Kaspersky Security for Windows Server

Actions to perform upon completion of automatic rule generation

To configure the actions to be taken by Kaspersky Security for Windows Server after the Rule Generator for Applications Launch Control task is finished:

1. Open the Properties: Rule Generator for Applications Launch Control window.
2. Open the Options tab.
3. In the After task completes section, configure the following settings:
   • Add allowing rules to the list of Applications Launch Control rules

     

     The check box enables or disables adding the newly generated allowing rules to the list of Applications Launch Control rules. The list of Applications Launch Control rules is displayed when you click the Applications Launch Control rules link in the details pane of the Applications Launch Control node.

     If this check box is selected, Kaspersky Security for Windows Server adds the rules generated by the Rule Generator for Applications Launch Control task to the list of Applications Launch Control rules based on the selected principle for adding rules.

     If this check box is cleared, Kaspersky Security for Windows Server does not add the newly generated allowing rules to the list of Applications Launch Control rules. The generated rules are only exported to a file.

     The check box is selected by default.

     .
   • Principle of adding

     

     This drop-down list is used to specify the method used to add the newly generated allowing rules to the list of Applications Launch Control rules.

     • Add to existing rules. The rules are added to the list of existing rules. Rules with identical settings are duplicated.
     • Replace existing rules. The rules replace the existing rules in the list.
     • Merge with existing rules. The rules are added to the list of existing rules. Rules with identical settings are not added; the rule is added if at least one rule parameter is unique.

     By default, the Merge with existing rules method is selected.

     .
   • Export allowing rules to file.
   • Add server details to file name

     

     The check box enables or disables adding information about the protected device to the name of the file to which the allowing rules will be exported.

     If this check box is selected, the application adds the protected device name and the file creation date and time to the name of the export file.

     If the check box is cleared, the application does not add information about the protected device to the name of the export file.

     The check box is selected by default.

     .
4. Click OK.

The specified settings are saved.