Policy settings

You can use the policy to configure Kaspersky Endpoint Security settings for all client devices included in the administration group.

The set of policy settings and default values depend on the type of application license. Some policy settings are applied or not applied to the application depending on the application mode. Additionally, some application functions are not supported in a KESL container.

You can configure the application operation settings in the sections and subsections of the policy properties window described in the table below. For information about configuring general policy settings and event settings, refer to Kaspersky Security Center documentation.

Sections of the Policy properties window

Section	Subsections
Essential Threat Protection	File Threat Protection Exclusion scopes Exclusions by process Firewall Management Web Threat Protection Network Threat Protection
Advanced Threat Protection	Kaspersky Security Network Application Control Anti-Cryptor System Integrity Monitoring Device Control Behavior Detection
Local Tasks	Task management Removable Drives Scan
General settings	Proxy server settings Application settings Container Scan settings Managed Detection and Response Network settings Global exclusions Excluding process memory Storage settings Endpoint Detection and Response (KATA)
Light Agent mode	Connection to the Integration Server SVM discovery settings SVM connection tag SVM selection algorithm Protecting the connection