Configuring the blocking period for an untrusted computer
An untrusted computer is a remote computer that is engaging in malicious activity or data encryption. By default, Kaspersky Embedded Systems Security blocks a remote user's session for one hour. When the blocking period expires, Kaspersky Embedded Systems Security removes the computer from the block list and restores access to the shared folder.
In the Kaspersky Security Center Administration Console tree, select the Policies folder.
Select the necessary policy and double-click to open the policy properties.
In the policy properties window, select Real-Time Computer Protection.
In the Behavior Detection section, click Settings.
Select or clear the Behavior Detection check box to enable or disable the component.
Go to the Protection of shared folders tab.
Under Upon detection of external encryption of shared folders, configure the blocking period of an untrusted computer that is engaging in malicious activity or data encryption.
Save your changes. To apply the policy on computers, close the locks .
In the main window of the Web Console, select Assets (Devices) → Policies & profiles.
Click the name of the Kaspersky Embedded Systems Security policy.
The policy properties window opens.
Select the Application settings tab.
Go to Real-Time Computer Protection → Behavior Detection and click the Configure button.
The Behavior Detection window opens.
Use the Enable Behavior Detection check box to enable or disable the component.
Go to the Protection of shared folders tab.
Under Detection of external encryption, configure the blocking period of an untrusted computer that is engaging in malicious activity or data encryption.
Save your changes. To apply the policy on computers, close the locks .
In the Kaspersky Embedded Systems Security Console tree, select Real-Time Computer Protection → Behavior Detection.
In the results pane of the Behavior Detection node, click Properties.
This opens the Properties:Behavior Detection window.
Select the Behavior Detection check box.
Go to the Protection of shared folders tab.
Under Protection of shared folders against external encryption, configure the blocking period of an untrusted computer that is engaging in malicious activity or data encryption.
.
.