If a response action is triggered in Kaspersky Industrial CyberSecurity for Networks (when working with events or devices), you can trigger the corresponding reverse action on the Response actions tab of the Events section. For example, if the Isolate device from the network action is triggered for a device, you can trigger the Disable network isolation action for this device when working with registered actions.
After registering a reverse action, you can use it to trigger the next response action for the same device or object. For example, if you want to isolate a device from the network again after disabling the network isolation.
For the Disable run prevention and Restore from quarantine registered actions, you can trigger both Prevent run and Move to quarantine as a reverse action.
To trigger a response action that is reverse in respect of a registered action:
The details area appears in the right part of the web interface window.
A window with a confirmation prompt opens.
The application will register a new response action.
Page top