Configuring exclusions from network isolation

Expand all | Collapse all

This section provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.

Exclusions specified in the policy properties are applied only if network isolation is automatically enabled by the application in response to detection. Exclusions specified in the device properties are applied only if network isolation is enabled manually.

The active policy does not block the usage of network isolation exclusions specified in the device properties, since the scenarios for applying these settings are different.

To configure the settings of network isolation exclusions:

1. Do one of the following:
   • Open the application properties window for an individual device.
     1. In the main Kaspersky Security Center Web Console window select Devices → Managed devices.
     2. Select the device.
     3. In the <Device name> window that opens, select the Applications tab.
     4. Select Kaspersky Endpoint Agent.
     5. In the window that opens, select the Application settings tab.
   • Open the policy properties window.
     1. In the main Kaspersky Security Center Web Console window select Devices → Policies and profiles.
     2. Select the policy you want to configure.
     3. In the <Policy name> window that opens, select the Application settings tab.
2. If you open the application properties window for an individual device, in the Network Isolation section, select Exclusions.
3. If you open the application policy properties window, in the Network Isolation section, select Isolation on detection.

   You can perform the following actions:

   • Add custom exclusion

     To add a custom exclusion:

     1. Click Add.

        The Rule properties window opens.

     2. Specify the required exclusion settings and click OK.

        The new rule is added to the exclusion list.

   • Add exclusions from the list of predefined network profiles

     To add exclusions from the list of predefined network profiles:

     1. Click Add.

        In the window that opens, select the required network profile from Predefined network profiles list.

        You can select several network profiles at once.

     2. Click OK.

        Exclusions from the selected network profiles are added to the list of exclusions.

   • Change the settings of the added exclusion

     To change the settings of the added exclusion:

     1. Click the name of the required rule.
     2. The Rule properties window opens.
     3. Make the required changes and click OK.

     The selected exclusion is changed.

     If you change the settings of the exclusion that was specified in the network profile, this exclusion will become custom.

   • Remove exclusion from the list

     To remove an exclusion from the list:

     1. In the Exclusions list, select the exclusion you want to remove.
     2. Click the Remove button.

     The exclusion is removed from the list of exclusions.

4. Click OK to save the changes.

See also Enabling and disabling network isolation Enabling and disabling user notification about network isolation Configuring automatic disabling of network isolation Network isolation

Page top