Creating Kaspersky Endpoint Agent policy

To create a Kaspersky Endpoint Agent policy in the Kaspersky Security Center Web Console:

1. In the main window, select Devices → Policies and profiles.
2. Click the Add button.

   The policy creation wizard starts.

3. Select the Kaspersky Endpoint Agent application and click Next.
4. Select the required Kaspersky Endpoint Agent deployment method by selecting the appropriate check boxes:
   • Kaspersky Sandbox integration
   • Endpoint Detection and Response Optimum
   • Endpoint Detection and Response Expert (KATA EDR), Kaspersky Industrial CyberSecurity for Networks

   Policy type and integration with Kaspersky Sandbox and KATA EDR cannot be selected in Kaspersky Security Center Cloud Console.

5. Click Next.
6. On the General tab, you can perform the following actions:
   • Change the policy name.
   • Select policy status:
     • Active. After the next synchronization, the policy will be active on the computer.
     • Inactive. Backup policy. An inactive policy can be made active, if required.
     • Out-of-office. The policy will become active when the computer leaves the corporate network.
   • Configure the policy settings inheritance:
     • Inherit settings from parent policy. If this option is enabled, the policy settings will be inherited from the upper-level policy. The policy settings cannot be modified if the Force inheritance of settings in child policies option is enabled in the parent policy.
     • Force inheritance of settings in child policies. If this option is enabled, the parent policy settings will be applied to child policies. In the properties window of the child policy, the Inherit settings from parent policy option is automatically enabled and cannot be disabled.
7. On the Application settings tab, you can configure Kaspersky Endpoint Agent policy settings.
8. Click the Save button.

If the use of KSN is enabled in the policy and the version of the KSN Statement in the policy differs from the version of the KSN Statement in the Kaspersky Endpoint Agent installed on the host, then after the policy is applied, the use of KSN is disabled on the host and in the policy settings. This situation may occur if Kaspersky Endpoint Agent 3.16 is installed on the host while a lower version of the Kaspersky Endpoint Agent administration plug-in was used to make the last change to the policy.