Kaspersky Endpoint Security for Mac

Integration with Endpoint Detection and Response Optimum

To integrate with Kaspersky Endpoint Detection and Response, you must add the Endpoint Detection and Response Optimum (EDR Optimum) component and configure Kaspersky Endpoint Security.

Note: EDR Optimum and Endpoint Detection and Response (KATA) components are not compatible with each other.

The following conditions must be fulfilled for Endpoint Detection and Response to work:

• Kaspersky Security Center version is 13.2 or higher. In earlier versions of Kaspersky Security Center, it is impossible to activate the Endpoint Detection and Response feature.
• Kaspersky Endpoint Detection and Response administration plug-in is installed. This is a single plug-in for working with agents on Windows, Mac and Linux operating systems. When working with Endpoint Detection and Response Optimum, you will need the Kaspersky Endpoint Security administration plug-in to create threat response tasks and the EDR administration plug-in to view alert details.
• The EDR Optimum component as part of Kaspersky Endpoint Security supports interaction with the Kaspersky Endpoint Detection and Response Optimum 3.0 solution. Interaction with earlier versions of Kaspersky Endpoint Detection and Response Optimum is not supported.
• EDR Optimum can be managed in the Web Console.
• The application is activated and the functionality is covered by the license.
• The Endpoint Detection and Response component is turned on.

Integration with Kaspersky Endpoint Detection and Response Optimum

Integration with Kaspersky Endpoint Detection and Response Optimum consists of the following steps:

1. Installing the Endpoint Detection and Response Optimum component

   You can select the Endpoint Detection and Response component during installation of Kaspersky Endpoint Security.

2. Activating Endpoint Detection and Response

   If the Endpoint Detection and Response component is not supported by your current license, you need to activate Kaspersky Endpoint Detection and Response separately.

   You can check whether the Endpoint Detection and Response functionality is supported by the current license in the License window.

3. Enabling Endpoint Detection and Response component

   You can enable or disable the component in Kaspersky Endpoint Security for Mac policy settings.

   How to enable or disable the Endpoint Detection and Response component in the Web Console

   1. In the main window of the Web Console, select Devices > Policies & profiles.
   2. Click the name of the Kaspersky Endpoint Security policy.

      The policy properties window opens.

   3. Select the Application settings tab.
   4. Go to Detection and Response > Endpoint Detection and Response.
   5. Turn on the Endpoint Detection and Response toggle switch.
   6. Save your changes.