Configuring network ports exclusions
August 2, 2024
ID 208721
During the operation of Kaspersky Endpoint Security Cloud, the Web Control, Mail Threat Protection, and Web Threat Protection components monitor data that is transmitted through specific open ports on users' devices. For example, the Mail Threat Protection component analyzes information transmitted via SMTP, while the Web Threat Protection component analyzes information transmitted via HTTP and FTP. This list of ports is configured by Kaspersky experts.
However, you can exclude any of the listed ports from monitoring, as described in this section.
Additionally, Kaspersky Endpoint Security Cloud monitors all network ports that are required by certain applications. This list of applications is created by Kaspersky experts. If you exclude a certain port from monitoring but this port is used by an application from the list, Kaspersky Endpoint Security Cloud will still monitor data that is transmitted through the excluded port by the listed application but will not monitor data that is transmitted by any other application.
To configure network ports exclusions:
- Open Kaspersky Endpoint Security Cloud Management Console.
- Select the Security management → Security profiles section.
The Security profiles section contains a list of security profiles configured in Kaspersky Endpoint Security Cloud.
- In the list, select the security profile for the devices on which you want to configure network ports exclusions.
- Click the link with the profile name to open the security profile properties window.
The security profile properties window displays settings available for all devices.
- In the Windows group, select the Advanced section.
- Click the Settings link below the Threat detection and exclusions section.
The Threat detection and exclusions window opens.
- Click the Settings link below the Network ports exclusions section.
The Network ports exclusions window opens.
- Do any of the following:
- To add network ports that you want to be excluded from monitoring:
- Click the Add button.
The Add ports to exclusions window opens. The window lists all network ports that are monitored by Kaspersky Endpoint Security Cloud.
- Select the check boxes next to the network ports to be excluded.
- Click OK to close the Add ports to exclusions window.
The added network ports appear in the list of exclusions in the Network ports exclusions window.
- Click the Add button.
- To delete network ports from the list of monitoring exclusions:
- Select the check box next to the required network ports.
- Click the Delete button.
The deleted network ports disappear from the list of exclusions in the Network ports exclusions window.
- To add network ports that you want to be excluded from monitoring:
- Click the Save button to save the changes.
After the security profile is applied, the network ports exclusions are applied to Windows devices.