security Center Administration Console.
In the Managed devices folder of the console tree, open the folder with the name of the administration group to which the relevant protected virtual machines belong.
In the workspace, select the Policies tab.
Select a Light Agent for Windows policy in the list of policies and open the Properties: <Policy name> by double-clicking.
In the Light Agent for Windows policy properties window, select the Firewall section in the list on the left.
In the right part of the window, the Firewall component's settings are displayed.
In the Firewall rules section, click the Settings button located in the lower part of the section.
The Firewall window opens to the Network packet rules tab.
In the list of network packet rules, select the network packet rule whose priority you want to change and use the Move up and Move down buttons to move the network packet rule to the necessary position in the list.
In the Firewall window, click OK.
Click the Apply button.
To change the network packet rule priority in local interface:
In the left part of the window, in the Anti-Virus protection section, select Firewall.
In the right part of the window, the Firewall component's settings are displayed.
If the settings in the local interface are not available, this means that the values of settings defined by the policy are used for all protected virtual machines of the administration group.
Click the Network packet rules button.
The Firewall window opens to the Network packet rules tab.
In the list of network packet rules, select the network packet rule whose priority you want to change and use the Move up and Move down buttons to move the network packet rule to the necessary position in the list.