Program modes based on the license

Kaspersky Anti Targeted Attack Platform provides various operating modes depending on the added keys.

No license

After the program is installed and the web interface is started, the program operates in this mode until you add a key.

Unlicensed mode has the following limitations:

Program databases are not updated.
There is no connection to the Kaspersky Security Network Knowledge Base.
Receiving and processing of data from network traffic and mail traffic is limited.
The web interface sections Threat Hunting, Tasks, Prevention, Custom rules, Storage, and Endpoint Agents have limited functionality.

Commercial license

In this operating mode, the program connects to the Kaspersky Security Network Knowledge Base and updates its databases.

When the key for commercial license expires, the program stops updating its databases and does not connect to the Knowledge Base of Kaspersky Security Network.

To resume the operation of the program, you must replace the key or add a new commercial license key.

In the current version of Kaspersky Anti Targeted Attack Platform, the available functionality of the program also depends on the type of the added license key:

KATA and KEDR keys. Full functionality of the program.
KEDR key. Receiving and processing of data from network traffic and mail traffic is limited.
KATA key. The web interface sections Threat Hunting, Tasks, Prevention, Custom rules, Storage, and Endpoint Agents have limited functionality.