Enabling or disabling Kaspersky Industrial CyberSecurity Endpoint Detection and Response integration

In the Web Console, you can enable or disable the ICS EDR component and configure the integration with Kaspersky Industrial CyberSecurity Endpoint Detection and Response:

• In the policy properties (Application settings → Detection and Response → Industrial CyberSecurity Endpoint Detection and Response)
• In the device properties (Assets (Devices) → Managed devices → <device name> link → Applications → <Kaspersky Industrial CyberSecurity for Linux Nodes application name> link → Application settings → Detection and Response → Industrial CyberSecurity Endpoint Detection and Response)

  The ICS EDR component cannot be enabled or disabled in the device properties if a policy is applied to the device.

  Industrial CyberSecurity Endpoint Detection and Response Integration settings.

  Setting	Description
  Industrial CyberSecurity Endpoint Detection and Response enabled/disabled	Enables or disables the ICS EDR component, which is necessary for integrating Kaspersky Industrial CyberSecurity for Linux Nodes with the Industrial CyberSecurity Endpoint Detection and Response solution. The toggle button is switched off by default.
  Network isolation	The Configure device unblocking link opens the Configure device unblocking window, where you can configure the duration of device blocking.
  Exclusions	The Configure exclusions link opens the Exclusions window, where you can configure network isolation exceptions.

Page top