Creating a Process Control rule with settings of conditions
The following options are provided for creating Process Control rules with settings of conditions:
Create a new rule for a tag.
Create an additional rule based on an existing rule.
To create a new rule for a tag:
Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
Select the Process Control section.
On the Tags tab, select the tag for which you want to create a Process Control rule.
The details area appears in the right part of the web interface window.
Click the Create tag rule button.
This opens the Rules tab containing the details area for the created Process Control rule.
Perform the following actions:
Use the Enable toggle to define the status of the rule: Enabled or Disabled.
Enter the rule name and description.
You can use letters of the English alphabet, numerals, and the following special characters: ( ) . , : ; ? ! * + % - < > @ [ ] { } / \ _ $ #. The rule name must begin and end with any permitted character except a space.
Select the type of condition and configure the settings depending on the selected type.
Configure the settings for registering an event when the rule is triggered (event title, description and score, and settings for saving traffic).
Click Save.
To create an additional Process Control rule based on an existing rule:
Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
Select the Process Control section.
On the Rules tab, select the rule that you want to use as the basis for creating another rule for the same tag.
The details area appears in the right part of the web interface window.
Click the Create another rule for tag button.
You will see the details area for the created Process Control rule. For the new rule, you will see information about the device, protocol and tag received from the settings of the selected rule.
Perform the following actions:
Use the Enable toggle to define the status of the rule: Enabled or Disabled.
Enter the rule name and description.
Select the type of condition and configure the settings depending on the selected type.
Configure the settings for registering an event when the rule is triggered (event title, description and score, and settings for saving traffic).