Limitations and warnings

1. In the Kaspersky Security Center console, create a new device group and move computers with the Security application is not installed status to that group.
2. Create an Install application remotely task for the newly created device group. In task properties, select the installation package of the new version of the application.
3. Restart the computers.

As a result, the new version of the application is installed on user computers. Check the status of the computers in the Kaspersky Security Center console.

• Kaspersky Endpoint Security may process threat disinfection events incorrectly. For example, if the application has deleted a malicious file, the report might have an Object not processed entry. At the same time, Kaspersky Endpoint Security disinfects threats in accordance with application settings. Kaspersky Endpoint Security can also create a duplicate of the Object will be disinfected on restart event for the same object.
• File Threat Protection may skip some threats. At the same time, Malware Scan works correctly.
• After the Malware Scan task is started, the exclusions added with iChecker are reset when the server is rebooted.
• The iSwift technology is not supported. Kaspersky Endpoint Security does not consider scan exclusions added using the iSwift technology.
• Kaspersky Endpoint Security does not detect eicar.com and susp-eicar.com files if meicar.exe file existed on the computer before Kaspersky Endpoint Security was installed.
• Kaspersky Endpoint Security may incorrectly display threat disinfection notifications. For example, the application may display a threat notification for a previously disinfected threat.

• The local graphical user interface is not available, including notifications, pop-up notifications, and other interface controls. The application cannot display prompt windows, including the following windows:
  • Application version and module upgrade confirmation prompt;
  • Computer restart prompt;
  • Prompt for proxy server authentication credentials.
  • Prompt for gaining access to a device (Device Control).
• The following components are not available: Web Threat Protection, Mail Threat Protection, Web Control, BadUSB Attack Prevention.
• Anti-Bridging is not available.
• You can only accept the Kaspersky Security Network Statement in the application policy in the Kaspersky Security Center console.
• BitLocker Drive Encryption is only available with a Trusted Platform Module (TPM). A PIN / password cannot be used for encryption because the application is unable to display the password prompt window for preboot authentication. If the operating system has Federal Information Processing standard (FIPS) compatibility mode enabled, connect a removable drive for saving the encryption key before you begin encrypting the drive.

• Kaspersky Endpoint Security disinfects active threats without notifying the user, just like when disinfecting active threats on servers. Because the operating system continues to run in multi-session mode, other active users may lose their data if the threat is not immediately resolved.
• Full disk encryption (FDE) is not supported.
• Managing BitLocker is not supported.
• Using Kaspersky Endpoint Security with removable drives is not supported. The Microsoft Azure infrastructure defines removable drives as network drives.

[Rule-Begin]

Type=File-Catalog-Construction

Action=Catalog-Location-Guest-Modifiable

name="%ALLUSERSPROFILE%\Kaspersky\**\*"

name="%ALLUSERSPROFILE%\KasperskyLab\**\*"

[Rule-End]

For details about Citrix XenDesktop, visit the Citrix Support website.

• By local address for outbound packets or connections in application rules for TCP and UDP and packet rules.
• By local address for inbound packets or connections (except UDP) in block application rules and packet rules.
• By packet time to live (TTL) in block packet rules for inbound or outbound packets.
• By network interface for inbound and outbound packets or connections in packet rules.

• Requests to DNS server over TCP.
• Requests to DNS server over UDP.
• Any network activity.
• ICMP Destination Unreachable incoming responses.
• Incoming ICMP stream.

• C:\Windows\notepad.exe
• C:\Windows\System32\notepad.exe
• C:\Windows\SysWOW64\notepad.exe

When adding Notepad to an Application Control rule, you can specify the application name and the file hash from the properties of the running application, for example.

• There is no connection to the Kaspersky Security Center server.
• The user is attempting authorization with a new token or password.

If a similar situation occurs, restart the computer. After the computer has been restarted, access to the encrypted removable drive will be granted.

• Single Sign-On technology is not supported.
• Automatic creation of Authentication Agent accounts is not supported if the option to create accounts for users who log in to the system in the last N days is selected.

• There is no connection to Kaspersky Security Center;
• Kaspersky Endpoint Security for Windows is installed on the computer;
• Data encryption (FDE or FLE) was not performed on the computer.

Access is impossible even if you know the password of the Portable File Manager.

1. Disables control and protection functions (encryption functionality remains enabled).
2. Notifies the user that the functions have been disabled.
3. Attempts to restore the application to a functional state after updating anti-virus databases or applying application module updates.

You can also disable SRP and use the Application Control component of Kaspersky Endpoint Security to control application usage.

• The Kaspersky Endpoint Security application is not compatible with the Antivirus component of Secret Net Studio software.

  The application cannot be installed on a computer where Secret Net Studio is deployed with the Antivirus component. To make interoperability possible, you must remove the Antivirus component from Secret Net Studio.

• The Kaspersky Endpoint Security application is not compatible with the Full Disk Encryption component of Secret Net Studio software.

  The application cannot be installed on a computer where Secret Net Studio is deployed with the Full Disk Encryption component. To make interoperability possible, you must remove the Full Disk Encryption component from Secret Net Studio.

• Secret Net Studio is not compatible with the File Level Encryption (FLE) component of Kaspersky Endpoint Security.

  When you install Kaspersky Endpoint Security with the File Level Encryption (FLE) component, Secret Net Studio can operate with errors. To ensure interoperability, you must remove the File Level Encryption (FLE) component from Kaspersky Endpoint Security.