Firewall and Application Control
Early personal firewalls developed a reputation for bombarding the user with incomprehensible questions. Brekekekex.exe wants to establish a connection with IP address 200.199.198.197 through port 8080: allow or block? Most users do not have the knowledge to answer this question with confidence. Some users still click Allow. Others still click Block until they break something, then switch to Allow. Don’t be afraid, cheap kaspersky key takes care of the application without asking confusing questions.
Using data from the Kaspersky Security Network database, the application control system marks each application as reliable, unrestricted, highly restricted, or unreliable. Untrusted applications simply cannot be run. Others that are not in the Approved category can run, but have limited access to sensitive areas of the system.
As part of its job, Application Manager automatically clears check boxes that offer additional software and removes application steps that contain ads or grouped items.
Of course, a firewall must also protect your system against Internet attacks. To verify this feature, I started the test system with 30 exploits generated by the CORE Impact Penetration Tool. Kaspersky identified and blocked 44% of the vulnerabilities. This is exactly the same as Bitdefender’s recent score, although Kaspersky has identified more of them from its official exploit tracking number. Even the failed exploits did not violate security because the test system has all the security patches. However, it is good to see that Kaspersky is aware of these attacks.
Your security protection is of no value if a malicious program or script can disable it. Kaspersky self-defense proved effective when I attacked it with possible malicious code techniques. Nothing essential is revealed on the recording. I couldn’t just set Security Enabled to False. My attempts to terminate the two main processes ended with “access denied”, as did my attempts to manipulate the essential Windows service. Of course, a malicious program could not even attempt these attacks without overcoming some other layer of protection.
The Network Monitor component is not exactly part of the firewall protection, but it gives users with technical expertise an overview of the application bandwidth. A live diagram shows all incoming and outgoing traffic, and a list of actively connected programs shows this usage and shows who is using what.
Trusted Applications Mode
You will probably find that Kaspersky places all or most of its active applications in the “Reliable” category. In trusted applications mode, the concept is further enhanced by refusing to run a process that cannot be verified as trusted. To start, all your files will be scanned and the trusted files identified. After that, unapproved programs can no longer be run. This mode is especially useful on a computer that does not display many new software installations.
The whitelisting functionality in this way is somewhat similar to that of VoodooSoft VoodooShield. The main difference with VoodooShield is that the rules only apply when the computer is in danger, for example. B. if you are connected to the Internet.
However, Kaspersky cautions that the first scan may take a while and has been running on my test system for almost two hours. When it’s done, be careful! If unknown system files are found, carefully examine what was found.
There is one more important step to check all unknown files that are stuck in “Trusted Applications” mode. On my test system, the unreliable file list contained all my hand-coded test and evaluation utilities, which makes perfect sense. Please read this list carefully and unlock all major programs.
When Trusted Apps mode is enabled, it should be impossible for malware to run on your system, even malware that is so new that no antivirus researcher in the world has seen it. New programs that you want to install can also be blocked. Do not worry; The crash notification contains a link that you can use to mark an unknown program as trusted.
