Compatibility of Kaspersky Endpoint Agent for Windows versions with Kaspersky Anti Targeted Attack Platform versions

Kaspersky Endpoint Agent uses predefined settings that determine the impact that it has on the performance of the local computer under scenarios of information retrieval and interaction with the Central Node component.

If the version of Kaspersky Anti Targeted Attack Platform installed on Central Node servers is incompatible with the version of Kaspersky Endpoint Agent installed on computers on the corporate LAN, the functionality of Kaspersky Anti Targeted Attack Platform may be limited. For example, IOC scanning of files and working with created tasks and policies on computers with Kaspersky Endpoint Agent can be unavailable for Central Node servers.

Information about the compatibility of Kaspersky Endpoint Agent component versions with Kaspersky Anti Targeted Attack Platform versions is listed in the table below.

Compatibility of Kaspersky Endpoint Agent for Windows versions with Kaspersky Anti Targeted Attack Platform versions

Kaspersky Endpoint Agent version	Type of Kaspersky Endpoint Agent	Compatibility with KATA 3.7	Compatibility with KATA 3.7.1	Compatibility with KATA 3.7.2	Compatibility with KATA 4.0	Compatibility with KATA 4.1
Endpoint Agent 3.7	Standalone installation or part of KES versions 11.2 and 11.3	No	No	No	No	No
Endpoint Agent 3.8	Standalone installation	Yes	Yes	The amount of data sent by Kaspersky Endpoint Agent is limited. AMSI scan event data not available. The amount of data sent by Kaspersky Endpoint Agent for Module loaded, File changed, Registry modified, Process: console interactive input events is limited. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform version 3.7.1 Help. The Get forensics task is not supported.	The amount of data sent by Kaspersky Endpoint Agent is limited. Event information does not display the OS name and OS name fields. The amount of data sent by Kaspersky Endpoint Agent for Module loaded, File changed, Registry modified, Process: console interactive input, and Connection to remote host events is limited. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform version 3.7.1 Help. AMSI scan event data not available. Get forensics, Start YARA scan, and Service management tasks are not supported.	The amount of data sent by Kaspersky Endpoint Agent is limited. Event information does not display the OS name and OS name fields. The amount of data sent by Kaspersky Endpoint Agent for Module loaded, File changed, Registry modified, Process: console interactive input, and Connection to remote host events is limited. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform Help for version 3.7.1. AMSI scan event data not available. Details of the scope of data for this event are described in the Kaspersky Anti Targeted Attack Platform Help for version 3.7.1. Get forensics, Start YARA scan, Service management, Get NTFS metafiles, Get process memory dump, Get registry key tasks are not supported. For detailed information about these tasks, refer to Kaspersky Anti Targeted Attack Platform Help for version 4.0.
Endpoint Agent 3.9	Standalone installation or part of KES versions 11.4 and 11.5	Yes	Yes	The amount of data sent by Kaspersky Endpoint Agent is limited.	The amount of data sent by Kaspersky Endpoint Agent is limited.	The amount of data sent by Kaspersky Endpoint Agent is limited.
Endpoint Agent 3.10	Standalone installation or part of KES 11.6	No	The amount of data received by the Kaspersky Anti Targeted Attack Platform server is limited. The server of this version of Kaspersky Anti Targeted Attack Platform accepts a limited amount of data from the Kaspersky Endpoint Agent program for Module loaded, File changed, Registry modified, Process: console interactive input events. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform version 3.7.1 Help.	Yes	The amount of data sent by Kaspersky Endpoint Agent is limited. The Host IP is not displayed in information about events. Getting an autorun points list using the Get forensics task is not supported. The Start YARA scan and Service management tasks are not supported.	The amount of data sent by Kaspersky Endpoint Agent is limited. The Host IP is not displayed in information about events. Getting an autorun points list using the Get forensics task is not supported. Start YARA scan, Service management, Get NTFS metafiles, Get process memory dump, Get registry key tasks are not supported. For detailed information about these tasks, refer to Kaspersky Anti Targeted Attack Platform Help for version 4.0.
Endpoint Agent 3.11	Standalone installation or part of KES 11.7	No	The amount of data received by the Kaspersky Anti Targeted Attack Platform server is limited.	Yes	The amount of data sent by Kaspersky Endpoint Agent is limited.	The amount of data sent by Kaspersky Endpoint Agent is limited.
Endpoint Agent 3.12	Standalone installation	No	No	No	Yes	The amount of data sent by Kaspersky Endpoint Agent is limited. Scanning autorun points using the Start YARA scan task is not supported. Get NTFS metafiles, Get process memory dump, Get registry key tasks are not supported. For detailed information about these tasks, refer to Kaspersky Anti Targeted Attack Platform Help for version 4.1.
Endpoint Agent 3.13	Standalone installation	No	No	No	The amount of data received by the Kaspersky Anti Targeted Attack Platform server is limited. A server of this Kaspersky Anti Targeted Attack Platform version can receive a limited scope of data from the Kaspersky Endpoint Agent program: Get NTFS metafiles, Get process memory dump, Get registry key tasks cannot be created in the web interface of the program.	Yes

Page top