Device configuration control

Kaspersky Industrial CyberSecurity for Networks provides the capabilities for viewing information about device configurations obtained as a result of configuration control jobs. You can view information about the configurations of the selected device in the device details area on the Configurations tab.

The application displays the following information about the received configurations of the selected device in the table on the Configurations tab:

• Configuration component – the name of the received configuration component (for example, the Users component, where the information about the device users is stored).
• Last date and time – the date and time when the configuration component was last received if the display of the last received configurations is enabled.
• Benchmark date and time – the date and time when the golden configuration component was received, if the display of the golden configurations is enabled.
• Archived records (displayed in Kaspersky Industrial CyberSecurity for Networks 4.2): the number of unique component configuration entries that were archived when configuration control jobs were running in Archive versions and/or Compare with benchmark mode. The number does not include the current or reference configuration.
• Total configurations (displayed in Kaspersky Industrial CyberSecurity for Networks 4.2.1): the total number of component configurations captured while running configuration control jobs. The count includes potential duplicate configuration data, which may only vary by timestamp.

Golden configuration components are marked with a crown icon .

When you select a configuration component, you will see a window containing detailed information about this component.

For convenient viewing of the device configuration information, you can compare saved configurations using Kaspersky Industrial CyberSecurity for Networks.

When controlling device configurations, the application uses the Asset Management technology for event logging. Events are registered with system event types that are assigned the following codes:

• 4000005603 – events of detecting changes when comparing with the previous configuration based on the results of device scans (for the jobs run in the Update only and/or Archive versions configuration processing modes).
• 4000005604 – events of detecting changes when comparing with the golden configuration based on the results of device scans (for the jobs run in the Compare with benchmark configuration processing mode).

You can configure the available settings for event types under Settings → Event types.

You can view information about registered events when connected to the Server through the web interface.

Page top