When Creating a Packet Rule in Premium, What's the Difference Between Block Inbound/Outbound vs Block Inbound or Outbound (Packet)?

[always_working]

The answer is probably simple and obvious, but I'd still like to understand it. 

Wouldn't blocking inbound or outbound block everything (i.e. packets) or it just other types of data streams?

Any help so I can know the difference would be appreciated!

 

[Wesly.Zhang]

Hello,

Blocking Inbound or Outbound (Packet) use in icmp and udp protocol etc. This interception is the occasion for ACL packet filtering. Use it if you control whether a port is accessed by other applications.

If you authorize one application to access the external network through one port, use another.

Regards.

[always_working]

6 hours ago, Wesly.Zhang said:

Hello,

Blocking Inbound or Outbound (Packet) use in icmp and udp protocol etc. This interception is the occasion for ACL packet filtering. Use it if you control whether a port is accessed by other applications.

If you authorize one application to access the external network through one port, use another.

Regards.

Thanks so much for your reply.  It's a little more complicated than I thought!

So the difference is the usage in that it's protocol specific and used to block by port as well as IP and for ACL packet filtering?  In contrast, would just block inbound/outbound block all data transmission through that port regardless of protocol type?  

Still trying to understand so any elaboration would be appreciated.  Perhaps you would be good enough to offer concrete examples of when you might employ one versus the other?

[Wesly.Zhang]

11 hours ago, always_working said:

Thanks so much for your reply.  It's a little more complicated than I thought!

So the difference is the usage in that it's protocol specific and used to block by port as well as IP and for ACL packet filtering?  In contrast, would just block inbound/outbound block all data transmission through that port regardless of protocol type?  

Still trying to understand so any elaboration would be appreciated.  Perhaps you would be good enough to offer concrete examples of when you might employ one versus the other?

Hello,

This support article will explain your double: https://support.kaspersky.com/kts20/settings/protection/15158#block3

• Inbound (packet): the rule is only applied to incoming network packets.
• Outbound (packet): the rule is only applied to outgoing network packets.
• Inbound/Outbound: the rule is applied both to inbound and outbound network packets or data streams, regardless of which computer initiated the connection.
• Inbound. this rule is applied to network connections opened by a remote computer.
• Outbound. the rule is applied to network connections opened by your computer.