Dr.Web Firewall has three operating modes:
- Allow unknown connections — all unknown connections are allowed. Protection is not active.
- Allow connections for trusted applications — rules for known applications (with a valid digital signature) are created automatically. The user will be prompted to choose what action to take with all unknown connections.
- Interactive mode — learning mode. When the operating system or an application attempts to connect to the network, the firewall will prompt the user to choose an action.
- Block unknown connections — all unknown connections will be blocked without prompting the user.
The user can configure the mode in the firewall's settings. If a rule has already been set for an application, the firewall will follow it.
