Kaspersky Embedded Systems Security includes the following components:

• Real-time file protection (implemented in the Real-Time File Protection task). The application scans files and NTFS streams upon protected computer accesses. If a file is recognized as infected, the access to such file is restricted for a protected computer.
• On-demand anti-virus scan (implemented in the On-Demand Scan tasks). One-time scan of specified areas for viruses and other computer security threats. The application scans files, autorun objects, and RAM of a protected computer.
• Kaspersky Security Network services integration (implemented in the KSN Usage task). When you participate in Kaspersky Security Network, statistics regarding protection of your computer by Kaspersky Internet Security are sent to Kaspersky Lab. Use of data from Kaspersky Security Network ensures a faster response time for Kaspersky Embedded Systems Security when encountering new types of threats. Kaspersky Security Network services integration functionality gets requests for file scanning when the following tasks are being performed: Real-time file protection, On-demand anti-virus scan, Applications launches control.
• Applications launches control (implemented in the Applications Launch Control task). The application allows or denies the executable files launch, scripts launch, MSI packages launch, driver loading, and DLL modules loading via specified applications launch control rules, KSN conclusions or according to the Default Deny principle. You can create the applications launch control rules both manually and automatically for a computer (by settings the events of a local Applications Launch Control task) and for a group of computer (via Kaspersky Security Center denied launches report).
• Control of the external devices connected via USB (implemented in the Device Control task). The application allows or restricts usage of mass storages connected to a protected computer via USB. External devices control is based on the allowing rules and the Default Deny principle. You can generate allowing rules for the Device Control task automatically basing on the system data about registered mass storages or by the Rule Generator for Device Control task.

• Archive objects scan implements SFX archives scan: when archive scan mode is enabled in the security settings, objects are scanned both in archives and in SFX archives. SFX archives scan without all archives scan is available.
• The Application Setup Wizard warns about a too long path specified, if a full path to the Kaspersky Embedded Systems Security installation folder contains more than 150 characters. The warning does not affect the application installation and further operations will be successful.
• Installing the SNMP Protocol Support component requires restarting the SNMP service if this service is running.
• Kaspersky Embedded Systems Security cannot be activated with a key via the Application Setup Wizard in the following cases: if the key file is located on a drive created using the SUBST command; if a network path to the key file is specified.
• When protection and scan scopes are configured using Kaspersky Embedded Systems Security Console, it is possible to use only one mask in each path and only at the end of the path (for example: C:\Temp\Temp* or C:\Temp\Temp???.doc or C:\Temp\Temp*.doc). The limitation does not spread on the Trusted Zone component.
• When the command line tool is applied, special characters are displayed only if the regional settings of the operating system match the current Kaspersky Embedded Systems Security localization.
• When basic authentication is used on a proxy server, authentication errors may occur when the user name or password are set using multi-byte encoding.
• When a file is restored from Quarantine or Backup, the Encrypted value in the file attributes is not restored.
• After the critical software modules updates are installed, the Kaspersky Embedded Systems Security icon is hidden by default.
• In Kaspersky Embedded Systems Security Console, the filter is case-sensitive for the following nodes: Quarantine, Backup, System Audit Log, Task Logs.
• Installation of Kaspersky Embedded Systems Security Administration Tools using Microsoft Active Directory group policies is not supported.
• If User Account Control is enabled in the operating system, the user account must be included into the ESS Administrators group to allow Kaspersky Embedded Systems Security Console opening by double-clicking the application icon in the taskbar notification area. Otherwise, the About window opens.
• Kaspersky Security Center Administration Server only checks the application database updates only. No check for application module updates is performed.
• Windows Installer 3.1 is required for a proper Kaspersky Embedded Systems Security installation and work on a computer under OS Microsoft Windows XP SP2. By default, the component is not included into a distribution kit of the OS Microsoft Windows XP SP2. You can download and install Windows Installer 3.1 component manually.
• The remote connection to the Kaspersky Embedded Systems Security Console is unavailable if the application is installed on a computer, that works under Microsoft Windows XP SP2 OS with default configurations of a network access and is not connected to domain: by default, the mode Guest only is applied for an XP OS local accounts security model. 
• To enable the remote application management via the Console, configure the local policy security settings manually by setting up the Classic value on a computer with Kaspersky Embedded Systems Security installed.
• The Device Control task scope includes MTP-connected mass storages if a protected computer works under Microsoft Windows OS 7 or higher. Kaspersky Embedded Systems Security controls MTP-connected mass storages on a protected computer under OS Microsoft Windows XP, if the driver setups class GUID value for external devices that is identical to the standard Windows driver GUID value.