App traffic is managed through connections established by apps. You can set up allowing, blocking, or redirecting rules for connections with specified IP addresses and ports for every app installed on the device.
General information on each connection is shown on the Connection screen (see Figure 42). To go to this screen, do one of the following:
•On the Active apps tab of the Traffic screen, tap the 
icon to the left of the name of an app and then tap a connection row.
•In the Firewall log:
▫When events are grouped by date: tap a connection row.
▫When events are grouped by app name: expand the list of app connections by tapping the icon to the left of the name of an app and then tap a connection row.
•In an application log: expand the list of app connections by tapping the icon to the right of an event date and then tap a connection row.
Figure 42. Connection screen
The Connection screen contains the following information:
•connection address and port;
•host name (if available);
•amount of incoming and outgoing traffic received or transmitted by the connection;
•connection status;
•connection rule;
•app that established the connection;
•date and time;
•connection type;
•protocol.
Connection rules are displayed on the Rules tab of the app screen.
Connection rules
To create a new connection rule
1.For connections without rules:
•On the Connection screen, tap the 
icon to the right of the Rule section.
For any connection:
•On the app screen, open the Rules tab and tap the 
icon on the left side of the screen.
2.On the next screen, select the rule type:
•
allowing,
•
blocking,
•
redirecting.
3.Check the IP address/host name. If the address is not specified, enter a valid IP address (in the a.b.c.d format for IPv4 addresses or [a:b:c:d:e:f:g:h] for IPv6), an IP address range (in the a1.b1.c1.d1-a2.b2.c2.d2 or [a1:b1:c1:d1:e1:f1:g1:h1]-[a2:b2:c2:d2:e2:f2:g2:h2] format), or a network (in the a.b.c.0/n format, where n is a number from 1 to 32). If you are creating a redirecting rule, enter the redirection address in the field below. You can specify a host name instead of an address.
4.Tap More for the additional Protocol setting to choose a network protocol for the connection.
5.Tap Save.
Icons of apps with set connection rules are marked with the 
icon.
Viewing rules
Figure 43. Rules tab
To view all connection rules of an app
•Go to the app screen and open the Rules tab (see Figure 43).
The tab contains the list of all rules set for the app, in the order of their execution.
To change the order of rule execution
•Tap and hold the 
icon next to the rule you want to move, then drag the rule to the desired position on the list.
Editing rules
To edit an existing rule
1.Do one of the following:
•On the Connection screen, tap the 
icon to the right of the rule.
•On the app screen, open the Rules tab and tap the rule row.
2.Make changes.
3.Tap Save.
To delete a rule
•On the rule editing screen:
1.Tap Delete rule.
2.On your next step, tap Delete.
•On the Rules tab of the app screen:
1.Tap the 
icon to the right of the rule.
2.On your next step, tap Delete.
To delete all rules for a certain app
1.On the app screen, open the Rules tab and tap the 
icon in the top-right corner of the screen.
2.On your next step, select the App rules check box and tap Clear.
To delete all rules for all apps
1.On the Firewall screen, select Traffic.
2.On the Traffic screen, tap the icon in the top-right corner of the screen.
3.On your next step, select the App settings and rules check box and tap Clear.
Block all connections not allowed by the rules
You can block all connections except for those allowed by rules for an app by using the corresponding toggle button on the app settings screen.