The IP Firewall provides control over network traffic that is not covered by recognized protocols or by the Protocols White List, thus increasing security of network communication. It can be configured to track TCP / UDP packets, allowing only authorized traffic. It can also block any connections to specified hosts, regardless of the permissions configured for the protocols.

The IP Firewall uses a set of rules that either allow or block traffic over a network connection. Each rule specifies the criteria that a packet must match and the resulting action, either allow or deny, that is taken when a match is found. When a client computer attempts to connect to another computer, the firewall automatically checks all the incoming and outgoing traffic packets against your pre-configured rule set. At the first match, the firewall either allows or denies the packets.

By using firewall rules, you can allow only specific network connections, based on the direction of the traffic, protocol, remote host address, and destination ports. Hosts can be identified by IPv4 or IPv6 addresses.

There are two basic approaches when configuring the firewall:

Under the Protocols > Basic IP Firewall node in the console tree you can see a list of users and groups that have firewall rules specified. Rules can be specified individually for every user or group.

The shortcut menu of the basic IP firewall provides the following commands:

For further details, see Firewall Management Tasks.