Creating Kaspersky Endpoint Agent policy

To create a Kaspersky Endpoint Agent policy in Kaspersky Security Center:

1. Open Kaspersky Security Center Administration Console.
2. In the console tree, open the Policies folder.
3. Click Create a policy.

   The policy creation wizard starts.

4. In the Selecting an application for creating a group policy window, select Kaspersky Endpoint Agent.
5. Click Next.
6. In the Enter group policy name window, perform the following actions:
   1. Enter the name that will be used for the new policy in the policy list.
   2. If you want to import the settings of an existing Kaspersky Endpoint Agent policy to a new policy:
      1. Select the Use the policy settings for previous application version check box.
      2. Click Select and in the window that opens, select the policy whose settings you want to import.
      3. Click OK.
   3. Click Next.
7. In the Create Policy window, select one of the following options:
   • Create a new policy and configure settings.
   • Create a new policy with default settings.

   If you enabled the Use the policy settings for previous application version setting during the previous step, the Create a new policy and configure settings option will be selected by default, and the settings specified in the imported policy will be displayed when the policy is created. In this case, the switch in the upper right corner of each section with the policy settings, which shows if the policy is applied, depends on the position of the switches in the groups of settings of the imported policy.

   The switch is set to Under policy if the corresponding switch in the imported policy is also set to Under policy for all groups of settings that are included in the section.

   The switch is set to Policy not enforced if the corresponding switch in the imported policy is also set to Policy not enforced for at least one group of settings that are included in the section.

8. Click Next.
9. In the Select policy type window, select the desired Kaspersky Endpoint Agent deployment method:
   • Kaspersky Sandbox integration
   • Endpoint Detection and Response Expert (KATA EDR), Kaspersky Industrial CyberSecurity for Networks
10. Click Next.
11. If you select the Create a new policy and configure settings option, perform one of the following actions in all the sequentially displayed settings windows:
    • To configure the application settings in the displayed sections during policy creation:
      1. Click Configure next to the name of the required section.
      2. In the window that opens, configure the required settings and click OK.
      3. Click Next.
    • To configure the application settings in the displayed section later, click Next.

    Configuration of the application settings consists of the following steps:

    The composition of the steps depends on the type of policy selected during the previous step and may differ from the one described.

    • Configuring integration between Kaspersky Endpoint Agent and Kaspersky Sandbox.
    • Configuring integration of Kaspersky Endpoint Agent with Endpoint Detection and Response Expert (KATA EDR) and Kaspersky Industrial CyberSecurity for Networks (KICKS for Networks) components.
    • Configuring threat response settings.
    • Configuring application repositories.
    • Configuring application security settings.
    • Configuring general application settings.
12. In the Target group window, select the Kaspersky Security Center administration group to which the created policy will be applied by performing the following steps:
    1. Click Browse.

       The administration group selection window will open.

    2. Select the administration group from the list.

       For example, you can select the Managed devices group.

    3. If you want to create a subgroup in the Managed devices group:
       1. Click New group.
       2. In the window that opens, enter the name of the device subgroup.
       3. Click OK.
    4. Click Next.
13. In the Creating a group policy for the application window, select one of the following policy statuses:
    • Active policy to activate the policy as soon as it is created.
    • Inactive policy to activate the policy later.
    • Out-of-office. The policy becomes active when the computer leaves the corporate network.
14. Select the Open policy properties after creation check box if you want to perform additional configuration of the policy immediately after creating it.
15. Click Finish.

The created policy will now appear in the policy list.

If the use of KSN is enabled in the policy and the version of the KSN Statement in the policy differs from the version of the KSN Statement in the Kaspersky Endpoint Agent installed on the host, then after the policy is applied, the use of KSN is disabled on the host and in the policy settings. This situation may occur if Kaspersky Endpoint Agent 3.16 is installed on the host while a lower version of the Kaspersky Endpoint Agent administration plug-in was used to make the last change to the policy.