Firewall Application Rules

 

Application Rules are specifically meant to control the access for various applications that may run on your devices. You can choose whether connections for applications with no defined rules are auto-decided by the Firewall, chosen by the user, or allowed/disallowed in the drop-down menu. We recommend you ensure these rules are controlled by your Console for maximum security across your network.

Adding Application Rules

1. Click on the name of the policy you would like to alter
2. Expand Firewall and Antivirus Add-ons
3. Navigate to Firewall ▸ Application rules
4. Click Add application rule
5. Fill out the full application name and path
6. Select what connections are allowed: all, none, or Internet out only
   1. You can also select custom rules for various ports and protocols by clicking Custom, then adding or altering the packet rules in the table
7. Click Add
8. Click Save & Apply to Devices when you are done adding rules
   • If you are editing a Master Policy, this will say Save & Apply to Customers instead

Custom Application Rules

1. Click the pencil icon to the right of the application name to edit the rule
2. In the Allow column, click Custom in the drop-down menu
3. Click + Add packet rule
4. Fill out the following:
   • Rule name
   • Action: allow, block, ask user, or auto-decide
   • Protocol
   • Direction
   • IP Address
   • Local Port
   • Remote Port
   • ICMP type
   • Profile
5. Click Save
6. Click Add
7. Click Save & Apply to Devices when you are done adding rules
   • If you are editing a Master Policy, this will say Save & Apply to Customers instead

Environment Variables

Firewall will not allow entire directories/folders nor accept wildcards (such as * or ?), but you may also use system variables for specific filenames.