Specifying the source of Network Isolation and Execution Prevention settings

Kaspersky Endpoint Agent applies the Network Isolation and Execution Prevention settings from the source specified using the command line settings if the Kaspersky Endpoint Agent policy in Kaspersky Security Center is inactive.

To specify the source of Network Isolation and Execution Prevention settings:

1. On the device, run a command line interpreter (for example, Command Prompt cmd.exe) with the permissions of the local administrator.
2. Using the cd command, navigate to the folder where the Agent.exe file is located.

   For example, enter the command cd "C:\Program Files (x86)\Kaspersky Lab\Endpoint Agent\" and press ENTER.

3. Enter the command:

   agent.exe --message-broker=global --priority-server=<kata|kics>

4. Press ENTER.

   Kaspersky Endpoint Agent applies the Network Isolation and Execution Prevention settings according to the following rules:

   • If integration is configured only with the KATA server, Kaspersky Endpoint Agent applies the Network Isolation and Execution Prevention settings defined on the server with KATA Central Node installed.
   • If integration is configured only with the KICS for Networks server, Kaspersky Endpoint Agent applies the Network Isolation and Execution Prevention settings defined on the server with KICS for Networks installed.
   • If integration is configured with both the KATA server and the KICS for Networks server, Kaspersky Endpoint Agent applies the Network Isolation and Execution Prevention settings defined on the server specified using the --priority-server option.
   • If integration is not configured the KATA server and KICS for Networks server, Kaspersky Endpoint Agent applies the Network Isolation and Execution Prevention settings defined locally on the host with Kaspersky Endpoint Agent installed using the command line or in the host properties in the Administration Console of Kaspersky Security Center or Kaspersky Security Center Web Console.