Block IPs IN KSC Firewall .

[Awadh Alharbi]

Hello, we have some IPs shared from our regulator and we need to block from KSC Firewall. When adding the IP in (Available network > untrusted group > add new rules that block the inbound and outbound for this ip but still PCs are able to ping this IP.

 

can someone show me my mistake ? 

 

[ElvinE5]

Good day

as far as I can see you are creating a rule for applications. that is, untrusted applications from these networks will not work. however, the network will be available for trusted and ICMP requests.

if there is a need to completely block traffic from these networks, try creating a rule in the firewall

Спойлер

don't forget to place the rule where you want it in the list, as they are processed from top to bottom, as in all firewalls. this should be enough to restrict any traffic from these networks. so you can just disable ICMP requests if that's what you need right now

[Awadh Alharbi]

On 2/7/2023 at 7:07 AM, ElvinE5 said:

Good day

as far as I can see you are creating a rule for applications. that is, untrusted applications from these networks will not work. however, the network will be available for trusted and ICMP requests.

if there is a need to completely block traffic from these networks, try creating a rule in the firewall

  Reveal hidden contents

don't forget to place the rule where you want it in the list, as they are processed from top to bottom, as in all firewalls. this should be enough to restrict any traffic from these networks. so you can just disable ICMP requests if that's what you need right now

Thanks  ElvinE5 for your support , we implement as you mentioned but still no block as below

 

this time we added "172.20.0.6" which an internal app to test but still we are able to access the "GUI of 172.20.0.6" 

Edited February 8, 2023 by Awadh Alharbi

[ElvinE5]

 

I'm sorry it's my mistake ? I didn't fully explain

Try using the "Remote address" setting.

instead of configuring network adapters settings... they are slightly different functions...

https://support.kaspersky.com/KESWin/12.0/en-US/123451.htm

like that.

Спойлер

 

Edited February 9, 2023 by ElvinE5

[Awadh Alharbi]

Thanks ,  ElvinE5 , it's working fine.