General task settings

To configure the general task settings:

1. In the main window of Web Console, select Devices → Policies & profiles.
2. Click the policy name you want to configure.
3. In the <Policy name> window that opens select the Application settings tab.
4. Select the Real-Time Computer Protection section.
5. Click Settings in the Network Threat Protection subsection.
6. Open the General tab.
7. In the Processing mode section select the processing mode:
   • Pass-through.

     If this mode is selected, Kaspersky Embedded Systems Security scans inbound network traffic for activity that is typical of network attacks, but doesn't log events about detected activity and doesn't block network activity from the attacking computer.

     For example, you can use this mode in case of a decrease in the protected device's performance.

   • Only inform about network attacks.

     If this mode is selected, Kaspersky Embedded Systems Security scans inbound network traffic for activity that is typical of network attacks, logs events about detected activity, but doesn't block network activity from the attacking computer.

   • Block connections when attack is detected.

     The check box enables or disables adding hosts showing activity typical of network attacks to the list of blocked hosts.

     If this mode is selected, Kaspersky Embedded Systems Security scans inbound network traffic for activity that is typical of network attacks, logs events about detected activity, and adds IP addresses of hosts showing activity typical of network attacks to the list of blocked hosts.

     The mode is selected by default.

     You can view the list of blocked hosts in the Blocked Hosts storage.

     You can restore access to blocked hosts, and specify the number of days, hours and minutes after which hosts regain access to network file resources after being blocked by configuring the Blocked Hosts storage settings.

8. Select or clear the Don't stop traffic analysis when the task is not running check box.

   If this check box is selected, when Network Threat Protection task is stopped, Kaspersky Embedded Systems Security scans inbound network traffic for activity that is typical of network attacks and blocks network activity from the attacking computer depending on the selected processing mode.

   If this check box is cleared, when Network Threat Protection task is stopped, Kaspersky Embedded Systems Security doesn't scan inbound network traffic for activity that is typical of network attacks and doesn't block network activity from the attacking computer.

   The check box is cleared by default.

9. Click OK.