Simple — in this mode, the firewall enables all outgoing traffic and blocks any incoming communication. All network interfaces of the Kerio Personal Firewall host are automatically assigned to the Internet zone refer to chapters 7.2. Rules for Applications and 7.4. Trusted Area). The system security module is also disabled (see chapter 13. Behavior Blocking).

According to these settings, the firewall never asks user and follows the default rules (the Ask action is not used by default). This behavior can be changed by modification of system and network security modules.

Note: The only exception is confirmation of dial-up numbers (see chapter 7.8. Checking of dialed telephone numbers) — users are always asked if a new number is dialed or when a telephone number is changed, regardless of the current firewall mode.

The Simple mode is set by default. It is recommended especially to beginners and users who cannot perform the initial configuration immediately after the installation.

Advanced (autodidactic mode) — whenever an unknown communication is detected or an unknown application is started, the firewall asks user which action is to be taken and whether a rule would be created for this action. This way, step by step, a specific firewall configuration for a host and a user is being created.

If the Advanced mode is selected, the Kerio Personal Firewall detects active network interfaces of the computer on which it is installed upon the first startup. For each interface, the user is asked whether the interface is connected to a trustworthy network or not. For details, refer to chapter 7.7. Detection of new network interfaces.

The Advanced mode sets the same behavior as all previous versions of the Kerio Personal Firewall. This mode is recommended to experienced users and to those users who want to use detailed custom settings.