Enabling and disabling Threat Response actions
To enable or disable the execution of Kaspersky Endpoint Agent response actions to threats detected by Kaspersky Sandbox:
- Expand the Managed devices node in the Kaspersky Security Center Administration Console tree.
- Select the administration group for which you want to configure application settings.
- Perform one of the following actions in the details pane of the selected administration group:
- To configure application settings for a group of protected devices, select the Policies tab and open the Properties: <Policy name> window.
- In the tree of Kaspersky Security Center Administration Console, expand the Managed devices node.
- Expand the administration group whose policy settings you want to configure, and select the Policies tab in the results pane.
- Select the policy you want to configure.
- Open the Properties: <Policy name> window in one of the following ways:
- Select the Properties option in the context menu of the policy.
- Click the Configure policy settings link in the results pane of the selected policy.
- Double-click the required policy.
The Properties: <Policy name> window opens.
- To configure the settings of a task or application for an individual protected device, select the Devices tab and go to the settings of a local task or the application settings.
- In the Kaspersky Sandbox integration section select the Threat response subsection.
- In the Actions group of settings:
- Select the Take response actions on threats detected by Kaspersky Sandbox check box to enable Threat Response actions.
- Clear the Take response actions on threats detected by Kaspersky Sandbox check box to disable Threat Response actions.
- In the upper right corner of the settings group, change the switch from Unaffected by policy to Under policy.
- Click Apply and OK.
Page top