Configuring the File Integrity Monitor task

Expand all | Collapse all

To configure the File Integrity Monitor task via the Web Plug-in:

1. In the main window of the Web Console, select Devices → Policies & profiles.
2. Click the policy name you want to configure.
3. In the <Policy name> window that opens select the Application settings tab.
4. Select the System Inspection section.
5. Click Settings in the File Integrity Monitor subsection.
6. In the File Integrity Monitor window that appears, on the File operations monitoring settings tab, configure the following settings:
   1. Clear or select the Log information about file operations that appear during the monitoring interruption period check box.

      The check box enables or disables monitoring of the file operations specified in the File Integrity Monitor task settings when the task is not running for any reason (removal of a hard disk, task stopped by user, software error).

      If the check box is selected, Kaspersky Embedded Systems Security will record events in all monitoring scopes when the File Integrity Monitor task is not running.

      If the check box is cleared, the application will not log file operations in monitoring scopes when the task is not running.

      The check box is selected by default.

   2. Clear or select the Block attempts to compromise the USN log check box.

      The check box enables or disables protection of the USN log.

      If the check box is selected, Kaspersky Embedded Systems Security will block attempts to delete the USN log or to compromise the USN log's content.

      If the check box is cleared, the application will not monitor changes to the USN log.

      The check box is selected by default.

   3. Select or clear the Apply Trusted Zone check box as applicable.

      If the Apply Trusted Zone check box is selected, the Exclusions and Trusted processes configured in the Trusted Zone are applied to the monitoring scope in addition to the configured rule.

      If the Apply Trusted Zone check box is cleared, the Exclusions and Trusted processes configured in the Trusted Zone are not applied to the monitoring scope.

      By default, the check box is cleared.

7. On the Task management tab, configure the task start schedule.
8. Click OK to save the changes.

Kaspersky Embedded Systems Security immediately applies the new settings to the running task. Information about the date and time of settings modification are saved in the system audit log.

Page top