Scenario for deploying KEDR functionality without a Sandbox component
You do not need to install the Sandbox component and can use the Central Node component only for managing the Kaspersky Endpoint Agent program and data analysis.
The Central Node component is always installed together with the Sensor component. If you need to use the Central Node component separately, do not configure the Sensor component.
The program operating scenario when deploying KEDR functionality without the Sandbox component is presented in the figure below.
Program operating scenario when deploying KEDR functionality without the Sandbox component