Kaspersky Anti Targeted Attack (KATA) Platform

What's new

April 2, 2024

ID 247269

Kaspersky Anti Targeted Attack Platform now has the following new features:

  1. A distribution kit of the Kaspersky Anti Targeted Attack Platform application based on the Astra Linux operating system is now provided.
  2. Added support for KVM virtualization for a limited number of hosts with the Endpoint Agent component.
  3. Added ICAP integration with feedback. ICAP integration with feedback can work in two modes:
    • Standard scan. In standard scan mode, the object is scanned by all supported technologies. While being scanned by the Sandbox component, the object remains available. If a threat is detected, the object is blocked.
    • Advanced scan. In the advanced scan mode, objects are scanned by all supported technologies. While being scanned by the Sandbox component, the object is not available. If a threat is detected, the object is blocked.
  4. Threats can now be detected in the SMB, NFS, HTTP2 protocols.
  5. Scanning mirrored encrypted traffic is now possible thanks to integration with the ArtX TLSproxy 1.9.1 application.
  6. Traffic capture and analysis at speeds up to 10 Gbps is now supported for the Sensor component.
  7. Copies of raw network traffic can now be recorded, stored, and downloaded.
  8. Now you can configure automatic removal of inactive hosts displayed in the Endpoint Agents list on the server with the Central Node component.
  9. In the role of the Endpoint Agent component, you can now use the Kaspersky Endpoint Security for Mac application with built-in support for Kaspersky Anti Targeted Attack Platform.
  10. Deploying on the VK Cloud platform is now possible.
  11. Expanded functionality for hosts that have Kaspersky Endpoint Security for Linux 12 as the Endpoint Agent component:
    • Added the 'Delete file' task.
    • Added the 'Kill process' task.
    • Individual hosts can now be isolated from the network.
    • Added support for files conforming to the OpenIOC open standard for the description of indicators of compromise (IOC files).
  12. The Sandbox component no longer supports the Windows XP SP3 operating system in preset form.

Changes in Kaspersky Endpoint Agent 3.16 for Windows:

You can view the list of changes in Kaspersky Endpoint Agent 3.16 for Windows in the Kaspersky Endpoint Agent for Windows Online Help.

Changes in Kaspersky Endpoint Security 12.3 for Windows:

You can view the list of changes in Kaspersky Endpoint Security 12.3 for Windows in the Kaspersky Endpoint Security for Windows Online Help.

Changes in Kaspersky Endpoint Security 12 for Linux:

You can view the list of changes in Kaspersky Endpoint Security 12 for Linux in the Kaspersky Endpoint Security for Linux Online Help.

See also

Kaspersky Anti Targeted Attack Platform

About Kaspersky Threat Intelligence Portal

Distribution kit

Hardware and software requirements

Restrictions

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.