Configuring network isolation exclusions

When Kaspersky Endpoint Security is integrated with Kaspersky Endpoint Detection and Response (KATA), the exclusions from network isolation are configured in the Kaspersky Endpoint Detection and Response (KATA) solution. For more details, see the Kaspersky Anti Targeted Attack Platform Help.

When Kaspersky Endpoint Security is integrated with Kaspersky Endpoint Detection and Response Optimum, you can configure exclusions from network isolation in the following ways:

• In the policy properties in the Web Console. Exclusions configured in the policy are applied when network isolation is automatically enabled for a device that the policy is applied to.
• In the device properties in the Web Console. Exclusions configured in device properties are applied when network isolation is automatically enabled for a device that no policy is applied to.
• In the settings of the Enabling network isolation (NetworkIsolationStart) local task. Exclusions configured in the properties of this task are applied when you manually enable network isolation for a device. The Enabling network isolation task settings apply regardless of whether a policy is applied to the device.

For configuring exclusions from network isolation, the application provides a list of standard network profiles. Network profiles consist of rules that ensure uninterrupted operation of devices with the DNS/DHCP server and DNS/DHCP client roles. You can manage the settings of standard network profiles and configure exclusions manually.

In this section Configuring exclusions from automatic network isolation The window for adding a network isolation exclusion The Network profiles dictionary window

Page top