About security tags

In an infrastructure managed by VMware vCenter Server and VMware NSX Manager, Kaspersky Security can assign the following security tags to a protected virtual machine:

• ANTI_VIRUS.VirusFound.threat=high. This tag is assigned to a virtual machine on which viruses or other malicious programs were detected.
• IDS_IPS.threat=high. This tag is assigned to a virtual machine whose inbound traffic displayed activity that is typical for network attacks.

You can view the security tags assigned to a virtual machine by viewing the virtual machine properties in the VMware vSphere Web Client console (in the Hosts and Clusters section on the Summary tab).

The ANTI_VIRUS.VirusFound.threat=high security tag is automatically removed if no viruses or other malicious programs are detected when a scan task is completed on the virtual machine. The IDS_IPS.threat=high security tag can be removed manually.

You can manually assign or remove security tags (for details, please refer to the Knowledge Base).

Kaspersky Security can assign security tags only if you enabled the use of VMware NSX Manager and configured the settings for connecting the Integration Server to VMware NSX Manager.

Page top