Temporary suspension of using Kaspersky Endpoint Detection and Response Expert

It is required to suspend the use of the solution on the assets if they are temporarily located on the United States territory (for example, during a business trip).

To suspend the use of Kaspersky Endpoint Detection and Response Expert temporarily on particular assets:

1. In Kaspersky Security Center, create a new administration group to manage assets on which you want to suspend the use of the solution. You will be able to modify the list of assets in this group later.
2. For this administration group, create new Kaspersky Endpoint Security for Windows policy, and then disable the use of Kaspersky Endpoint Detection and Response Expert and Kaspersky Security Network in the policy settings.

   For details about configuring the policy, refer to Kaspersky Endpoint Security for Windows help instructions on managing policies and configuring integration with Kaspersky Endpoint Detection and Response Expert.

3. Move the assets on which you want to suspend the use of the solution to the created administration group.

   The new policy where the use of Kaspersky Endpoint Detection and Response Expert and Kaspersky Security Network are disabled will be applied to the assets after synchronization. You can also manually force the synchronization.

To resume the use of Kaspersky Endpoint Detection and Response Expert after suspension:

1. Exclude the asset from the administration group used for suspension.
2. Apply a regular policy where the use of the solution is enabled and configured to this asset.

   The assets will not be monitored by Kaspersky Endpoint Detection and Response Expert until a policy where the use of the solution is enabled and configured is applied to them.

Page top