About the MDR configuration file
Kaspersky Managed Detection and Response uses an MDR configuration file to enable the solution on Kaspersky EPP applications for workstations (such as Kaspersky Endpoint Security for Windows) installed on assets, and to configure integration with Kaspersky Anti-Targeted Attack Platform.
Kaspersky Managed Detection and Response allows you to analyze and monitor the data from Kaspersky Anti-Targeted Attack (KATA) Platform.
Integration with Kaspersky Anti-Targeted Attack Platform is not available when using a license key for the Saudi Arabia region.
To configure integration between Kaspersky Managed Detection and Response and Kaspersky Anti-Targeted Attack Platform, you need to receive an MDR configuration file, first. You can download the MDR configuration file from the Licensing page. For details on how to configure the integration, refer to Kaspersky Anti-Targeted Attack Platform online help.
Kaspersky Anti-Targeted Attack Platform is not part of Kaspersky Managed Detection and Response. If you want to use Kaspersky Anti-Targeted Attack Platform, you must purchase it separately.
The MDR configuration file is generated automatically by Kaspersky Managed Detection and Response when you activate the solution via an activation code. The MDR configuration file is a ZIP archive containing the following files:
- KPSN configuration file.
- BLOB (P7) file for deployment of EPP applications that support integration with MDR via Kaspersky Security Center policies.
You may not need the BLOB (P7) file on the following conditions:
Note that even if you do not use the MDR configuration file, it is required to activate the solution using the MDR Web Console or MDR Plug-in in Kaspersky Security Center.
- You are only using the following EPP applications:
- Kaspersky Endpoint Security for Windows 12.6 or later
- Kaspersky Endpoint Security for Windows 12.8 or later in the Light Agent mode
- Kaspersky Endpoint Security for Linux 12.3 or later
- Kaspersky Endpoint Security for Linux 12.3 or later
- Kaspersky Endpoint Security for Mac 12.2 or later
- Your organization only uses the root tenant and never created additional tenants.
- You are not using Kaspersky Endpoint Detection and Response Optimum solution simultaneously with Kaspersky MDR solution. For details, refer to Activating the MDR solution in Kaspersky applications.
In this case Kaspersky Endpoint Security for Windows applies the license from Kaspersky Security Center. If you use tenants other than the root tenant, you need to download MDR configuration file for each tenant.
Download the MDR configuration file and use it according to the instructions for the EPP applications installed on your assets:
Page top