Firewall

Network Info: Here you receive information on the network and - if available - details on the IP address, subnet mask, standard gateway, DNS and WINS server.

Firewall active on this network: You can deactivate the firewall for the network here, you should only do this in justified individual cases.

Shared use of internet connection: For direct connections to the Internet, you can specify whether all computers in the network should have access to the Internet via a computer connected to the Internet or not. This Internet Connection Sharing (ICS) can usually be activated for a home network.

Allow automatic configuration (DHCP): When your computer is connected to the network, a dynamic IP address (via the DHCP = Dynamic Host Configuration Protocol) is assigned. If you are connected to the network via this standard configuration, you should leave the check mark here.

Rule set: Here you can choose quickly between pre-structured rule sets and define in this way, which the monitoring criteria of the firewall for a specific network are (trustworthy, untrustworthy or blockworthy network). With the Edit rule set button, you also have the option of configuring the rule sets individually.

Via the rule wizard

Directly via the "advanced editing mode"

Via the New button

Via the dialogue in the info box that appears in the event of a firewall alarm

Name: For preset and automatically generated rules, the programme name for which the respective rule applies is found here.

Rule active: You can set a rule to inactive by removing the tick without having to delete it.

Comment: Here you can find out how the rule was created. Rules preset for the rule set are commented with "Preset rule". Rules that result from the dialogue from the firewall alarm are commented with "generated by request". Rules that you generate yourself via the advanced editing mode can be provided with their own comment.

Connection direction: The direction defines whether this rule is for outgoing or incoming connections.

Access: Here you set whether access is to be allowed or denied for the respective programme within this rule set.

Protocol: Here you can select which connection protocols you want to allow or deny access to. You have the option of generally blocking or releasing protocols or linking the use of the protocol with the use of a specific application or several applications (assign applications).In the same way, you can block/unblock unwanted or desired ports via the button Assign Internet service.

Time window: You can also make access to network resources time-dependent and thus, for example, ensure that access only takes place during your working hours and not outside these hours.

IP address space: Especially for networks with fixed IP addresses, it makes sense to regulate their use by restricting the IP address space. A clearly defined IP address space significantly reduces the risk of a hacker attack.

Share or block applications: Allows you to select an application (a programme) on your hard disk and explicitly allow or deny it access to the network defined via the rule set. In the wizard simply select the desired programme (programme path) and then specify under "Direction" whether the programme is to be used for incoming connections, outgoing connections or both incoming and outgoing connections. In this way you can, for example, prevent your MP3 player software from passing on data about your listening habits (outgoing connections) or ensure that program updates are not automatically installed (incoming connections).

Release or block network services: A port is a special address range that automatically forwards data transmitted over a network to a specific protocol and software. For example, the transmission of regular web pages is handled via port 80, e-mail transmission via port 25, e-mail retrieval via port 110, etc. Without a firewall, all ports on your computer are generally open, although most of them are not needed by normal users. Blocking one or more ports can therefore quickly close gaps that could otherwise be used by hackers for attacks. In the wizard you have the option of blocking ports completely or only for a certain application (e.g. your MP3 player software).

File/Printer Sharing: If you allow access, you will be given the option to use shared folders and printers in the network. At the same time, other computers and users on the network can also access your shares if this is set up.

Release or block domain services: A domain is a kind of sub-directory for computers in a network, and thus enables centralised administration of the computers included in the network. Approvals for domain services in untrusted networks should generally be denied.

Shared use of the Internet connection: For direct connections to the Internet, you can specify whether or not all computers in the network should have access to the Internet via a computer connected to the Internet or not. This Internet connection sharing can usually be activated for a home network.

Unblock or block VPN services: VPN is the abbreviation for Virtual Private Networks and refers to the possibility to link computers exclusively with each other and to establish a direct connection between them, so to speak. For VPN services to function properly, they must be released by the firewall.

Advanced Rule Set Editor (Expert Mode): Allows you to switch from the rule wizard to the advanced editing mode.

Name: Here you can change the name for the current rule set if necessary. The rule set is then displayed under this name in the list in the rulesets area and can be combined with the networks identified there by the firewall.

Stealth mode: With the stealth mode, requests to the computer that are used to check the accessibility of the respective ports are not answered. This makes it more difficult for hackers to obtain information about the system.

Action if no rule applies: Here you can specify whether access in the network is generally permitted, denied or should be controlled on demand. If special rules have been defined for individual programmes by the firewall’s learning function, these will of course be taken into account.

Adaptive mode: Adaptive mode supports you with applications that use the so-called return channel technology (e.g. FTP and many online games). Such applications connect to a remote computer and negotiate a return channel with it, on which the remote computer can reconnect to the application. If the adaptive mode is active, the firewall recognises this return channel and leaves it closed without asking separately.

Rule Set Name: Enter a meaningful name for the rule set here.

Create an empty rule set: Here you can create a completely empty set of rules and fill it exclusively with rules you have defined yourself.

Create a rule set that contains rules: With this selection, you can decide whether basic rules for untrusted, trusted or to be blocked networks should be predefined for the new rule set. On that basis you can then make individual changes.

direct connection to the Internet: This includes rules that deal with direct Internet access.

untrusted networks: This usually includes open networks, such as dial-up networks, which have access to the Internet.

trusted networks: Trusted networks are usually home and corporate networks.

Networks to be blocked: If the contact of the computer to a network is to be blocked temporarily or permanently, this setting can be used. This makes sense, for example, when connecting to unknown networks whose security standards (e.g. at LAN parties, foreign company networks, public workplaces for notebooks, etc.).