Configuring the Registry Access Monitor task settings

To configure the settings of the Registry Access Monitor task using the Administration Plug-in:

1. Expand the Managed devices node in the Kaspersky Security Center Administration Console tree.
2. Select the administration group for which you want to configure application settings.
3. Perform one of the following actions in the details pane of the selected administration group:
   • To configure application settings for a group of protected devices, select the Policies tab and open the Properties: <Policy name> window.
   • To configure the settings of a task or application for an individual protected device, select the Devices tab and go to local task settings or application settings.
4. In the System inspection section, in the Registry Access Monitor block, click the Settings button.

   The Registry Access Monitor window appears.

5. On the Registry Access Monitor settings tab, in the Task mode block, select the required option from the list:
   • Block operations according to the rules

     If you select the Block operations according to the rules mode, Kaspersky Industrial CyberSecurity for Nodes blocks the Actions defined for the monitoring scope.

     By default, the Statistics only mode is applied.

   • Statistics only.

     If the Statistics only mode is selected for the monitoring scope, Kaspersky Industrial CyberSecurity for Nodes compiles the statistics for registry key actions according the configured rules.

     By default, the Statistics only mode is applied.

6. Add registry access monitoring rules that will determine what the task does.
7. On the Task management tab, configure the task start schedule settings.
8. Click the OK button to save the changes.

Kaspersky Industrial CyberSecurity for Nodes applies the new settings to the running task. Information about the date and time of settings modification are saved in the system audit log.