Use Process Rules to Restrict Access to FTP

1. Select the Group Management node.
2. Select Add Group on the Groups ribbon.
3. Select and right-click the new group and select Rename.
4. Rename the group with an intuitive name, for example, Specify FTP Ports.
5. Select the Add Item drop-down arrow on the Groups ribbon and select Network Connection. The Add a Network Connection dialog displays.
6. Specify the host in the Host field.
7. Select the Ports button on the right hand-side of the Ports field. The Common Ports dialog displays.
8. Select ports 20 and 21: FTP - Data Port and FTP - Control port, and click Add.
9. Select the Text contains wildcard characters option and click Add.

1. Select the top level Process rule node.
2. Select the Add Rule drop-down arrow on the Rules ribbon and select Process Rule.
3. Select and right-click the new process rule and select Rename.
4. Give the rule an intuitive name, for example, Cannot access FTP.
5. Right-click within the Processes work area, and select Add > File. The Add a File dialog displays.
6. Enter * in the File field and click Add. This denotes that all files are blocked from accessing ports FTP 20 and 21. The use of
7. Expand the new process rule node.
8. Select the Denied Items node.
9. Select the Add Item drop-down arrow and select Denied > Group. The Group selection for dialog box displays.
10. Select the group created in the Create a Group procedure and click Add. This rule now prohibits all applications from accessing the FTP ports 20 and 21.

1. Select the top level Process rule node.
2. Select the Add Rule drop-down arrow on the Rules ribbon and select Process Rule.
3. Select and right-click the new process rule and select Rename.
4. Give the rule an intuitive name, for example, Can access FTP.
5. In the Processes work area, right-click and select Add > File. The Add a File dialog displays.
6. Browse to and select the file that you want to access FTP, for example, Internet Explorer.
7. If required, expand the new process rule node.
8. Select the Allowed Items node.
9. Select the Add Item drop-down arrow and select Allowed > Group. The Group selection for dialog displayed.
10. Select the group created in the Create a Group procedure and click OK. This rule now allows the specified application to access the FTP ports 20 and 21.

1. Expand the Group node and select BUILTIN\Administrators. The Group Rule work area displays.
2. Drag the Security Level slider to Restricted.

Save the configuration. Only the application specified in the  procedure can access FTP ports 20 and 21. All other applications cannot.