Configuring the Registry Access Monitor task

To configure the Registry Access Monitor task via the Web Plug-in:

1. In the main window of the Web Console, select Devices → Policies & profiles.
2. Click the policy name you want to configure.
3. In the <Policy name> window that opens select the Application settings tab.
4. Select the System Inspection section.
5. Click Settings in the Registry Access Monitor subsection.
6. In the Registry Access Monitor window, on the Registry Access Monitor Settings tab, configure the following settings:
   • In the Task mode group, select the required option from the list:
     • Block operations according to the rules

       If you select the Block operations according to the rules mode, Kaspersky Industrial CyberSecurity for Nodes blocks the Actions defined for the monitoring scope. Also, if the Apply Trusted Zone check box is selected, Kaspersky Industrial CyberSecurity for Nodes does not block the processes defined under Trusted Zone.

       By default, the Statistics only mode is applied.

     • Statistics only

       If the Statistics only mode is selected for the monitoring scope, Kaspersky Industrial CyberSecurity for Nodes compiles the statistics for registry key actions according the configured rules. Also, if the Apply Trusted Zone check box is selected, Kaspersky Industrial CyberSecurity for Nodes does not compile the statistics for processes defined under Trusted Zone.

       By default, the Statistics only mode is applied.

   • Select or clear the Apply Trusted Zone check box as applicable.

     If the Apply Trusted Zone check box is selected, the Trusted processes configured in the Trusted Zone are applied to the monitoring scope in addition to the configured rule.

     If the Apply Trusted Zone check box is cleared, the Trusted processes configured in the Trusted Zone are not applied to the monitoring scope.

     By default, the check box is cleared.

7. On the Task management tab, configure the task start schedule.
8. Click OK to save the changes.

Kaspersky Industrial CyberSecurity for Nodes immediately applies the new settings to the running task. Information about the date and time of settings modification are saved in the system audit log.

Page top