This section provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.
The settings of automatic network isolation can be configured in the policy properties, and the settings of network isolation on demand (manually enabled settings) can be configured in the properties of an individual device.
To configure the settings for automatic disabling of network isolation:
In the Managed devices folder of the Administration Console tree, select the folder with the name of the administration group, which includes the required device.
In the workspace, select the Devices tab.
Select the device for which you want to configure Kaspersky Endpoint Agent settings.
Select Properties in the device context menu.
The device properties window opens.
Select the Applications section.
A list of Kaspersky applications installed on the device is displayed in the window.
Select Kaspersky Endpoint Agent and open its properties window in one of the following ways:
Double-click the application name.
In the application context menu, select Properties.
Click the Properties button under the list of Kaspersky applications.
Open Kaspersky Security Center Administration Console.
In the console tree, open the Policies folder.
Select Kaspersky Endpoint Agent policy and open its properties window in one of the following ways:
Double-click the policy name.
Select Properties in the policy context menu.
Select the Configure policy settings item in the right part of the window.
In the Network Isolation section select General settings.
In the Device isolation terms group of settings, enable or disable the Automatically end device isolation after option to enable or disable the automatic disabling of network isolation after a specified period of time.
This feature is enabled by default.
Specify the period after which network isolation will be disabled.
The default period is 30 minutes.
Click OK to save the changes.
If the Automatically end device isolation after check box is not selected in the network isolation settings and the time interval is not specified, network isolation will be disabled automatically after five hours since it was enabled.