Viewing the Kaspersky Industrial CyberSecurity Endpoint Detection and Response integration status

Viewing the integration status in the Web Console

You can view the status of the Kaspersky Industrial CyberSecurity Endpoint Detection and Response integration in Web Console by selecting the Assets (Devices) section → Managed devices → <device name> link → Applications → <Kaspersky Industrial CyberSecurity for Linux Nodes application name> link → General → Components.

Viewing the integration status on the command line

You can view the status of integration with Kaspersky Industrial CyberSecurity Endpoint Detection and Response using the command line by running the kics-control --app-info command.

Integration statuses

One of the following statuses is displayed for the ICS EDR component:

• Running.

  This status is displayed when the following conditions are simultaneously satisfied:

  • A license key required by ICS EDR is added.
  • The current date is earlier than the license expiration date.
  • One or more of the Kaspersky Industrial CyberSecurity for Linux Nodes components that ICS EDR requires are enabled.
  • Kaspersky Industrial CyberSecurity Endpoint Detection and Response Integration is enabled on the device.
• Stopped.

  This status is displayed in the following cases:

  • Kaspersky Industrial CyberSecurity Endpoint Detection and Response Integration is disabled.
  • Kaspersky Industrial CyberSecurity for Linux Nodes is stopped.
• Not supported by license.

  This status is displayed in the following cases:

  • The current date is later than the license expiration date.
  • The current license does not include the ICS EDR functionality.
• Malfunction.

  This status is displayed when the following conditions are simultaneously satisfied:

  • The current date is earlier than the license expiration date.
  • One or more Kaspersky Industrial CyberSecurity for Linux Nodes components that ICS EDR requires has run into an error.

Page top