Configuring the maximum size of a scanned file

If you are using the distributed solution and multitenancy mode, use the web interface of the PCN or SCN server for which you want to configure parameters.

To configure the maximum size of a scanned file:

  1. Select the Sensor servers section in the window of the application web interface.
  2. Click the card of the relevant Sensor component.

    This opens a window with information about the component.

  3. Click Edit.
  4. Go to the Other tab.
  5. Set the Set size limit toggle switch to Enabled.
  6. In the Unit of measure field, select a unit of measure.
  7. In the Space field, enter the maximum allowed size of a file.
  8. Click Save.

The maximum size of a scanned file will be configured.

If you want to set the maximum size of a scanned file to a value greater than 100 MB:

  1. Enter the management console of the Sensor server via the SSH protocol or through a terminal.
  2. When the system prompts you, enter the administrator user name and the password that was specified during installation of the component.
  3. The application component administrator menu is displayed.
  4. Select the Technical Support Mode.
  5. Press ENTER.
  6. This opens the Technical Support Mode confirmation window.
  7. Confirm that you want to manage the application in Technical Support Mode. To do so, select Yes and press ENTER.
  8. To view the current scanned file size limit, run the following command:

    docker exec $(docker ps -q -f name=nta_core) grep body-limit /var/opt/kaspersky/kics4net/ids/client/templates/suricata.yaml.templ | grep -v '#'

  9. The current limit is displayed in the request-body-limit and response-body-limit fields. The current limit is displayed in bytes.
  10. To change the current limit, run the following command:

    exec $(docker ps -q -f name=nta_core) sed -i 's/<previous value in bytes>/<new value in bytes>/' /var/opt/kaspersky/kics4net/ids/client/templates/suricata.yaml.templ

  11. Complete steps 1–8 of the instructions above.

You can set the maximum size for a scanned file over 100 MB.

Configuring the maximum size of a scanned file on a server with the Sensor component installed separately from the Central Node

If you selected network protocols to get mirrored traffic from SPAN ports on an standalone Sensor before connecting it to the Central Node and want to change these settings after connecting, you need to follow the preparatory steps before you change the settings and then follow the instructions above.

Page top