Creating expert rules for programs

By default, programs given access permission or server permission can use any port or protocol, and contact any IP address or host at any time. Conversely, programs that you block have no access rights at all. By creating expert rules for particular programs, you can heighten protection against hijacked programs by specifying ports and protocols, source and destination addresses, and time and day ranges during which activity is either allowed or denied. You can also apply tracking options to specific types of traffic in order to see alerts or generate log entries when allowed program traffic occurs, enable or disable rules at will, and apply multiple, ranked rules to a program.

If you created port rules for Programs in a version of Zone Labs security software, prior to 4.0, those port rules will be automatically converted to expert rules and visible in the Expert tab of the Program Options dialog. To access the Expert tab, select Program Control|Programs, then click Options.

Creating an expert rule for a Program


Sharing expert rules