Auto-accepting responses in Kaspersky Security Center

You can enable auto-acceptance of the offered responses. In this case, the response actions offered within responses, for example, deleting an infected file, will be performed automatically. When this feature is disabled, the measures offered within responses need to be accepted or rejected manually.

If you use tenants, you can enable the auto-acceptance of responses for all tenants or only for the tenants that you select. If you do not use tenants, you enable or disable this feature for your current organization.

You can change the auto-acceptance settings if you have the MDR Administrator user role. Users with the Security Officer role are not allowed to change the settings. Users with the Senior Security Officer role are allowed to perform the following operations:

To configure auto-acceptance of responses:

  1. In the MDR section of Kaspersky Security Center, click the Settings tab.
  2. In the Auto-acceptance of responses group of parameters, select the required option:
    • Disable auto-acceptance of responses for the entire service

      Select this option, if you want to accept or reject response actions manually.

    • Allow changing the response auto-acceptance option for the entire service

      Select this option, if you want to enable the auto-acceptance of responses for all the tenants in your organization, including the existing and newly created tenants.

    • Allow changing the response auto-acceptance option for each tenant

      Select this option, if you want to configure the auto-acceptance of responses for each tenant individually. Then, select the check boxes for those tenants for which you want the response actions to be performed automatically. For newly created tenants, the auto-acceptance of responses is disabled by default.

      If you select the All tenants option, the auto-acceptance of responses is enabled for the newly created tenants by default.

  3. Click the Save button.

    The Save button becomes active only if you changed the settings.

See also:

Processing responses to incidents in MDR Web Console

Page top