Compatibility of Kaspersky Endpoint Agent (Endpoint Sensors) for Windows versions with Kaspersky Anti Targeted Attack Platform versions

Kaspersky Endpoint Agent uses predefined settings that determine the impact that it has on the performance of the local computer under scenarios of information retrieval and interaction with the Central Node component.

If the version of Kaspersky Anti Targeted Attack Platform installed on Central Node servers is incompatible with the version of Kaspersky Endpoint Agent installed on computers on the corporate LAN, the functionality of Kaspersky Anti Targeted Attack Platform may be limited. For example, IOC scanning of files and working with created tasks and policies on computers with Kaspersky Endpoint Agent can be unavailable for Central Node servers.

Information about the compatibility of Kaspersky Endpoint Agent (Endpoint Sensors) component versions with Kaspersky Anti Targeted Attack Platform versions is listed in the table below.

Version of Kaspersky Endpoint Agent (Endpoint Sensors)	Type of Kaspersky Endpoint Agent (Endpoint Sensors)	Compatibility with KATA 3.6.1	Compatibility with KATA 3.7	Compatibility with KATA 3.7.1	Compatibility with KATA 3.7.2	Compatibility with KATA 4.0
Endpoint Sensors 3.6.1	Standalone installation or part of KES versions 11.2 and 11.3	Yes	Available functionality: Monitoring Alerts (only TAA)	Available functionality: Monitoring Alerts (only TAA)	Available functionality: Monitoring Alerts (only TAA)	No
Endpoint Agent 3.7	Standalone installation or part of KES versions 11.2 and 11.3	No	No	No	No	No
Endpoint Agent 3.8	Standalone installation	No	Yes	Yes	The amount of data sent by Kaspersky Endpoint Agent is limited. AMSI scan event data not available. The amount of data sent by Kaspersky Endpoint Agent for Module loaded, File changed, Registry modified, Process: console interactive input events is limited. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform version 3.7.1 Help. The Get forensics task is not supported.	The amount of data sent by Kaspersky Endpoint Agent is limited. Event information does not display the OS name and OS name fields. The amount of data sent by Kaspersky Endpoint Agent for Module loaded, File changed, Registry modified, Process: console interactive input, and Connection to remote host events is limited. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform version 3.7.1 Help. AMSI scan event data not available. Get forensics, Start YARA scan, and Service management tasks are not supported.
Endpoint Agent 3.9	Standalone installation or part of KES versions 11.4 and 11.5	No	Yes	Yes	The amount of data sent by Kaspersky Endpoint Agent is limited.	The amount of data sent by Kaspersky Endpoint Agent is limited.
Endpoint Agent 3.10	Standalone installation or part of KES 11.6	No	No	The amount of data received by the Kaspersky Anti Targeted Attack Platform server is limited. The server of this version of Kaspersky Anti Targeted Attack Platform accepts a limited amount of data from the Kaspersky Endpoint Agent program for Module loaded, File changed, Registry modified, Process: console interactive input events. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform version 3.7.1 Help.	Yes	The amount of data sent by Kaspersky Endpoint Agent is limited. The Host IP is not displayed in information about events. Getting an autorun points list using the Get forensics task is not supported. The Start YARA scan and Service management tasks are not supported.
Endpoint Agent 3.11	Standalone installation or part of KES 11.7	No	No	The amount of data received by the Kaspersky Anti Targeted Attack Platform server is limited.	Yes	The amount of data sent by Kaspersky Endpoint Agent is limited.
Endpoint Agent 3.12	Standalone installation	No	No	No	No	Yes

Page top