Web Threat Protection
14 June 2022
ID 58556
When you use the internet, your computer is at risk of infection by viruses and other computer security threats. Computer security threats may penetrate your computer when you download free programs or visit websites that have been attacked by hackers. In addition, network worms may attack your computer as soon as your computer establishes an internet connection, even before you open a web address or download a file.
Kaspersky Endpoint Security protects information that your computer sends and receives via the HTTP and HTTPS protocols in Safari, Chrome, or Firefox.
Note: Kaspersky Endpoint Security monitors web traffic on the ports most frequently used for HTTP and HTTPS data transfer. Kaspersky Endpoint Security scans encrypted connections (HTTPS) only if the Check secure connections (HTTPS) checkbox in the General section is selected.
Enable/disable Web Threat Protection
Important: If you disable Web Threat Protection, it will not be re-enabled automatically when Kaspersky Endpoint Security starts again or when the operating system restarts. You have to re-enable Web Threat Protection manually.
Web Threat Protection scans web traffic based on the preferences recommended by Kaspersky. Malicious objects are recognized using signature analysis, heuristic analysis, and data from Kaspersky Security Network.
Checking links on websites for phishing threats and malicious web addresses makes it possible to avoid phishing attacks. Phishing attacks usually take the form of email messages from criminals, who pretend to be financial institutions (such as banks) and send links to fraudulent websites. In these emails, the criminals try to trick the user into visiting a phishing website and entering confidential data (such as your bank card number or the name and password for your online bank account). A phishing attack can be disguised, for example, as a message from your bank with a link to its official website, but in reality, the link takes you to an exact copy of the bank's official website created by impostors.
Web Threat Protection monitors your web traffic for attempts to visit a phishing website; it blocks access to such websites. To check links on websites for phishing threats and malicious web addresses, Kaspersky Endpoint Security uses the application databases, heuristic analysis, and data from Kaspersky Security Network.
Web traffic scan algorithm
Each website or file that you or an application accesses via the HTTP and HTTPS protocols is intercepted and scanned for malicious code by Web Threat Protection:
- If a website or file contains malicious code, Kaspersky Endpoint Security can block it and display a notification that the requested file or website is infected.
- If the file or website does not contain malicious code, you can access it immediately.
Select the action that Web Threat Protection performs after detecting a dangerous web traffic object
Information about Web Threat Protection and all detected dangerous web traffic objects is logged in a report.
Note: If Web Threat Protection stops running with an error, you can view the Web Threat Protection report and try to restart the component. If the problem is not solved, you can contact Kaspersky Technical Support.