Jetico: Allowing "Access to network" for all apps?

Hello,

how much insecure is to allow "Access to network" for all applications? According to the help, access to network alone means only that network libraries are loaded into the application. In other threads I've read that allowing "Access to network" allows also access to LAN. But when all connections for an application are blocked, how can the application do any harm?

I ask because it seems to me that allowing network access for explorer.exe and cmd.exe makes such a huge gate to LAN that thinking about prohibiting access for other applications seems as waisting time to me. I use explorer and command-line utilities for accessing other computers in my LAN, thus I have to allow network access for them.

Thank you,
Martin.

 

Hello mrsteel,

Access to Network also allows indirect access (allows an app to gain internet access via another app).

 

Thank you for your reply.

Martin.