Basic functionality

Core

This component contains the set of basic application functions and ensures their operation.

Applications Launch Control

AppCtrl

This component monitors user attempts to run applications and allows or denies application launch in accordance with the set Applications Launch Control rules.

It is implemented in the Applications Launch Control task.

Device Control

DevCtrl

This component tracks attempts to connect external devices to a protected device and allows or denies use of these devices according to the specified device control rules.

The component is implemented in the Device Control task.

Anti-Virus Protection

AVProtection

This component ensures anti-virus protection and contains the following components:

• On-Demand Scan
• Real-Time File Protection

AMSI Scanner

ScriptChecker

This component controls the execution of scripts created using Microsoft Windows scripting technologies (Active Scripting) such as VBScript or JScript. The application can also process PowerShell scripts and scripts run in the Microsoft Office applications on operating systems with the Antimalware Scan Interface (AMSI) installed. You can allow or block execution of a script that has been found to be dangerous or probably dangerous.

Portable Scanner

Scanner

This component examines the isolated devices and performs the security inspection.

You can scan several devices in a row - Portable scanner generates an individual report for each scanned device. Scanner applies the default security level: Disinfect. Remove, if disinfection fails.

On-Demand Scan

Ods

This component installs Kaspersky Industrial CyberSecurity for Nodes system files and On-demand scan tasks (scanning of objects on the protected device upon request).

Real-Time File Protection

Oas

This component performs virus scans of files on the protected device when these files are accessed.

It implements the Real-Time File Protection task.

Anti-Cryptor

AntiCryptor

This component fills the list of blocked hosts with names of remote devices that show malicious activity.When installing on Windows XP SP2, the component is not installed.

It implements the Anti-Cryptor task.

Use of Kaspersky Security Network

Ksn

This component provides protection on the basis of Kaspersky cloud technologies.

It implements the KSN Usage task (sending requests to and receiving conclusions from the Kaspersky Security Network service).

File Integrity Monitor

Fim

This component logs operations performed on files in the specified monitoring scope.

The component implements the File Integrity Monitor task.

Registry Access Monitor

RegMonitor

This component makes it possible to monitor actions performed with the specified registry branches and keys in the monitoring scopes defined in the task settings.

The component implements the Registry Access Monitor.

Exploit Prevention

AntiExploit

This component makes it possible to manage settings to protect memory used by processes in a device's memory.

Wi-Fi Control

WiFiControl

This component controls the protected computer's attempts to connect to Wi-Fi networks.

Firewall Management

Firewall

This component makes it possible to manage Windows Firewall through the Kaspersky Industrial CyberSecurity for Nodes graphical user interface.

The component implements the Firewall Management task.

Module for integration with Kaspersky Security Center Network Agent

AKIntegration

Provides a connection between the Kaspersky Industrial CyberSecurity for Nodes and the Kaspersky Security Center Network Agent.

You can install this component on the protected device if you intend to manage the application via the Kaspersky Security Center.

Log Inspection

LogInspector

This component monitors the integrity of the protected environment based on the results of an inspection of Windows event logs.

PLC Project Investigation

Plc

This component allows to receive information about the PLC projects currently used in the industrial network.

PLC Project Integrity Check

Plc

This component allows to check the integrity of PLC projects used in an industrial system

Set of "System Monitor" performance counters

PerfMonCounters

This component installs a set of System Monitor performance counters. Performance counters enable Kaspersky Industrial CyberSecurity for Nodes performance to be measured and potential bottlenecks to be localized on the protected device when Kaspersky Industrial CyberSecurity for Nodes is used with other programs.

SNMP counters and traps

SnmpSupport

This component publishes Kaspersky Industrial CyberSecurity for Nodes counters and traps via Simple Network Management Protocol (SNMP) in Microsoft Windows. This component may be installed on the protected device only if Microsoft SNMP is installed on the same protected device.

Kaspersky Industrial CyberSecurity for Nodes icon in the notification area

TrayApp

This component displays the Kaspersky Industrial CyberSecurity for Nodes icon in the task tray notification area of the protected device. The Kaspersky Industrial CyberSecurity for Nodes icon displays the status of device protection and can be used open the Kaspersky Industrial CyberSecurity for Nodes Console in MMC (if installed) and the About the application window.