Deleting response actions

You can delete registered response actions. However, you cannot delete actions with the In progress status.

Before deleting a response action, the application checks the current status of this action. However, during and after deletion of an action, the application does not monitor the operations for this action performed on the device and does not cancel operations if they have already started. As a result, a response action may be performed on the device even if this action had the Pending status at the time of deletion.

Deleting a registered action does not override the result of the action performed on the device. For example, if a successfully completed Isolate device from the network action is deleted, network isolation of the device continues after the action is deleted. To disable network isolation, the Disable network isolation action must be triggered.

To delete a response action:

1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
2. Select the action on the Response actions tab in the Events section.
3. Click the Delete action button.

   A window with a confirmation prompt opens.

4. In the prompt window, confirm the deletion of the action.