Adding an exclusion

To add an exclusion to the Trusted Zone via the Kaspersky Security Center policy:

1. Open the Trusted Zone window.
2. On the Exclusions tab, specify the objects to be skipped by Kaspersky Industrial CyberSecurity for Nodes during scanning and protection:
   • To create recommended exclusions, click the Add recommended exclusions button.
     

     Clicking this button allows you to extend the list of exclusions by adding exclusions recommended by Microsoft, and Kaspersky.

   • To import preconfigured exclusions, click the Import button and, in the window that opens, select the configuration file in XML format stored on your device.

     Exclusions from the XML file will be added to the exclusion list.

   • To manually specify the conditions under which an object will be considered trusted, click the Add button and proceed to the next steps.

     The Exclusion window opens.

3. If you clicked the Add button, in the Object will not be scanned if the following conditions are met section, specify the objects that you want to exclude from the protection / scan scope and objects that you want to exclude among detectable objects:
   • If you want to exclude an object from the protection or scan scope:
     1. Select the Object to scan check box.
        

        Adds a file, folder, drive, or script file to an exclusion.

        If the check box is selected, Kaspersky Industrial CyberSecurity for Nodes skips the specified predefined scope, file, folder, drive or script file while running the scan using the Kaspersky Industrial CyberSecurity for Nodes component selected in the Rule usage scope section.

        The check box is cleared by default.

     2. Click the Edit button.

        The Select an object window opens.

     3. Specify the object that you want to exclude from the scan scope.

        When specifying the objects, you can use names masks (via ? and * characters) and all types of environment variables. The resolving of environment variables (replacing variables with their values) is performed by Kaspersky Industrial CyberSecurity for Nodes when starting a task, or when applying new settings to a running task (not applicable to On-Demand Scan tasks). Kaspersky Industrial CyberSecurity for Nodes resolves environment variables under the account used to start the task. For more information on environment variables, refer to the Microsoft Knowledge Base.

     4. Click OK.
     5. Select the Apply to subfolders check box, if you want to exclude all child files and folders of the specified object from the protection or scan scope.
   • If you want to specify the name of a detectable object:
     1. Select the Objects to detect check box.
        

        Objects are excluded from scanning by the name or name mask of the detectable object. The list of names of detectable objects is available on the Virus Encyclopedia website.

        If this check box is selected, Kaspersky Industrial CyberSecurity for Nodes skips specified detectable objects during scanning.

        If the check box is cleared, Kaspersky Industrial CyberSecurity for Nodes detects all objects specified in the application by default.

        The check box is cleared by default.

     2. Click the Edit button.

        The List of objects to detect window opens.

     3. Specify the name or name mask of the detectable object according to the Virus Encyclopedia classification.
     4. Click the Add button.
     5. Click OK.
4. In the Exclusion usage scope section, select the check boxes next to the names of the tasks to which the exclusion should be applied.
   

   Name of the Kaspersky Industrial CyberSecurity for Nodes task in which the rule is used.

5. Click OK.

The exclusion is displayed in the list on the Exclusions tab of the Trusted Zone window.

Page top