Viewing information about Central Node or Sensor servers
To view information about a Central Node or Sensor component:
Select the Sensor servers section in the window of the application web interface.
Click the card of the relevant component.
This opens a window with information about the component.
The Settings tab for the Central Node and Sensor components displays the following information:
Status is the current status of the component indicated by an icon and text description.
Node type indicates the application component: Server (Central Node component) or Sensor (Sensor component).
Disk space currently used by the application is the disk space occupied by application files. Includes installed files and files created by the application in the course of its operation.
Maximum disk space that can be used by the application is the disk space that can be occupied by application files. Includes installed files and the sum total of all space limits configured in data storage rules. This value may not exceed the amount of available disk space.
Occupied on disk is the disk space used by all files. Includes application files, operating system files, and files of other applications. The space is calculated on the disk that contains the /var directory in the file system of the component.
Free disk space is the disk space that is not used by files. The space is calculated on the disk that contains the /var directory in the file system of the component.
Total disk space is the total volume of disk space on the drive that contains the /var directory in the file system of the component.
BPF filtering indicates whether filtering using the Berkley Packet Filter (BPF) technology based on address parameters in network packets is enabled or disabled.
External storage for traffic dump files indicates the connection status of the external storage. The following statuses may be displayed: Connected, Not connected.
Retention rules indicate current and maximum values of size, number of items, and storage duration of application data.
For the Sensor component, in addition to the Settings tab, the External storage, Other, ICAP integration, POP3 integration, and SMTP integration tabs are also displayed.
The External storage tab displays information about the configuration of the external storage for mirrored SPAN traffic.
On the Other tab, the following information is displayed:
The Host field displays the URLs of the Response Modification (RESPMOD) and Request Modification (REQMOD) services in icap://<IP address of Central Node server to which Sensor is connected>:1344/av/<respmod or reqmod>. format.
To configure integration with Kaspersky Anti Targeted Attack Platform, copy the relevant URL, replace the IP address of the Central Node server with the IP address of the Sensor server for which you want to configure ICAP integration, and specify the resulting URL in the settings of your organization's proxy server.