Configuring technology operating modes

You can configure the technology learning mode or manually enable the monitoring mode for the Server, sensors, and monitoring points. These actions are available on sensors and monitoring points if technology inheritance is disabled for these objects.

You can change the mode for the following technologies and methods:

Device activity detection
Command Control
Rule-based Process Control
Network Integrity Control

This section describes the procedure of changing and configuring technology modes on a Server node. The actions for changing and configuring technology modes on sensor nodes and monitoring points are performed in the same way after the technology inheritance is disabled.

To change and configure the modes of technologies and methods on the Server node:

Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
Select Settings → Deployment.
Select the Server tile.
The details area appears in the right part of the web interface window. The Manage technologies tab displays the list of technologies and methods that can be enabled or disabled.

If the operation modes of technologies and methods cannot be currently changed, the switches in the list are disabled. In this case, it is recommended to check the status of the kics4net service on the Server computer. If the service is not active, you must start it.
For the technologies and methods that support operation in the learning mode, in the drop-down list to the right of the technology or method name, select the relevant mode (Learning or Monitoring). If you want to select the same mode for all of these technologies and methods, use the Mode drop-down list.
If different modes are selected, the Mode drop-down list displays the Mixed value.
After selecting the mode, wait for the changes to be applied. Before the mode is applied, the Changing status is displayed in the drop-down list.
For the technologies and methods operating in the learning mode, specify the date and time when they automatically switch to the monitoring mode. For this purpose, click Set until and select the date and time. If the date and time are configured before, they are displayed next to the mode name.