About the Server web interface during normal operation of the application

After connecting to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface while the application is running in normal operating mode, a web interface page opens to provide tools for working with the application. The available tools and their functionality depend on the role of the user who established the connection to the Server.

A menu is displayed in the left part of the web interface page. The contents of the selected section are displayed on the right.

The web interface menu contains the following items:

Expand all | Collapse all

•  – expands and collapses the menu. If the menu is collapsed, the items are displayed without text descriptions.
•  – opens a list of notifications regarding application operating issues. The availability of notifications is indicated by an icon whose color corresponds to the status of the notifications.
•  – opens a list of background operations. This list contains information about operations that take a long time (for example, creating a file when exporting a large number of events). The number of active background operations and their progress status are indicated by an icon. The icon is colored red if there are operations that resulted in errors.
•  – opens the Dashboard section.

  In the Dashboard section of the Application Server web interface (see the figure below), you can view information about the current state of the system in online mode.

  

  Dashboard section

•  – opens the Assets section.

  In the Assets section of the Application Server web interface (see the figure below), you can view and edit information about devices and device address space settings.

  

  Assets section

  The Assets section contains tabs with tables of devices and address spaces.

  When asset is selected, the details area opens in the right part of the section. When an address space is selected, a block opens with information about its rules and subnets. When a device or subnet is selected, the details area opens in the right part of the section. The details area contains information about the selected elements and the tools for managing them.

•  – opens the Network map section.

  In the Network map section of the Application Server web interface (see the figure below), you can view information about the interactions and physical connections of devices.

  

  Network map section

  The Network map section contains tabs with the network interactions map, topology map, and network sessions table. The tabs with the network interactions map and topology map contain the main toolbar in the upper part, an area for displaying objects on the network map, and additional toolbars for managing the position of objects. The lower part of the Network interactions map tab contains a time scale for filtering objects by time period.

  When objects are selected, the details area opens in the right part of the section. The details area contains information about the selected objects and the tools for managing them.

•  – opens the Events section.

  In the Events section of the Application Server web interface (see the figure below), you can view and process events and incidents registered by the application, and view the registered threat response actions.

  

  Events section

  The Events section contains tabs with the events table and the response actions table.

  When an event or action is selected, the details area opens in the right part of the section. The details area contains information about the selected objects and the tools for managing them.

•  – opens the Reports section.

  In the Reports section of the Application Server web interface (see the figure below), you can view information about report templates and change their settings. You can also view information about generated reports.

  

  Reports section

  The Reports section contains tabs with tables of report templates and generated reports.

  When a report template or generated report is selected, the details area opens in the right part of the section. The details area contains information about the selected elements and the tools for managing them.

•  – opens the Process control section.

  In the Process control section of the Application Server web interface (see the figure below), you can view and edit tags and Process Control rules.

  

  Process control section

  The Process control section contains tabs with tables of tags and Process Control rules.

  When a tag or rule is selected, the details area opens in the right part of the section. The details area contains information about the selected objects and the tools for managing them.

•  – opens the Allow rules section.

  In the Allow rules section of the Application Server web interface (see the figure below), you can view and edit allow rules for the application.

  

  Allow rules section

  The Allow rules section contains a table of allow rules for Interaction Control and for events.

  When a rule is selected, the details area opens in the right part of the section. The details area contains information about the selected rule and the tools for managing it.

•  – opens the Intrusion detection section.

  In the Intrusion detection section of the Application Server web interface (see the figure below), you can manage sets of Intrusion Detection rules.

  

  Intrusion detection section

  The Intrusion detection section contains a toolbar and a table containing sets of rules.

•  – opens the Risks section.

  In the Risks section of the Application Server web interface (see the figure below), you can view and resolve risks that could affect information system resources.

  

  Risks section

  The Risks section contains the risks table.

  When a risk is selected, the details area opens in the right part of the section. The details area contains information about the selected risk and the tools for managing it.

•  – opens the Security audit section.

  In the Security audit section of the Application Server web interface (see the figure below), you can view and edit security audit jobs and sets of rules, and manage security audit jobs.

  

  Security audit section

  The Security audit section contains tabs with the security audit rule sets table and the security audit jobs table.

  When a rule or rule set is selected, the details area opens in the right part of the section. The details area contains information about the selected objects and the tools for managing them.

•  – opens the Settings section.

  In the Settings section of the Application Server web interface (see the figure below), you can view and edit application settings.

  

  Settings section

  When you select the Settings section, an additional menu appears on the web interface page. In this menu, you can go to the following subsections:

  • Deployment.

    In this section, you can view information about nodes that have application components installed, and information about monitoring points on nodes. If an Administrator account is used to connect to the Server, you can also manage deployment settings in this section.

  • Secrets.

    In this section, you can manage secrets containing account credentials for remote connections. The Secrets section is displayed if an Administrator account was used to connect to the Server.

  • Users.

    In this section, you can manage application user accounts. The Users section is displayed if an Administrator account was used to connect to the Server.

  • Event types.

    In this section, you can view and edit the settings of event types.

  • Connectors.

    In this section, you can manage connectors for the application.

  • Connection Servers.

    In this section, you can view and edit the settings of the web server on the computer hosting the Server (for example, to use a trusted certificate), REST API server and integration servers on nodes.

  • Kaspersky Security Center.

    In this section, you can view and edit the settings for connecting to the Kaspersky Security Center Administration Server (if the capability for application interaction with Kaspersky Security Center has been added).

  • Application messages.

    In this section, you can view application messages.

  • Audit.

    In this section, you can view audit log entries and enable or disable the user activity audit. The Audit section is displayed if a user account with the Administrator role was used to connect to the Server.

  • Update.

    In this section, you can configure and run updates of application modules and databases.

  • Licensing.

    In this section, you can manage the license key for updating application modules and databases.

  • Security policy.

    In this section, you can manage the application security policy.

  • Logging.

    In this section, you can configure the logging levels for process logs.

•  – opens a section containing brief information about the application.
•  – displayed if some application functions are disabled or if learning mode is enabled for functions. When the menu is maximized, the Not all protection services are running notification is displayed. Clicking this icon or text opens a window containing information about disabled protection functions.
• Connection Server – displays the name of the Server to which the connection was established (the name defined during initial configuration of the application after installation).
•  – opens and closes the user menu if the menu is collapsed. If the menu is expanded, nearby you will see the name of the current user and its role (in this case, you can use the button on the right to open and close the user menu). The user menu consists of the following sections:
  • Language – lets you select the language of the application web interface: English or Russian.

    The selected localization language of the application web interface does not affect the localization language of the Kaspersky Industrial CyberSecurity for Networks Server. This component uses the localization language that was defined during installation or reinstallation of Kaspersky Industrial CyberSecurity for Networks. Therefore, the localization language of data provided by the Server may differ from the selected localization language of the web interface. For example, events and messages received from the Server (including some error messages) are displayed in the localization language of the Server.

  • Theme – lets you select the color design theme for the web interface page:
    • Light – items are displayed on a white background.
    • Dark – items are displayed on a dark background.
  • User account – groups menu items for performing actions with the account of the current user:
    • Change password – opens the window for changing the password of the current user.
    • Log out – ends the Server connection session and opens the page for entering the account credentials to connect.
  • Additional information – contains the Help option for proceeding to the Online Help page of Kaspersky Industrial CyberSecurity for Networks.