Solution architecture
Solution architecture
July 30, 2024
ID 216920
Kaspersky Endpoint Detection and Response Optimum 3.0 includes the following components:
- EPP applications that support Kaspersky Endpoint Detection and Response Optimum functionality and are installed on separate devices in the IT infrastructure. These applications continuously monitor the processes running on protected devices, open network connections, and files being modified.
- Solution for centralized network security management (Kaspersky Security Center or Kaspersky Security Center Cloud Console).
- Kaspersky Sandbox (optional component, distributed separately) is intended for additional inspection of suspicious objects detected by an EPP application. For detailed information about Kaspersky Sandbox, refer to the Kaspersky Sandbox Help.
- Threat Intelligence:
- Kaspersky Security Network (KSN) cloud infrastructure that provides access to the online Kaspersky Knowledge Base, which contains information about the reputation of files, web resources, and software. Using data from Kaspersky Security Network ensures that Kaspersky applications respond more quickly to threats, improves the performance of some protection components, and reduces the likelihood of false positives.
- Integration with Kaspersky Private Security Network (KPSN) that lets users access KSN reputation databases, as well as other statistics without submitting data to KSN from their devices.
- Integration with Kaspersky Threat Intelligence Portal platform, which contains and displays information about the reputation of files and URLs.
- Kaspersky Threats database.
Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.