This Help provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.
You can select the Notify device user about prevention option.
If Execution prevention is used in the Active mode and the Notify device user about prevention option is selected, pop-up notifications will be displayed on the protected devices with information about the triggered Execution prevention rules. If the device user does not close the pop-up notification, it will close automatically in 60 seconds after it appears. By default, the Notify device user about prevention option is disabled.