Hardware and software requirements

Required EPP applications and supported configurations

In order to use Kaspersky Managed Detection and Response, at least one of the following EPP applications must be deployed in your infrastructure:

Operating systems

Kaspersky Managed Detection and Response is compatible with the same operating systems as the EPP applications listed below. For details, please refer to the Hardware and software requirements section in the documentation of compatible EPP applications listed in the table below.

Compatible Kaspersky applications and solutions

We recommend using the latest versions of Kaspersky applications and solutions.

Kaspersky Managed Detection and Response is compatible with the versions of Kaspersky applications and solutions listed in the table below.

Kaspersky application

Recommended versions
and their term of support

Compatible versions
and their term of support *

Notes

Kaspersky Endpoint Security for Windows

12.8 or later

12.6 or later

 

Kaspersky Endpoint Security for Windows in the Light Agent mode

12.9 or later

12.8

 

Kaspersky Endpoint Security for Windows in Endpoint Detection and Response Agent (EDR Agent) configuration

12.8 or later

12.6 or later

 

Kaspersky Endpoint Security for Linux

12.3 or later

12.1 or later

If you use Kaspersky Endpoint Security for Linux and do not have the Linux Audit Daemon (also referred to as auditd) package installed, system audit events are logged to the dmesg kernel log. We recommend installing the auditd package for the convenience of Kaspersky Endpoint Security for Linux managing log rotation.

Kaspersky Endpoint Security for Linux in the Light Agent mode

12.3 or later

12.1 or later

 

Kaspersky Endpoint Security for Mac

12.2 or later

12 or later

 

Kaspersky Security for Virtualization Light Agent

6.2 or later

5.2 or later

Kaspersky Security for Virtualization 5.2 Light Agent is not supported if you use Kaspersky Security Center Linux.

For Kaspersky Security for Virtualization 6.2 Light Agent we recommend to use Kaspersky Endpoint Security for Windows version 12.8 or later or Kaspersky Endpoint Security for Linux version 12.2 or later in the Light Agent mode.

Kaspersky Endpoint Agent

4.0 or later

3.15 or later

Kaspersky Endpoint Agent is only required if you use Kaspersky Security for Windows Server.

 

Please note that the Kaspersky Managed Detection and Response solution is compatible with the Kaspersky Endpoint Agent versions 3.9, 3.10 and 3.11, but the technical support period for these versions is over. If you use Kaspersky Endpoint Agent versions 3.9, 3.10, and 3.11 as an agent for the Kaspersky Managed Detection and Response solution, Kaspersky recommends updating Kaspersky Endpoint Agent to version 3.15 or newer.

Working with Kaspersky Security Center Cloud Console is only available for Kaspersky Endpoint Agent for Windows 3.12 or later.

Kaspersky Security for Windows Server

We recommend to use Kaspersky Endpoint Security for Windows 12 or later

11.x

To use the MDR functionality on your servers running Windows, we recommend using Kaspersky Endpoint Security for Windows on these servers, instead of Kaspersky Security for Windows Server with Kaspersky Endpoint Agent:

Kaspersky Security Center Windows

15.1 or later

15.1 or later

With MDR Plug-in for Kaspersky Security Center.

Kaspersky Security Center Linux

15.1 or later

15.1 or later

With MDR Plug-in for Kaspersky Security Center.

Kaspersky Security Center Cloud Console

n/a

n/a

The latest version is always used in the cloud.

MDR Plug-in for Kaspersky Security Center

Latest version

Latest version

MDR Plug-in 2.1.15 and later is available only in Kaspersky Security Center 15.1 Windows or later and Kaspersky Security Center 15.1 Linux or later.

 

Kaspersky Security Center Network Agent

The version provided with Kaspersky Security Center Windows installed

13 or later

When you update Kaspersky Security Center, you must also update Kaspersky Security Center Network Agent to the corresponding version.

Kaspersky Anti Targeted Attack Platform + Kaspersky Endpoint Detection and Response

6.1

6.0 or later

Please note that the cloud solution Kaspersky Endpoint Detection and Response Expert is not supported.

Kaspersky Endpoint Detection and Response Optimum

3.0 or later

2.3 or later

If you use Kaspersky Endpoint Security for Windows 11.7 or later, EDR Optimum must be used without Kaspersky Endpoint Agent.

 

To activate Kaspersky Endpoint Detection and Response Optimum functions, you must enter one of the following activation codes on your assets via Kaspersky Security Center:

  • Kaspersky Endpoint Detection and Response Optimum
  • Kaspersky Endpoint Detection and Response Optimum add-on

* The MDR solution has limited functionality when working with versions of Kaspersky applications earlier than versions specified in the Compatible versions and their term of support column. Limitations include fewer supported event types and response actions.

To learn more about the supported versions of Kaspersky applications and solutions, refer to the Product Support Lifecycle webpage.

MDR Web Console

MDR Web Console has the following hardware and software requirements:

Network channel

The following table shows network channel throughput calculated from our statistical data.

Operating system

Estimated bandwidth for 1000 assets

Windows

4.3 Mbit/s

Windows server

5.2 Mbit/s

Linux (average for hosts and servers)

14.7 Mbit/s

macOS

8.5 Mbit/s

These bandwidth values are approximate, as the necessary bandwidth greatly depends on the type of asset load generating telemetry events. Peak throughput can be significantly higher. You will need to provide an accordingly higher network bandwidth if your infrastructure regularly operates at peak throughput. Various conditions may presume the load to be higher. For example:

Page top