Before performing the following steps, get the MDR configuration file. It contains a configuration file (BLOB) required for integration.
If you want Kaspersky Endpoint Agent to process data about events generated by Kaspersky Industrial CyberSecurity for Networks and send this data to Kaspersky Managed Detection and Response, configure interaction with Kaspersky Security Center in the settings of Kaspersky Industrial CyberSecurity for Networks. For detailed information on configuring interaction between the applications, refer to Kaspersky Industrial CyberSecurity for Networks Help.
To configuring integration between Kaspersky Endpoint Agent and Kaspersky Managed Detection and Response using Kaspersky Security Center Web Console:
This opens the policy settings window.
By downloading the Managed Detection and Response configuration file, you agree to automatically send the specified data from the device with Kaspersky Endpoint Agent installed to Kaspersky for processing. Do not download the configuration file, if you do not want the specified information to be processed.
Integration between Kaspersky Endpoint Agent and Kaspersky Managed Detection and Response is configured.
Kaspersky Endpoint Agent and Kaspersky Endpoint Security interaction with MDR
Kaspersky Endpoint Security 11 or later with the current database version supports interaction with MDR. In Kaspersky Endpoint Security 11.6.0 or later, interaction with MDR is available immediately after installation.
If you use Kaspersky Endpoint Agent to work MDR and install Kaspersky Endpoint Security of the version that supports interaction with MDR or update Kaspersky Endpoint Security 11 or later databases to the current version, MDR stops working with Kaspersky Endpoint Agent and starts working with Kaspersky Endpoint Security. At that: