Switching the MDR solution to operation without KPSN configuration files

We recommend using the latest versions of Kaspersky applications and solutions to ensure the best protection and get full access to new features and updates.

The MDR solution must use KPSN configuration in the following scenarios:

• To ensure that KSN query and statistics data is never sent to another region. Without KPSN configuration, Kaspersky only ensures that data is routed to the specified region. Refer to this article for details: Periodic update of KPSN configuration files.
• To ensure operation of the MDR solution when an obsolete EPP application is installed on any of your devices.

You can switch the MDR solution to operation without KPSN configuration files if the following requirements are met:

1. EPP application versions that support KPSN-free operation are installed on all your assets:
   • Kaspersky Endpoint Security for Windows version 12.6 or later
   • Kaspersky Endpoint Security for Windows version 12.6 or later in Endpoint Detection and Response Agent configuration
   • Kaspersky Endpoint Security for Windows Light Agent version 12.8 or later
   • Kaspersky Endpoint Security for Linux 12.3 or later
   • Kaspersky Endpoint Security for Mac 12.2 or later
2. MDR solution is activated on all your assets with an activation code or with a BLOB file that has been created no earlier than January 01, 2024.

   BLOB files that have been created on or after January 01, 2024 contain data that is necessary for KPSN-free operation.

   It is recommended to apply an activation code to activate MDR solution for EPP applications that support it. Certain versions of EPP application versions do not support KPSN-free operation if you use a key file to activate the MDR solution. Refer to the following article for details: Hardware and software requirements.

To switch the MDR solution to KPSN-free operation:

1. Generate and review a Report On Kaspersky Software Versions in Kaspersky Security Center.
2. Update EPP applications according to the requirements:
   • Kaspersky Endpoint Security for Windows version 12.6 or later
   • Kaspersky Endpoint Security for Windows version 12.6 or later, the Endpoint Detection and Response Agent mode (requires installing a BLOB file)
   • Kaspersky Endpoint Security for Windows Light Agent version 12.8 or later
   • Kaspersky Endpoint Security for Linux 12.3 or later
   • Kaspersky Endpoint Security for Mac 12.2 or later
3. Disable KPSN usage in the Administration Server.
   • In Kaspersky Security Center that uses the MDR plug-in:
   1. Ensure that the MDR plug-in is updated to version 2.5.1.
   2. In the MDR section of Kaspersky Security Center window, click the MDR Usage tab.
   3. Expand the KPSN block and click Disable KPSN.
   • In Kaspersky Security Center that does not use the MDR plug-in:
   1. In the main menu, click the settings icon () next to the name of the required Administration Server.
   2. The Administration Server properties window opens.
   3. On the General tab, select the KSN Proxy settings section.
   4. Disable the Use Kaspersky Private Security Network option.
   5. Enable the Enable KSN Proxy on Administration Server option.
4. If you deploy assets from an operating system image, update the image so that the EPP application does not use KPSN configuration.
5. Edit the policies for EPP applications (required for both the activation code usage and the BLOB file usage scenarios).
   1. Disable the usage of Kaspersky Security Network and save the policy. Refer to the article for more information: Configuring Kaspersky Security Network.
   2. If the EPP application can only be activated with a BLOB file, download the MDR configuration file and upload the BLOB file to the policy.
   3. Re-enable the usage of Kaspersky Security Network, accept the KSN Agreement. Ensure that the Enforce option is enabled in the policy settings.

Page top