Configuring technology operating modes
You can configure the technology learning mode or manually enable the monitoring mode for the Server, sensors, and monitoring points. These actions are available on sensors and monitoring points if technology inheritance is disabled for these objects.
The mode can be changed for the following technologies and methods:
- Device activity detection
- Command Control
- Rule-based Process Control
- Network Integrity Control
This section describes the procedure of changing and configuring technology modes on a Server node. The actions for changing and configuring technology modes on sensor nodes and monitoring points are performed in the same way after the technology inheritance is disabled.
To change and configure the modes of technologies and methods on the Server node:
- Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
- Select Settings → Deployment.
- Select the Server tile.
The details area appears in the right part of the web interface window. The Manage technologies tab displays the list of technologies and methods that can be enabled or disabled.
If the operation modes of technologies and methods cannot be currently changed, the switches in the list are disabled. In this case, it is recommended to check the status of the kics4net service on the Server computer. If the service is not active, you must start it.
- For the technologies and methods that support operation in the learning mode, in the drop-down list to the right of the technology or method name, select the required mode (Learning or Monitoring). If you want to select the same mode for all these technologies and methods, use the Mode drop-down list.
If different modes are selected, the Mode drop-down list displays the Mixed value.
- After selecting a mode, wait for the changes to be applied. Until the mode is applied, the drop-down list displays the Changing status.
- For the technologies and methods operating in the learning mode, specify the date and time when they automatically switch to the monitoring mode. For this purpose, click the Set until link and select the date and time. If the date and time are configured before, they are displayed next to the mode name.
