Need help configuring the firewall (KIS 2018)

[RoboMan]

Hello! If anybody would like to help me here i'd highly appreciate it, i'm having a troubled time trying to customize Kaspersky's firewall in order to achieve the maximum security.

"Allow connections on random ports for active FTP mode" - should i disable this?

Should i change any configuration in here? (this part is default, i never touched it)


Thank you so much for any comments you can give.

 

[bribon77]

Good question, I would also like to know.

 

[509322]

Just leave it all alone. There is nothing in the default firewall settings that you need to mess with - and especially not the default packet rules.

 

[AtlBo]

@RoboMan is there a help file? That might be very helpful with the internet connections. The settings are strict on appearances, but I think I would like to know how Kas defines local services...like a very technical description.

I have a home network, and I really like what I see in this pic. However, I worry whether app installed services are considered local services and this kind of thing. I hate the way some security apps seem to refer to activity as Windows when it's really an app using Windows somehow.

Thanks for posting these. I don't know why, but I feel like I have been one reason from paying for Kas. Maybe this is the one.

 

[509322]

@RoboMan is there a help file? That might be very helpful with the internet connections. The settings are strict on appearances, but I think I would like to know how Kas defines local services...like a very technical description.

I have a home network, and I really like what I see in this pic. However, I worry whether app installed services are considered local services and this kind of thing. I hate the way some security apps seem to refer to activity as Windows when it's really an app using Windows somehow.

Thanks for posting these. I don't know why, but I feel like I have been one reason from paying for Kas. Maybe this is the one.

There is a help file online. It is very basic.

 

[RoboMan]

There is a help file online. It is very basic.

Way too basic.

 

[Sunshine-boy]

@RoboMan you need to ask your question in Kasper sky forum.. because fanboys always there they know better

 

[509322]

@RoboMan you need to ask your question in Kasper sky forum.. because fanboys always there they know better

No, that is not necessarily true. Ask @harlan4096 .

 

[509322]

Way too basic.

There is nothing you need to modify in the default firewall configuration.

 

[virusblocker101]

I dunno. I think it's on by default. Ticking this off my effect peer to peer. Edit: Peer to peer - torrents, gaming,, etc

 

[harlan4096]

You should not change any of those rules unless You need some specific settings...

 

[RoboMan]

I understand. Do not touch something you do not understand. Thank you guys.

 

[RoboMan]

Kaspersky's Application Control by default trusts all digitally signed applications. Does this mean all digitally signed applications are safe? Do they have a blacklist or even better whitelist of safe signatures or a way to check a signature is valid? Or should i disable this option?

 

[XhenEd]

Kaspersky's Application Control by default trusts all digitally signed applications. Does this mean all digitally signed applications are safe? Do they have a blacklist or even better whitelist of safe signatures or a way to check a signature is valid? Or should i disable this option?

I bet it's "trust, but monitor."

 

[codswollip]

Or should i disable this option?

Mine is unchecked and hasn't caused any unnecessary hassle.

 

[harlan4096]

Kaspersky's Application Control by default trusts all digitally signed applications. Does this mean all digitally signed applications are safe? Do they have a blacklist or even better whitelist of safe signatures or a way to check a signature is valid? Or should i disable this option?

They are moved to Trusted group in 1st execution, but of course are monitored and also They have blacklisting even for "digitally signed applications"...

Keeping this setting on will avoid some troubles with many new applications to be moved to restrictions groups and break installations, for example... that being said, in my working paranoid system, I have it disabled of course I check Application Control restrictions groups in every installation, also I'm in Interactive Mode, so You will be prompted if some restricted application during installation wants to access to critical system areas...