Kaspersky Anti Targeted Attack Platform

Creating an allow rule from a registered event

To create an allow rule from a registered event:

1. In the Network traffic events section in the table of events, select the event on which you want to base the allow rule for events that you are creating.
2. In the details area, click Create allow rule.

   This opens the Allow rules section in the browser window. In the right part of the web interface window, the details area is displayed in rule settings editing mode. The settings of the new rule are initialized with values from the saved event details.

3. If necessary, edit the settings of the new rule. To do this, follow steps 4–12 of the procedure for creating a rule with initially blank settings. If you do not need to edit the settings of the new rule, save the rule by clicking Save.

An allow rule is created based on the registered event.