Configuring KESL container settings

Kaspersky Endpoint Security distribution kit contains files for creating a container application (KESL container) for embedding into external systems in order to scan container images from image repositories.

Interaction with the KESL container is implemented using the REST API. You can configure KESL container settings using the Administration Console.

For correct operation of KESL containers in Kaspersky Security Center, it is recommended to move the devices that correspond to the KESL containers to a separate administration group with its own policy. When the KESL container is stopped, these devices are automatically removed from the administration group, and the key that was used for these devices is released.

After deploying, activating and configuring the KESL container, it provides following functionalities in Kaspersky Security Center:

• File Threat Protection.
• Malware Scan.
• Critical Areas Scan.
• Container scan and container scan settings.
• Application Database Update.
• Rollback.
• Add Key.
• Storage settings.

Other application functions and settings can be configured, but their configuration does not affect KESL container operation.

If KESL container was activated during deployment and is connected to Kaspersky Security Center, where automatic key distribution to managed devices is configured, this key will not be applied to the KESL container.