Dr.Web Firewall has four operating modes:
- Allow unknown connections — all unknown connections are allowed. Protection is not active.
- Training mode (create rules for known applications automatically) — learning mode. Rules for known applications are created automatically. The user will be prompted to choose what action to take with all unknown connections.
- Interactive mode — learning mode. When the operating system or an application attempts to connect to a network, the firewall will prompt the user to choose an action.
- Block unknown connections — all unknown connections will be blocked without prompting the user.