To add network sessions showing any malicious or encryption activity to the Blocked Hosts and block access to network file resources for those network sessions, at least one of the following tasks must run in active mode:
Real-Time File Protection
Anti-Cryptor
Configure the Real-Time File Protection task:
In the Kaspersky Industrial CyberSecurity for Nodes Console tree, expand the Real-Time Computer Protection node.
Select the Real-Time File Protection child node.
Click the Properties link in the details pane.
The Task settings window opens.
In the Deep section, select the Block access to network shared resources for the hosts that show malicious activity check box if you want Kaspersky Industrial CyberSecurity for Nodes to block access to network file resources for network sessions on which malicious activity is detected while the Real-Time File Protection task is running.
If the task has not been started, open the Schedule tab:
Select the Run by schedule check box.
Select the At application launch frequency in the drop-down list.
In the Task settings window, click OK.
The newly configured settings are saved.
Configure the Anti-Cryptor task:
In the Kaspersky Industrial CyberSecurity for Nodes Console tree, expand the Real-Time Computer Protection node.
Select the Anti-Cryptor child node.
Click the Properties link in the details pane.
The Task settings window opens.
If the task has not been started, open the Schedule tab:
Select the Run by schedule check box.
Select the At application launch frequency in the drop-down list.