When this mode is selected, Kaspersky Industrial CyberSecurity for Nodes does not block access to nor perform any actions on infected or other detected objects. The following event is recorded in the task log: Object not disinfected. Reason: no action was taken to neutralize detected object due to user-defined settings. The event specifies all available information about the detected object.
Notify only mode should be separately configured for each protection or scan area. This mode is not used by default in any of the security levels. If you select this mode, Kaspersky Industrial CyberSecurity for Nodes automatically changes the security level to Custom.
When this option is selected, Kaspersky Industrial CyberSecurity for Nodes blocks access to the detected or probably infected object. In the drop-down list, you can select an additional action to perform on blocked objects.
Perform additional action.
Select the action from the drop-down list:
Disinfect.
Disinfect. Remove if disinfection fails. Disinfect. Remove if disinfection fails.
If the check box is selected, you can independently set primary and secondary actions for each type of detected objects by clicking the Settings button next to the check box. However, Kaspersky Industrial CyberSecurity for Nodes will not allow to open or execute an infected object regardless of your choice.
If the check box is cleared, Kaspersky Industrial CyberSecurity for Nodes performs actions that are selected in the Action to perform on infected and other objects and Action to perform on probably infected objects blocks for the specified object types.
By default, the check box is cleared.
Click the Settings button.
In the window that opens, select a primary action and a secondary action (to be performed if the primary action fails) for each type of detected object.
This check box enables or disables forced removal of the parent compound file when a malicious, probably infected or other detectable embedded child object is detected.
If the check box is selected and the task is configured to remove infected and probably infected objects, Kaspersky Industrial CyberSecurity for Nodes forcibly removes the entire parent compound object when a malicious or other embedded object is detected. The parent file along with all of its contents are forcibly removed if the application cannot remove only the detected child object (for example, if the parent object cannot be modified).
If this check box is cleared and the task is configured to remove infected and probably infected objects, Kaspersky Industrial CyberSecurity for Nodes does not perform the selected action if the parent object cannot be modified.