You can configure the integration of Kaspersky Anti Targeted Attack Platform with mail sensors. A mail sensor is a server or a virtual machine on which Kaspersky Secure Mail Gateway (KSMG) or Kaspersky Security for Linux Mail Server (KLMS) is installed.
If this integration is enabled, applications send copies of email messages to be scanned by Kaspersky Anti Targeted Attack Platform and can block individual messages based on the results of this scan. When a threat is detected, Kaspersky Anti Targeted Attack Platform creates an alert.
If you have configured KSMG integration, the alerts contain information about the actions that KSMG applied to the message. You can find these alerts in the table of alerts by filtering them by Object ID and Actions on object.
If you have configured scan exclusion rules by message recipient and MD5 checksum on the Kaspersky Anti Targeted Attack Platform side, such rules are not applied when messages are processed by mail sensors.
Page top