Network isolation of hosts with the Endpoint Sensors component

Network isolation is available for hosts with Endpoint Sensors component version 3.5 or 3.6.

When a network isolation rule is enabled on a host, all current connections are disconnected and a VPN connection becomes unavailable.

The program blocks the connection of isolated hosts with an Active Directory server. If the operating system settings require a connection to Active Directory services for authorization, the user of an isolated host will not be able to log in to the system.

If the program administrator replaces the certificate of the server with the Central Node component while a network isolation rule is enabled, you cannot disable the rule.

To ensure correct operation of an isolated host, it is recommended to meet the following conditions:

• Create a local administrator account on the host or save the domain account data to the cache before enabling the network isolation rule.
• Do not change the certificate and IP address of the server with the Central Node component while the network isolation rule is enabled.

Isolated hosts can access the following resources over the network:

• Server with the Central Node component.
• Source of program database updates (Kaspersky Lab update server or custom source).
• Servers of the KSN service.
• Hosts added to network isolation rule exclusions.

If there is no connection between the isolated host and the server with the Central Node component for more than 5 hours, the network isolation rule is automatically disabled.

Page top