Firewall Network Settings

 

Firewall is another major component of Antivirus protection offered alongside the Active Protection Shields.

Firewall monitors all network traffic between devices and the outside world to protect you from unauthorized communication and intrusions. The two profiles you can assign to defined networks are:

• Trusted (Private) — Provides a lower level of security (your device will be visible to other devices on that network)
• Untrusted (Public) — Provides a higher level of security (your device will be hidden from other devices on that network)

We recommend you apply the Untrusted profile to all networks that are not your private network, such as when you connect to the Internet in a café or at an airport. Network profiles are one of the rule matching attributes, meaning rules for trusted profiles are not active when connected to a network classified as untrusted and vice versa. Rules can be set to apply to either one profile or both.

Defined Networks

You can manually define various networks as long as you have the MAC address of the router(s), ensuring they are always listed as Public or Private based on what you choose. Click Add Network, enter the network name, MAC address, and the profile, and click Add.

Advanced Settings

Internet Connection Sharing mode: This option will allow a trusted user to connect to the internet through your PC and/or connect to devices connected to the internet via your PC. This opens additional ports, which could be a security concern.

Allow all connections with Friends when in Private mode: This option will allow all networks defined as Friends when the end device is connected to a trusted network

Disable the network profiles management by this console: This option will allow the end-device user to control network profiles completely, meaning they define any networks they come across as either private or public. This could be a security concern, particularly if the local user tends to travel and uses many public networks. Enabling or disabling this option requires a restart on the devices under the policy you are modifying.

Once you enable and save this setting in the policy, wait approximately 5 minutes for the change to be propagated, then reboot the end device.