Selecting an action to take when an exploit is detected

By default, on detection of an exploit, Kaspersky Endpoint Security blocks operations attempted by the exploit.

To choose an action to be taken when an exploit is detected:

1. In the main application window, click the Settings button.
2. In the left part of the window, in the Advanced Threat Protection section, select the Exploit Prevention subsection.

   The settings of the Exploit Prevention component are displayed in the right part of the window.

3. Select the necessary action in the On detecting exploit drop-down list:
   • Block operation.

     If this item is selected, on detecting an exploit, Kaspersky Endpoint Security blocks the operations of this exploit and makes a log entry with information about this exploit.

   • Inform.

     If this item is selected, when Kaspersky Endpoint Security detects an exploit it logs an entry containing information about the exploit and adds information about this exploit to the list of active threats.

4. To save changes, click the Save button.

Page top