Creating and configuring an On-Demand Scan task

Custom tasks for a single protected device can be created in the On-Demand Scan node. Custom tasks cannot be created in the other functional components of Kaspersky Industrial CyberSecurity for Nodes.

To create and configure a new On-Demand Scan task:

1. In the Application Console tree, open the context menu of the On-Demand Scan node.
2. Select Add task.

   The Add task window opens.

3. Configure the following task settings:
   • Name – A task name consisting of no more than 100 characters. It may contain any symbols except " * < > & \ : |.

     You cannot save a task or configure a new task on the Schedule, Advanced and Run as tabs if the task name is not specified.

   • Description – additional information about the task, no more than 2000 characters. This information will be displayed in the task properties window.
   • Use heuristic analyzer.
     

     This check box enables / disables Heuristic Analyzer during object scanning.

     If the check box is selected, Heuristic Analyzer is enabled.

     If the check box is cleared, Heuristic Analyzer is disabled.

     The check box is selected by default.

   • Perform task in background mode.
     

     The check box modifies the priority of the task.

     If the check box is selected, the task priority in the operating system is reduced. The operating system provides resources for performing the task based on the CPU load and protected device file system load from other Kaspersky Industrial CyberSecurity for Nodes tasks and other applications. As a result, task performance will decrease during periods of increased loads and will increase at lower loads.

     If the check box is cleared, the task will start and run with the same priority as the other Kaspersky Industrial CyberSecurity for Nodes tasks and other applications. In this case, the task performance increases.

     By default, the check box is cleared.

   • Apply Trusted Zone.
     

     This check box enables / disables use of the Trusted Zone for a task.

     If the check box is selected, Kaspersky Industrial CyberSecurity for Nodes adds file operations of trusted processes to the scan exclusions configured in the task settings.

     If the check box is cleared, Kaspersky Industrial CyberSecurity for Nodes disregards the file operations of trusted processes when forming the protection scope for the task.

     The check box is selected by default.

   • Consider task as critical areas scan.
     

     The check box changes the task priority: it enables or disables logging of the Critical Areas Scan event and refreshing of the device protection status. Kaspersky Security Center evaluates the security rating of the protected device(s) using the performance results of tasks with the Critical Areas Scan status. The check box is not available in the properties of local system and custom tasks of Kaspersky Industrial CyberSecurity for Nodes. You can edit this setting only on the side of Kaspersky Security Center.

     If this check box is selected, Administration Server logs completion of Critical Areas Scan tasks and refreshes the device protection status based on the task execution results. The scan task has high priority.

     If the check box is cleared, the task is run with low priority.

     The check box is cleared by default for custom On-Demand Scan tasks.

   • Use KSN for scanning.
     

     This check box enables / disables the use of Kaspersky Security Network (KSN) cloud services in the task.

     If the check box is selected, the application uses data received from KSN services to ensure the application responds more quickly to new threats and reduce the likelihood of false positives.

     If the check box is cleared, the On-Demand Scan task does not use KSN services.

     The check box is selected by default.

4. Configure the task start schedule settings on the Schedule and Advanced tabs.
5. On the Run as tab, configure the settings to start the task using specific account permissions.
6. Click the OK button in the Add task window.

   A new custom On-Demand Scan task is created. A node with the name of the new task is displayed in the Application Console tree. The operation is recorded in the system audit log.

7. If required, in the results pane of the selected node, select Configure scan scope.

   The Scan scope settings window opens.

8. In the protected device's file resource tree or list, select the nodes or items that you want to include in the scan scope.
9. Select one of the predefined security levels or configure the scan settings manually.
10. Click the Save button in the Scan scope settings window.

The configured settings are applied at the next task start.