A protection profile is a set of antivirus protection settings in a Kaspersky Security for Virtualization 1.1 policy.
The man protection profile screen contains several sections.
Each protection profile section has a
padlock icon. When the padlock is locked, it is impossible to redefine settings in lower tier policies (slave Administration servers).
How to configure antivirus protection settings in a
Protection profile:
Security level- Use the slider to set a predefined security level - High, Recommended or Low.
There is a table explaining each predefined security level.
- Click Default to set the Recommended security level.
- Click Settings to customize a security level:
- The Security level settings window will open.
- Configure the following settings in the Scan of archives and compound objects section:
- Scan archives.
Enables/disables the scan of archives.
- Delete archives if disinfection failed.
The option is available if the Scan archives option is enabled.
- Scan self-extracting archives.
Enables/disables the scan of self-extracting archives.
- Scan embedded OLE objects.
Enables/disables the scan of embedded OLE objects.
- Do not unpack large compound files.
When the option is enabled, the application does not scan the compound files larger than the value in the Maximum size of a compound object to scan field.
- Configure the following settings in the Performance section:
- Signature Analysis.
The signature analysis uses antivirus databases containing descriptions of known threats and elimination methods. This method is always enabled.
- Heuristic Analysis.
The heuristic analysis allows detecting the files possibly infected with an unknown virus or a new modification of a known virus.
- Heuristic analyzer level.
- Superficial. Not all the instructions of scanned executable files are executed. Consumes fewer virtual machine resources.
- Medium. Executes the amount of instructions recommended by Kaspersky Lab.
- Deep. Executes more instructions. /Consumes more virtual machine resources.
- Limit objects scan time. When the option is enabled, the object scan stops when exceeding the time set in the Scan objects for no longer than N seconds field.
- Click Settings in the Threat types section.
- The Threats window will open allowing to configure protection against the threats merged into categories.
- Malware.
- Viruses and worms. The application always detects and blocks virus and worms, regardless of the configuration.
- Trojans. The application always detects and blocks the trojan programs, regardless of the configuration.
- Malware. The option enables protection against malicious utilities.
- Adware, dialers, other programs
- Adware. The option enables protection against adware.
- Dialers. The option enables protection against dialware.
- Others. The option enables protection against other threats (Internet scamming, downloaders, monitors, etc).
To the top
Action on threat detection
Select actions for Infected objects / Potentially infected objects in the Action on threat detection section.
Select in the drop-down menus:
- Disinfect. Block if disinfection fails.
By default, Kaspersky Security for Virtualization 1.1 attempts to disinfect all the infected files detected. If disinfection fails, such files are blocked.
- Disinfect. Delete if disinfection fails.
Kaspersky Security for Virtualization 1.1 attempts to disinfect all the infected files detected. If disinfection fails, such files are deleted.
- Delete.
Automatically delete infected and suspicious objects.
- Block.
Automatically block all the infected and suspicious objects without trying to disinfect.
- Skip.
Skip all the infected and suspicious objects without trying to disinfect.
To the top
Exclusions from protection
Click Settings in the Exclusions from protection section and select an option in the File types drop-down menu:
- Scan these file types only.
Use the Add, Edit, Delete buttons to compile a list of files to scan when protecting the virtual machine. The input field allows indicating file extensions. The file extensions should be separated with space.
- Scan all but these file types.
Use the Add, Edit, Delete buttons to compile a list of files not to scan when protecting the virtual machine. The input field allows indicating file extensions. The file extensions should be separated with space.
- Click OK in the Exclusions from protection window.
Click OK in the Protection settings window to save the profile.
To the top
