I have my file manager windows app blocked from network activity.

But using that file manager I have some url shortcut files, as bookmarks to those websites.

If my windows default web browser is not currently running then clicking the file will launch the browser but Kaspersky blocks it.
Even though the browser is network allowed.
If I run my browser first then copy over the url into the box it isn't blocked.
This happens with any kind of file where I want the program not to connect to the internet but if it runs a file that I want to connect it won't.

How can I allow url shortcuts to pass but keep the file manager blocked?
Same with updating software.  I wish that for my apps I can "Check For Updates" and Kaspersky will allow it, but that's the only thing it will allow.

Welcome to Kaspersky Community.

 

Did You apply the network blocking to both explorer.exe if You are in W11?

 

 

Also, I guess the problem here is how Windows works, where are located the URL shortcut files?

 

Given that the moment you double-click on a URL shortcut to open it, you are already using Explorer.exe, K. will apply the blocking rule 🤷‍♂️

@MightierPen The description is not very clear, but I'll try to guess. If network access for the file manager is blocked and the shortcut is launched from it, then the browser inherits the restrictions from the program that launched it. In this case, it's the file manager. So network access will be blocked. If you first open the browser via Explorer, and then your site via the shortcut, there is no inheritance, because the parent process of the browser is Explorer and network access will be allowed.

13 часов назад, MightierPen сказал:

Same with updating software.  I wish that for my apps I can "Check For Updates" and Kaspersky will allow it, but that's the only thing it will allow.

If you know the addresses where the app checks and downloads updates, you can configure permissions for these addresses. But this can lead to errors and is technically difficult, or even unreal in some cases.

Edited November 21, 2025Nov 21 by AlexeyK

2 hours ago, harlan4096 said:

Did You apply the network blocking to both explorer.exe if You are in W11?

Given that the moment you double-click on a URL shortcut to open it, you are already using Explorer.exe, K. will apply the blocking rule 🤷‍♂️

It's windows 10, with brave.
Brave has no restrictions, just the file manager.  So I'm asking if there is any file type exception rules somewhere?  To not allow any network traffic from the file manager, except for .url files.  And preferrably only if executed by the current user, not by the system or trusted installer or any other user.

If I first open brave then use the file manager to run a shortcut file it works fine.  But if it's inheriting the file manager restriction, even though brave is running it should be blocked.  Something isn't right about that.

40 minutes ago, AlexeyK said:

If network access for the file manager is blocked and the shortcut is launched from it, then the browser inherits the restrictions from the program that launched it. In this case, it's the file manager. So network access will be blocked.

Yes, so I'm asking for an allowance of .url file types only from the file manager, to not inherit the restrictions for that file type only.  ?

41 minutes ago, AlexeyK said:

If you know the addresses where the app checks and downloads updates, you can configure permissions for these addresses. But this can lead to errors and is technically difficult, or even unreal in some cases.

That's not a bad idea.  I could watch wireshark when updating an app then copy over those credentials.  But doing that for all my apps, it's probably less work to just manually allow them every update time.

I wouldn't have to do this if Kaspersky would just block apps when I'm not using them and auto allow them when I am.  Why does no one do this?  It's seems like basic common sense.  To not let apps run roughshod over my computer in the background, when I'm not using them at the time. 

2 часа назад, MightierPen сказал:

I'm asking for an allowance of .url file types only from the file manager, to not inherit the restrictions for that file type only.  ?

I have to repeat: the scenario is not very clear to me. But as I understand it, this cannot be done. 

2 часа назад, MightierPen сказал:

But if it's inheriting the file manager restriction, even though brave is running it should be blocked.  Something isn't right about that.

It shouldn't, because the file manager is not the parent process in this case, as far as I understood from all your descriptions.

Actually, it seems to me that you are trying to "overdo" the settings, there may be some problems after this.

5 hours ago, AlexeyK said:

I have to repeat: the scenario is not very clear to me.

Allow double clicking of .url shortcut files to connect to the website, whether brave was first launched or not, and still don't let the file manager connect.  (That's a big one since the parent company of the file manager could technically see all my files on my computer).

I guess that I could just make sure the browser is running first, whenver I want to use a shortcut.  But would be nice to have these types of exclusion rules anyway.  Seems useful for multiple scenarios.

2 hours ago, MightierPen said:

1. It's windows 10, with Brave.
2. But would be nice to have these types of exclusion rules anyway.  Seems useful for multiple scenarios.

Hello @MightierPen, 

Additional to the input from @harlan4096 & @AlexeyK:

1. Brave is not supported by Kaspersky, read: Kaspersky for Windows, Hardware and software requirements, Browser support. 
2. IF the existing software lacks the feature & you wish to submit it for possible development - the appropriate team to evaluate software improvements are Kaspersky Customer Service https://support.kaspersky.com/b2c#contacts-> select Email, then fill in the template as shown, select (your) Kaspersky application from the drop-down-list(1), select either I have a suggestion OR I have a complaint (your choice) & provide as much *detail* as possible to make a convincing case; note, bc Brave is not supported do not refer to it is your case submission, select another browser when submitting (your) proposition:                                                                     

• & OR, Kaspersky, Beta, Suggestion - (you) need to create a *user-account* to log into this portal. 
• *Please note, not all change requests are successful & even those that are may take a long time, sometimes a very long time to be implemented. 

Please share the outcome, with the Community, when it's available? 

Thank you🙏
Flood🐳+🐋

Edited November 21, 2025Nov 21 by Flood and Flood's wife
formatting

18 hours ago, Flood and Flood's wife said:

Hello @MightierPen, 

Additional to the input from @harlan4096 & @AlexeyK:

1. Brave is not supported by Kaspersky, read: Kaspersky for Windows, Hardware and software requirements, Browser support. 
2. IF the existing software lacks the feature & you wish to submit it for possible development - the appropriate team to evaluate software improvements are Kaspersky Customer.

I was asking if custom exclusions exist for file types (this wasn't a request to start supporting brave).  But I can put in a feature request seeing as this desired feature doesn't seem to exist.

3 hours ago, MightierPen said:

(this wasn't a request to start supporting brave). 

I was asking if custom exclusions exist for file types

But I can put in a feature request seeing as this desired feature doesn't seem to exist.

Hello @MightierPen, 

Thank you for posting back!

We didn't think your topic *was* a request for Kaspersky to support Brave. 

We provided steps/process/procedure & resources for *you* to submit a request bc *you* said: "But would be nice to have these types of exclusion rules anyway."

We gave *you* a tip to not refer to Brave when submitting the request to Kaspersky 'cause 'they'd prolly focus on 'Brave, not supported, blah, blah, blah' & waste a lot of your time - we were trying to save *you* some grief.

Thank you🙏
Flood🐳+🐋