Managing technologies
Kaspersky Industrial CyberSecurity for Networks uses various technologies to analyze industrial network traffic. You can enable or disable the use of individual technologies. For some technologies, you can select the operation mode: learning mode or monitoring mode.
It is recommended to enable the technology learning mode for a predefined time so that the application automatically switches technologies to the monitoring mode at the right moment. The monitoring mode is a standard technology operation mode (as opposed to the learning mode, when the application only accumulates data for further use). When configuring the learning mode, you can set the desired time for the technology to automatically switch to the monitoring mode.
You can configure the same technology usage settings on all nodes and monitoring points or configure specific settings for the desired nodes and monitoring points. Technology usage settings can be automatically inherited from parent objects to child objects. If technology inheritance is enabled for a node or a monitoring point, the technology usage settings configured for the parent object (Server or sensor) are applied to this object. If technology inheritance is disabled, you can configure specific technology usage settings on this node or monitoring point.
After the application is installed, all technologies except for PLC Project Control and Unknown Tag Detection are enabled by default. The learning mode is enabled by default for the technologies that support mode change. When adding sensors and monitoring points to the application, the inheritance of technologies set for the parent object is enabled for them by default.
