Kaspersky Endpoint Security 11 for Windows
 
 

Cache time in the Device Control component of Kaspersky Endpoint Security 11 for Windows

Latest update: December 13, 2019 ID: 15298
 
 
 
 
This article concerns Kaspersky Endpoint Security 11.1.1 for Windows (version 11.1.1.126).
 
 
 
 

A new feature has been added to the Device Control component of Kaspersky Endpoint Security 11 for Windows: it caches recurring events to reduce the number of notifications displayed upon interaction with the device.

The events are considered recurring if the following cached parameters match:

  • Device ID
  • SID of the user interacting with the device
  • Device class
  • Action performed
  • Verdict regarding the action: allowed or denied
  • Path to the process that initiated interaction
  • Requested file

Device Control keeps the information about the events for a certain period of time, which is adjustable. For example, if you want the notifications to appear more often, reduce the cache time.

How to adjust the cache time

  1. Disable Self-Defense of Kaspersky Endpoint Security 11 for Windows. See Online Help for instructions.
  2. Open the registry editor locally on a device.
  3. Open:
    • for 64-bit operating systems —
      [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KasperskyLab\protected\KES\environment]
    • for 32-bit operating systems —
      [HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\protected\KES\environment]
  4. Open the DeviceControlEventsCachePeriod  parameter for editing.
  5. Specify the time in minutes to store the information about events in the Device Control component.
  6. Click OK.
  7. Enable Self-Defense of Kaspersky Endpoint Security 11 for Windows.
The cache time will be changed.
 
 
 
 
 
Did you find what you were searching for?
Thank you for your feedback!