Kaspersky Industrial CyberSecurity for Nodes policy settings sections

Section

Options

Scalability, interface and scan settings

In the Scalability, interface and scan settings subsection, you can click the Settings button to configure the following settings:

• Choose whether to configure scalability settings automatically or manually.
• Configure the application icon display settings.

Security and reliability

In the Security and reliability subsection, you can click the Settings button to configure the following settings:

• Configure the task run settings.
• Specify how the application should behave when the protected device is running on UPS power.
• Enable or disable password-protection of application functions.

Connections

In the Connections subsection, you can use the Settings button to configure the following proxy server settings for connecting with update servers, activation servers, and KSN:

• Configure the proxy server settings.
• Specify the proxy server authentication settings.

Run local system tasks

In the Run local system tasks subsection, you can use the Settings button to allow or block the start of the following local system tasks according to a schedule configured on protected devices:

• On-Demand Scan task.
• Update tasks and Copying Update task.

Section

Options

Trusted Zone

In the Settings subsection, you can click the Trusted Zone button to configure the following Trusted Zone settings:

• Create a list of Trusted Zone exclusions.
• Enable or disable scanning of file backup operations.
• Create a list of trusted processes.

Removable Drives Scan

In the Removable Drives Scan subsection, you can use the Settings button to configure scan settings for removable drives.

User access permissions for application management

In the User access permissions for application management subsection, you can configure user rights and user group rights to manage Kaspersky Industrial CyberSecurity for Nodes.

User access permissions for Kaspersky Security Service management

In the User access permissions for Kaspersky Security Service management subsection, you can configure user rights and user group rights to manage the Kaspersky Security Service.

Storages

In the Storages subsection, click the Settings button to configure the following settings for Quarantine, Backup and List of blocked network sessions:

• Specify the path to the folder where you want to place Quarantine or Backup objects.
• Configure the maximum size of Backup and Quarantine and also specify the available space threshold.
• Specify the path to the folder where you want to place objects restored from Quarantine or Backup.
• Configure transmission of information about Quarantine and Backup objects to the Administration Server.
• Configure how long network sessions are blocked.

Section

Options

Real-Time File Protection

In the Real-Time File Protection subsection, you can click the Settings button to configure the following settings:

• Indicate the protection mode.
• Configure use of the Heuristic Analyzer.
• Configure application of the trusted zone.
• Indicate the protection scope.
• Set the security level for the selected protection scope: you can select a predefined security level or configure the security settings manually.
• Configure the task start settings.

KSN Usage

In the KSN Usage subsection, you can click the Settings button to configure the following task settings:

• Indicate the actions to perform on KSN untrusted objects.
• Configure data transfer and usage of Kaspersky Security Center as a KSN proxy server.

Traffic Security

In the Traffic Security subsection, you can click the Settings button to configure the following task settings:

• Configure the task mode.
• Configure the malware protection.
• Enable mail threat protection, anti-phishing and URL processing.

Exploit Prevention

In the Exploit Prevention subsection, you can click the Settings button to configure the following task settings:

• Select the process memory protection mode.
• Indicate actions to reduce exploit risks.
• Add to and edit the list of protected processes.

AMSI Scanner

In the AMSI Scanner subsection, click the Settings button to configure the following task run settings:

• Allow or block execution of probably dangerous scripts.
• Configure the use of Heuristic Analyzer.
• Configure application of the trusted zone.
• Configure the task run settings.

Section

Options

Applications Launch Control

In the Applications Launch Control subsection, you can use the Settings button to configure the following task settings:

• Select the task operating mode.
• Configure settings for controlling subsequent application launches.
• Indicate the scope of the Applications Launch Control rules.
• Configure use of KSN.
• Configure the task start settings.

Device control

In the Device control subsection, you can click the Settings button to configure the following task settings:

• Select the task operating mode.
• Configure the task start settings.

Section

Options

Firewall Management

In the Firewall Management subsection, you can click the Settings button to configure the following task settings:

• Configure firewall rules.
• Configure the task start settings.

Anti-Cryptor

In the Anti-Cryptor subsection, you can click the Settings button to configure the following task settings:

• Configure the Anti-Cryptor protection scope.
• Configure the task start settings.

Section

Options

File Integrity Monitor

In the File Integrity Monitor subsection, you can configure control over changes in files that can signify a security breach on a protected device.

Log Inspection

In the Log Inspection subsection, you can configure monitoring of the integrity of the protected device based on the results of an analysis of the Windows Event Log.

Section

Options

Task logs

In the Task logs subsection, you can click the Settings button to configure the following settings:

• Specify the importance level of the logged events for the selected software components.
• Specify the task log storage settings.
• Specify the SIEM integration with Kaspersky Security Center settings.

Event notifications

In the Event notifications subsection, you can click the Settings button to configure the following settings:

• Specify the user notification settings for the Object detected, Untrusted mass storage detected and restricted, and Host listed as untrusted events.
• Specify the administrator notification settings for any event selected in the event list in the Notification settings section.

Interaction with Administration Server

In the Interaction with Administration Server subsection, you can click the Settings button to select the types of objects that Kaspersky Industrial CyberSecurity for Nodes will report to the Administration Server.

Section

Options

Troubleshooting settings

In the Troubleshooting settings section, you can configure the following settings:

• enable and disable tracing
• specify the trace file folder
• specify the level of detail
• specify the maximum size of trace files
• delete the oldest trace files
• specify the maximum number of files in a trace log

For details on settings and their limitations, please see the description of how to configure local settings. You can set different values for the settings on a local device and in a group policy for multiple devices. Local settings inherit the group policy settings configured on the Kaspersky Security Center server.

Dump file settings

In the Dump file settings section, you can configure the following settings:

• create a dump file
• specify the dump file folder

For details on settings and their limitations, please see the description of how to configure local settings. You can set different values for the settings on a local device and in a group policy for multiple devices. Local settings inherit the values of group policy settings specified on the Kaspersky Security Center server.