Adding a connector

Prior to adding a connector, you are advised to create a separate user account that the recipient system will use to connect to the application.

To add a connector:

  1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
  2. Select Settings → Connectors.
  3. Open the details area by clicking the Add connector link.
  4. Specify the main settings of the connector:
    • User name that the recipient system will use to connect to the application through the connector. You must indicate the name of one of the application users.
    • Address of the node that will host the connector (for system types of connectors, this is the address of the Server computer if the connector is running on the Server node).
    • Password for accessing the connector certificate. Using the defined password, the certificate will be encrypted in the communication data package of the connector.
    • Connector name.
    • Connector type.
    • Connector description.
    • Option for forwarding application messages through the connector: All or None sent.
    • Option for forwarding audit entries through the connector: All or None sent.
  5. Specify the advanced settings depending on the type of connector.

    You can configure the following settings for system types of connectors:

    • SIEM Syslog:
      • Server address.
      • Server port.
      • Data transfer protocol.
    • Email:
      • Address indicated as the sender of email messages.
      • Recipient addresses of email messages.
      • Subjects of email messages for events, application messages, and audit entries.
      • Templates of text descriptions for events, application messages, audit entries, network interactions, and for entire messages containing notifications. Templates are formed by using variables.
      • Subject and text of an email message notifying when the maximum number of sent notifications is reached.
      • Maximum number of email messages sent per day.
      • Maximum number of notifications in each message. Defines the maximum number of registered notifications of one type (events, application messages, or audit entries) that can be put into one email message. If the number of registered notifications exceeds the maximum number, an additional email message is generated (within the daily limit).
  6. Click Save.

    The new connector will appear in the connectors table. A new column with the connector name will also appear in the event types table.

    At the same time, the Server generates a communication data package for the new connector. Then the browser saves the downloaded file. Depending on your browser settings, your screen may show a window in which you can change the path and name of the saved file.

    You will need to upload the contents of the new communication data package to the app that will use the connector.

  7. Create the connector service on the Server by using the registrar.py script located on the Server computer in the /opt/kaspersky/kics4net-connectors/sbin/ folder. The script must be run with the create parameter (to run it, enter the following command: sudo python3 registrar.py create). When prompted by the script, specify the data about the connector: the name of the connector, the path to the communication data package, the connector certificate access password.

See also:

Managing connectors

About forwarding events, application messages and audit entries to recipient systems

Page top