Kaspersky Industrial CyberSecurity for Networks 2.9 has the following new capabilities and refinements:
Asset group tree – you can now manage the tree of asset groups. You can put known assets into groups to organize these assets according to their purpose, location, or any other attribute.
Labels for assets – you can now add or remove labels for known assets. Labels can contain any user-defined text descriptions of assets.
Manage monitoring points – you can now add or remove monitoring points on nodes of the Server and sensors without having to reinstall application components. To pause or resume traffic processing, you can simply disable or enable monitoring points (the functionality for pausing and resuming the Server or sensors has been discontinued).
Identification of protocols based on the contents of network packets – for Network Control and event registration, the application can now identify individual application-layer protocols based on the data comprising the payload of network packets.
Unknown Tag Detection – the application can now detect and save information about tags that are not included in the security policy but are associated with process control devices.
Expanded functionality for saving traffic for events – you can now enable saving of traffic for incidents (the traffic for all events within incidents will also be saved) and obtain traffic from temporary dump files if the traffic is not found in the database (by requesting to load traffic).
Collapse the menu on the web interface page – you can now collapse and expand the menu in the left part of the page of the application web interface. Use the buttons to collapse or expand the menu.
Select all items in tables – you now have the capability to quickly select all items that satisfy the current filter and search settings in the assets table, Network Control rules table, and events table. You can select all items by using the key combination CTRL+A or by using the check box in the header of the left-most column of the table.
Display the number of unprocessed events – an information panel has been added to the Events section to display information about the number of events that have the New or In progress status.
Search nodes on the network map.
Save and load network map views (display settings).
Use Kaspersky Security Center to download updates – you can now select the Kaspersky Security Center Administration Server as the source of updates for application modules and databases.
Add a license key from Kaspersky Security Center – you can now add a license key to Kaspersky Industrial CyberSecurity for Networks using the functionality provided by Kaspersky Security Center for automatic distribution of license keys.
Expanded functionality of the application programming interface (API) – you can now receive asset information from the assets table.
Information about working with the application is provided in Online Help format – information about installing, configuring, and using Kaspersky Industrial CyberSecurity for Networks (including about using the Kaspersky Industrial CyberSecurity for Networks API) is published on the Kaspersky Online Help page. Online Help provides convenient tools for searching, viewing, and printing information, and for receiving electronic documents in PDF format.
Extended support for application layer protocols: there are now additional capabilities for analyzing traffic of supported application layer protocols and new supported protocols have been added.
Extended hardware support: new supported devices have been added.