Kaspersky Anti Targeted Attack (KATA) Platform

Editing or disabling a rule in the ICAP exclusion list

May 13, 2024

ID 262388

To edit a rule in the ICAP exclusion list:

  1. In the main window of the application web interface, select the Settings section, Exclusions subsection.
  2. Open the ICAP tab.
  3. Select the rule that you want to modify.

    This opens the Edit rule window.

  4. Make the necessary changes to the State, Criteria, and Value fields.
  5. Click Save.

The rule is modified.

To disable a rule in the ICAP exclusion list:

  1. In the main window of the application web interface, select the Settings section, Exclusions subsection.
  2. Open the ICAP tab.
  3. To the right of the rule that you want to disable in the ICAP exclusion list, in the State column, move the toggle switch to the Disabled position.
  4. This opens a window; in that window, click Yes to confirm the disabling of the rule.

The rule is disabled.

Users with the Security auditor and Security officer roles cannot edit or disable rules in the list of ICAP exclusions.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.