Kaspersky Endpoint Detection and Response (KATA) Integration task settings

The table describes all available settings and the default values of all the settings that you can specify for the Kaspersky Endpoint Detection and Response (KATA) Integration task.

Kaspersky Endpoint Detection and Response (KATA) Integration task settings

Setting

Description

Value

Address

KATA server address

IP address (IPv4 or IPv6) or fully qualified domain name (FQDN) of the integration server can be specified.

To ensure that communication with the KATA server is not interrupted if the application fails when network isolation is enabled for the device, it is recommended to specify the server's IP address.

Default value: 127.0.0.1.

Port

Port to connect to the KATA server.

The default value is 443.

UseClientPinnedCertificate

Enable and disable two-way authentication to further secure the connection to the KATA server.

If two-way authentication is enabled on the KATA server side, you need to enable two-way authentication in the settings of Kaspersky Endpoint Detection and Response (KATA) Integration task and add the client certificate before starting the task.

Yes – use two-factor authentication to further secure the connection to the KATA server.

No (default value) — do not use two-factor authentication.

SynchronizationPeriod

Frequency of sending synchronization requests to the KATA server in minutes.

The default value is 5.

ConnectionTimeout

Maximum time to wait for a connection to the KATA server in seconds.

The default value is 10.

RequestTimeout

Maximum time to wait for a response from the KATA server in seconds.

The default value is 10.

MaximumDataTransferTime

The maximum delay in sending events to the KATA server in seconds.

The default value is 30.

UseRequestCountLimits

Enable and disable regulating the number of events sent to the KATA server.

Yes (default value) – regulate the number of events sent.

No – do not regulate the number of events.

MaximumNumberOfEventsInHour

Maximum number of events per hour

The default value is 3000.

EventLimitExceededPercentage

Event throttle threshold (percentage). Sending events is limited if the ratio of events of a certain type to the total number of events exceeds the configured threshold (as a percentage).

The default value is 15.

EnableTelemetry

Enable and disable sending event data (telemetry) to the KATA server.

Yes (default value) – send telemetry to the KATA server.

No – do not send telemetry.

Page top