Creating an additional protection profile

To create an additional protection profile:

1. Open the Administration Console of Kaspersky Security Center.
2. In the console tree, perform one of the following actions:
   • If you want to create an additional protection profile in a policy for one KSC cluster, in the Managed devices folder of the console tree select the administration group containing the KSC cluster.
   • If you want to create an additional protection profile in a policy for all KSC clusters, select the Managed devices folder.
3. In the workspace, select the Policies tab.
4. Select a policy in the list of policies and double-click the policy to open the Properties: <Policy name> window.
5. In the policy properties window, select the Additional protection profiles section.

   A list of additional protection profiles will appear in the right part of the window. If the additional protection profile you are creating for this policy is the first one, the list of protection profiles is empty.

6. Click the Add button.

   The Protection profile window opens.

7. In the window that opens, enter the name of the new protection profile.

   A protection profile name cannot contain more than 255 characters.

8. If you want to use previously saved protection profile settings when creating a new protection profile, select the Import settings from file check box and specify the path to the file in JSON format.
9. In the Protection profile window, click OK.

   The Protection settings window opens. In this window, you can configure the settings of the new protection profile or change protection profile settings that were imported from a file.

   The additional protection profile settings are identical to the main protection profile settings, with the exception of the default list of exclusions.

   By default, the list of exclusions does not include objects recommended by Microsoft Corporation (please refer to the list of exclusions recommended by Microsoft on the Microsoft website). If you want the objects recommended by Microsoft to be excluded from protection on all virtual machines that have been assigned this protection profile, you need to import the microsoft_file_exclusions.xml file into the protection profile exclusions. The microsoft_file_exclusions.xml file is included in the application distribution kit and is located in the setup folder of the Kaspersky Security administration plug-in on the computer on which the Kaspersky Security Center Administration Console is installed. After importing the file, you can view and edit the list of these objects in the Files and folders table in the Exclusions from protection window.

10. After configuring all settings of the protection profile, click OK in the Protection settings window.

    In the Properties: <Policy name> window, a new protection profile appears in the list of additional protection profiles.

After creating an additional protection profile, you can assign it to virtual machines.