RV320 access rules

[Tulga]

Hello?

I use RV320 router.

Condition 1: I want to deny access to internet from LAN interface.

Condition 2: And allow only Kaspersky internet security ports.

So I added all Kaspersky ports to my router's service list. Then I allowed them on WAN1 and LAN interfaces. 

This is ports that I added: ( https://support.kaspersky.com/KSC/SP3/en-US/158830.htm ) 

And I denied all other services(1-65535) on LAN interface. 

Now, condition 1 works fine. but condition 2 is not working well. Kaspersky internet security couldn't connect to update and other servers. 

Please give me an advice.

[balaji.bandi · Accepted solution]

Can you should us the ACE/ACP Rule you created

basically this shouod work as below :

Rule 1 allow only specific which is related to any towards kaspersky allow

Rule 2 deny all.

Check the Logs what is not working to give an idea to make tweak, some vendors may not provide all detailed information, some may required different ports.

Kaspersky internet security couldn't connect to update and other servers. 

what  is defination of other servers, from Lan or over internet ?

https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/smb4286-access-rules-configuration-on-rv320-and-rv325-vpn-routers.html

[Tulga]

Hello?

I think update service runs on internet. But not sure that it uses web protocols. 

[Tulga]

Hi

According to log, I found that KIS service runs on the HTPPS. Thank you.