Add Program Policy Window - Explicitly Create Program Policies

From the Manage Program Policies window, click Create new policy.

What it does:

Use the Add Program Policy window to create a program policy. (More on program policies.)

In the Filename field, enter the name and location of the program's executable file. You can enter a program in one of the three following ways:
Type in the name and location.
Click Choose and then click Browse for a program. A standard Browse window opens. Navigate to the program executable and click OK. The program's name and location will be entered in the field.
Click Choose and then click Select from a list of installed programs. The Select Installed Program window opens. Click on the desired program and click OK. The program's name and location will be entered in the field.

To be alerted if a change occurs in a program properties (such as a signature or version information), select the Prompt me if this program is modified check box. If the check box is:
Selected: A prompt window will display if this program is accessed and it has been altered. The window lets you decide whether or not you want to update the policy with the revised program characteristics. See Keep Program Policy? for details.
Cleared: No messages will display; the firewall will make a decision. The default decision is to update the new program characteristics. (You can change this default action on the Settings window, Default action when a program with a program policy is modified field.)

For the Internet Zone / Incoming communication options, set how the program handles incoming communication from a remote location in the Internet Zone to your computer. One of the following selections is required:
Block. Block the communication attempt.
Prompt. Generate a prompt. (More on how the firewall handles generated prompts.)
Allow. Allow the communication attempt.

For the Internet Zone / Outgoing communication options, set how the program handles outgoing communication from your computer to a remote location that is in the Internet Zone. One of the following selections is required:
Block. Block the communication attempt.
Prompt. Generate a prompt. (More on how the firewall handles generated prompts.)
Allow. Allow the communication attempt.

If you want the program policy to apply even if the Internet Zone is locked, select the Allow program to bypass locked Internet Zone check box.

The following steps 6-8 repeat the same steps, but for the Trusted Zone:

For the Trusted Zone / Incoming communication options, set how the program handles incoming communication from a remote location in the Trusted Zone to your computer. One of the following selections is required:
Block. Block the communication attempt.
Prompt. Generate a prompt. (More on how the firewall handles generated prompts.)
Allow. Allow the communication attempt.

For the Trusted Zone / Outgoing communication options, set how the program handles outgoing communication from your computer to a remote location that is in the Trusted Zone. One of the following selections is required:
Block. Block the communication attempt.
Prompt. Generate a prompt. (More on how the firewall handles generated prompts.)
Allow. Allow the communication attempt.

If you want the program policy to apply even if the Trusted Zone is locked, select the Allow program to bypass locked Trusted Zone check box.

When you are finished, click OK. The newly added policy will display on the Manage Program Policies window.

All the parameters for program policies can be viewed and edited from the Manage Program Policies window.