Protection settings window

Action on encryption detection

The action to be performed by Kaspersky Endpoint Security upon detecting malicious encryption:

• Inform user. Kaspersky Endpoint Security does not block the device performing encryption; it only records in the event log an event about the detection of malicious encryption.
• Block the device performing encryption (default value).

Block untrusted host for (min.)

In this field you can specify the untrusted device blocking duration in minutes. After the specified time, Kaspersky Endpoint Security removes the untrusted devices from the list of blocked devices. The access of the host to network file resources is restored automatically, after it is deleted from the list of untrusted hosts.

If a compromised host is blocked and you change this setting value, the blocking time for this host will not change. The blocking time is not a dynamic value, and it is calculated at the moment of blocking.

Available values: integer from 1 to 4294967295.

Default value: 30.