By default, AMSI Protection is enabled and working in the mode recommended by Kaspersky (see the table below).
How to enable or disable AMSI Protection in the Administration Console (MMC)
How to enable or disable AMSI Protection in the Web Console and Cloud Console
How to enable or disable AMSI Protection in the application interface
AMSI Protection settings recommended by Kaspersky experts
Parameter |
Value |
Description |
---|---|---|
Scan archives |
Off |
Scanning ZIP, GZIP, BZIP, RAR, TAR, ARJ, CAB, LHA, JAR, ICE, and other archives. The application scans archives not only by extension, but also by format. When checking archives, the application performs a recursive unpacking. This allows to detect threats inside multi-level archives (archive within an archive). |
Scan distribution packages |
Off |
Scanning distribution packages of third-party applications. |
Scan files in Microsoft Office formats |
On |
Scans Microsoft Office files (DOC, DOCX, XLS, PPT and other Microsoft extensions). Office format files include OLE objects as well. The application scans office format files that are smaller than 1 MB, regardless of whether the check box is selected or not. |
Do not unpack large compound files |
Maximum file size 8 MB |
If this check box is selected, the application does not scan compound files if their size exceeds the specified value. If this check box is cleared, the application scans compound files of all sizes. The application scans large files that are extracted from archives regardless of whether the check box is selected or not. |