Example 2. Excluded network communications
To exclude remote service connection events from telemetry, open the EDR telemetry exclusions window on the Excluded network communications tab and add connection settings: protocol, port, direction, IP address, TLS certificate, and others.
Kaspersky Endpoint Security combines rule triggering criteria with a logical AND.
You cannot specify a subnet address (for example, 10.28.0.0/24). The application only allows specifying one IP address (for example, 10.28.0.105).
Network communication exclusion
If you use a corporate web server and you want to exclude browser events when connecting to that web server, add the IP address of the sewrver and the executable file of the browser to telemetry exclusions.
Specify the settings as follows:
- Protocol: TCP;
- Remote port or range: 443;
- Remote address: 10.28.0.105;
- Applications:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe;C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe.