You can optimize file scanning: reduce scan time and increase the operating speed of Kaspersky Endpoint Security. You can select the compound files that need scanning: archives, distribution packages, or files in office formats. You can also limit the size of compound files to be scanned. The AMSI Protection component will not unpack compound files that are larger than the specified size.
A common technique for concealing viruses and other malware is to embed them in compound files such as archives. To detect viruses and other malware that are hidden in this way, the compound file must be unpacked, which may slow down scanning. You can limit the types of compound files to be scanned and thereby speed up scanning.
Open the Kaspersky Security Center Administration Console.
In the console tree, select Policies.
Select the necessary policy and double-click to open the policy properties.
In the policy window, select Essential Threat Protection → AMSI Protection.
In the Scan of compound files block, specify the types of compound files that you want to scan: archives, distribution package, or files in office formats.
In the Size limit block, do one of the following:
To block the AMSI Protection component from unpacking large compound files, select the Do not unpack large compound files check box and specify the required value in the Maximum file size field. The AMSI Protection component will not unpack compound files that are larger than the specified size.
To allow the AMSI Protection component to unpack large compound files, clear the Do not unpack large compound files check box.
The AMSI Protection component scans large files that are extracted from archives, regardless of whether the Do not unpack large compound files check box is selected.
Save your changes. To apply the policy on computers, close the padlocks .
In the main window of the Web Console, select Assets (Devices) → Policies & profiles.
Click the name of the Kaspersky Endpoint Security policy.
The policy properties window opens.
Select the Application settings tab.
Go to Essential Threat Protection → AMSI Protection.
In the Scan of compound files block, specify the types of compound files that you want to scan: archives, distribution package, or files in office formats.
In the Size limit block, do one of the following:
To block the AMSI Protection component from unpacking large compound files, select the Do not unpack large compound files check box and specify the required value in the Maximum file size field. The AMSI Protection component will not unpack compound files that are larger than the specified size.
To allow the AMSI Protection component to unpack large compound files, clear the Do not unpack large compound files check box.
The AMSI Protection component scans large files that are extracted from archives, regardless of whether the Do not unpack large compound files check box is selected.
Save your changes. To apply the policy on computers, close the padlocks .
In the application settings window, select Essential Threat Protection → AMSI Protection.
AMSI Protection settings
In the Scan of compound files block, specify the types of compound files that you want to scan: archives, distribution package, or files in office formats.
In the Size limit block, do one of the following:
To block the AMSI Protection component from unpacking large compound files, select the Do not unpack large compound files check box and specify the required value in the Maximum file size field. The AMSI Protection component will not unpack compound files that are larger than the specified size.
To allow the AMSI Protection component to unpack large compound files, clear the Do not unpack large compound files check box.
The AMSI Protection component scans large files that are extracted from archives, regardless of whether the Do not unpack large compound files check box is selected.
.
.
button.