Configuring integration between Kaspersky Endpoint Agent and Kaspersky Managed Detection and Response

Configuring the integration of Kaspersky Endpoint Agent with Kaspersky Sandbox is not available in Kaspersky Managed Detection and Response interface.

To configure Kaspersky Endpoint Agent integration with Kaspersky Managed Detection and Response, you must first obtain a BLOB file.

To configuring integration between Kaspersky Endpoint Agent and Kaspersky Managed Detection and Response:

1. Do one of the following:
   • Open the application properties window for an individual device.
     1. In the main Web Console window select Devices → Managed devices.
     2. Select the device.
     3. In the <Device name> window that opens, select the Applications tab.
     4. Select Kaspersky Endpoint Agent.
     5. In the window that opens, select the Application settings tab.
   • Open the policy properties window.
     1. In the main Web Console window select Devices → Policies and policy profiles.
     2. Select the policy you want to configure.
     3. In the <Policy name> window that opens, select the Application settings tab.
2. Select the Managed Detection and Response section.
3. In the Managed Detection and Response settings group, do the following:
   1. Enable Managed Detection and Response enabled.
   2. Click the Upload configuration file button, and select the BLOB file.

      By downloading BLOB, you agree to automatically submit the specified information from the device with Kaspersky Endpoint Agent installed to Kaspersky for processing. Do not download BLOB if you do not want this information to be processed.

   3. In the User ID field, enter the user identifier specified in the BLOB file.
4. Click Save to save the changes.

Page top