Please enable JavaScript in your web browser!
Configuring the blocking period of an untrusted computer
An untrusted computer is a remote computer that is engaging in malicious activity or data encryption. By default, Kaspersky Endpoint Security blocks the session of the remote user for one hour. When the blocking period expires, Kaspersky Endpoint Security removes the computer from the block list and restores access to the shared folder.
How to configure the blocking period of an untrusted computer in the Administration Console (MMC)
In the Kaspersky Security Center Administration Console tree, select Policies . Select the necessary policy and double-click to open the policy properties. In the policy window, select Advanced Threat Protection → Anti-Cryptor . In the Action on threat detection block, select Block connection for N min . Configure the blocking period of an untrusted computer that is engaging in malicious activity or data encryption. Save your changes. How to configure the blocking period of an untrusted computer in the Web Console and Cloud Console
In the main window of the Web Console, select Assets (Devices) → Policies & profiles . Click the name of the Kaspersky Endpoint Security policy.The policy properties window opens.
Select the Application settings tab. Go to Host Threat Protection → Behavior Analysis → Anti-Cryptor . Under Action on threat detection , configure the blocking period of an untrusted computer that is engaging in malicious activity or data encryption. Save your changes. How to configure the blocking period of an untrusted computer in the application interface
In the main application window , click the button. In the application settings window, select Advanced Threat Protection → Anti-Cryptor . In the Action on threat detection block, select Block connection for (min) . Configure the blocking period of an untrusted computer that is engaging in malicious activity or data encryption. Save your changes. As a result, the remote computer will be locked. To unlock the remote computer, you can restart Kaspersky Endpoint Security.
Page top