Kaspersky Security Network

To protect your computer more effectively, Kaspersky Endpoint Security uses data that is received from users around the globe. Kaspersky Security Network is designed to receive such data.

Kaspersky Security Network (KSN) is an infrastructure of cloud services providing access to the online Kaspersky Knowledge Base that contains information about the reputation of files, web resources, and software. The use of data from Kaspersky Security Network ensures faster responses by Kaspersky Endpoint Security to new threats, improves the performance of some protection components, and reduces the likelihood of false positives. If you are participating in Kaspersky Security Network, KSN services provide Kaspersky Endpoint Security with information about the category and reputation of scanned files, as well as information about the reputation of scanned web addresses.

Use of Kaspersky Security Network is voluntary. The application prompts you to use KSN during initial configuration of the application. Users can begin or discontinue participation in KSN at any time.

For more detailed information about sending Kaspersky statistical information that is generated during participation in KSN, and about the storage and destruction of such information, please refer to the Kaspersky Security Network Statement and the Kaspersky website. The ksn_<language ID>.txt file with the text of the Kaspersky Security Network Statement is included in the application distribution kit.

To reduce the load on KSN servers, Kaspersky experts may release application updates that temporarily disable or partly restrict requests to Kaspersky Security Network. In this case, the status of the connection to KSN in the local interface of the application is Enabled with restrictions.

KSN Infrastructure

Kaspersky Endpoint Security supports the following KSN infrastructural solutions:

• Global KSN is the solution that is used by most Kaspersky applications. KSN participants receive information from Kaspersky Security Network and send Kaspersky information about objects detected on the user's computer to be analyzed additionally by Kaspersky analysts and to be included in the reputation and statistical databases of Kaspersky Security Network.
• Private KSN is a solution that enables users of computers hosting Kaspersky Endpoint Security or other Kaspersky applications to obtain access to reputation databases of Kaspersky Security Network, and to other statistical data without sending data to KSN from their own computers. Private KSN is designed for corporate customers who are unable to participate in Kaspersky Security Network for any of the following reasons:
  • Local workstations are not connected to the Internet.
  • Transmission of any data outside the country or outside the corporate LAN is prohibited by law or restricted by corporate security policies.

By default, Kaspersky Security Center uses Global KSN. You can configure the use of Private KSN in the Administration Console (MMC) and Kaspersky Security Center 12 Web Console. It is not possible to configure the use of Private KSN in the Kaspersky Security Center Cloud Console.

For more details about Private KSN, please refer to the documentation on Kaspersky Private Security Network.

KSN Proxy

User computers managed by Kaspersky Security Center Administration Server can interact with KSN via the KSN Proxy service.

The KSN Proxy service provides the following capabilities:

• The user's computer can query KSN and submit information to KSN even without direct access to the Internet.
• The KSN Proxy service caches processed data, thereby reducing the load on the external network communication channel and speeding up receipt of the information that is requested by the user's computer.

For more details on the KSN Proxy service, please refer to the Kaspersky Security Center Help.

Kaspersky Security Network settings

Parameter	Description
Extended KSN mode	Extended KSN mode is a mode in which Kaspersky Endpoint Security sends additional data to Kaspersky. Kaspersky Endpoint Security uses KSN to detect threats regardless of the toggle position.
Cloud mode	Cloud mode refers to the application operating mode in which Kaspersky Endpoint Security uses a light version of anti-virus databases. Kaspersky Security Network supports the operation of the application when light anti-virus databases are being used. The light version of anti-virus databases lets you use approximately half of the computer RAM that would otherwise be used with the usual databases. If you do not participate in Kaspersky Security Network or if cloud mode is disabled, Kaspersky Endpoint Security downloads the full version of anti-virus databases from Kaspersky servers. If the toggle button is switched on, Kaspersky Endpoint Security uses the light version of anti-virus databases, which reduces the load on operating system resources. Kaspersky Endpoint Security downloads the light version of anti-virus databases during the next update after the check box was selected. If the toggle button is switched off, Kaspersky Endpoint Security uses the full version of anti-virus databases. Kaspersky Endpoint Security downloads the full version of anti-virus databases during the next update after the check box was cleared.
Computer status when KSN servers are unavailable	The items in this drop-down list determine the status of a computer in the Web Console when KSN servers are unavailable (Devices → Managed devices).
Use KSN Proxy	If the check box is selected, Kaspersky Endpoint Security uses the KSN Proxy service. You can configure the KSN Proxy service settings in the Administration Server properties.
Use KSN servers when KSN Proxy is not available	If the check box is selected, Kaspersky Endpoint Security uses KSN servers when the KSN Proxy service is unavailable. KSN servers may be located both on the side of Kaspersky (when Global KSN is used) and on the side of third parties (when Private KSN is used).

See also: Managing the application via the local interface About data provision when using Kaspersky Security Network Enabling and disabling use of Kaspersky Security Network Enabling and disabling cloud mode for protection components Checking the connection to Kaspersky Security Network Checking the reputation of a file in Kaspersky Security Network

Page top