Kaspersky Endpoint Detection and Response (KATA) Integration task settings

Address

KATA server address

IP address or fully qualified domain name (FQDN) of the server can be specified.

Port

Port to connect to the KATA server.

The default value is 443.

UseClientPinnedCertificate

Enable and disable two-way authentication to further secure the connection to the KATA server.

If two-way authentication is enabled on the KATA server side, you need to enable two-way authentication in the settings of Kaspersky Endpoint Detection and Response (KATA) Integration task and add the client certificate before starting the task.

Yes – use two-factor authentication to further secure the connection to the KATA server.

No (default value) — do not use two-factor authentication.

SynchronizationPeriod

Frequency of sending synchronization requests to the KATA server in minutes.

The default value is 5.

ConnectionTimeout

Maximum time to wait for a connection to the KATA server in seconds.

The default value is 10.

RequestTimeout

Maximum time to wait for a response from the KATA server in seconds.

The default value is 10.

MaximumDataTransferTime

The maximum delay in sending events to the KATA server in seconds.

The default value is 30.

UseRequestCountLimits

Enable and disable regulating the number of events sent to the KATA server.

Yes (default value) – regulate the number of events sent.

No – do not regulate the number of events.

MaximumNumberOfEventsInHour

Maximum number of events per hour

The default value is 3000.

EventLimitExceededPercentage

Event throttle threshold (percentage). Sending events is limited if ratio of events of one type (for example, events about registry changes) to the total number of events exceeds the set threshold (as a percentage).

The default value is 15.

EnableTelemetry

Enable and disable sending event data (telemetry) to the KATA server.

Yes (default value) – send telemetry to the KATA server.

No – do not send telemetry.