1. Choose Activity policy item in the context menu.

2. Switch to Common rules tab in the Application control policy window. Select the Network protection scope from the drop-down list.

3. Click the Add button.
4. Enter a name of the network rule into the Name field.
5. Specify the direction of data transfer from the Direction drop-down list. The default value is Inbound/Outbound.
6. Specify the network protocol from the Protocol drop-down list. The default value is TCP/UDP.
7. Define the Local IP address or an address range in the appropriate fields. The default value is Any address.
8. Define the Remote IP address or an address range in the appropriate fields. The default value is Any address.
9. Click on the OK button to save the rule.

10. Change following settings in the Additional window:

| • | Users – select the users to be controlled by the rule |

| • | Time – set time periods for the rule to be active. The rule will be active at all times by default |

11. Click on OK button in the Additional windows to save changes
12. In the list of network rules uncheck the Allow checkbox next to the rule created to block connection to the specified network resource.
13. In the list of network rules check the Confirm checkbox to be prompted each time SafenSoft SysWatch is going to restrict application’s network activity.
14. Click on OK or Apply button in the Common rules tab to save new rule and to update Application control policy.

|