In the Web Console, you can enable or disable the MDR component and upload the MDR BLOB file in the policy properties (Application settings → Detection and Response → Managed Detection and Response).
If the MDR component is activated with a license key, you do not need to upload the MDR BLOB file.
MDR integration settings
|
Setting |
Description |
|---|---|
|
Managed Detection and Response enabled / disabled |
This toggle switch enables or disables the MDR component, which is necessary for integrating Kaspersky Endpoint Security with the Kaspersky Managed Detection and Response solution. The component is disabled by default. If you enable the MDR component and Kaspersky Security Network is disabled or used in standard mode, you are prompted to accept the Kaspersky Security Network Statement to enable Kaspersky Security Network in Extended mode. If changing KSN settings is prohibited by parent policy, an error message is displayed and the MDR component is not enabled. |
|
Upload |
Clicking this button opens a standard window in which you can select an MDR BLOB file to upload. |
The BLOB file can be found inside the ZIP archive of the MDR configuration file included in the Kaspersky Managed Detection and Response distribution kit.
By uploading the BLOB file, you agree that data from the device where Kaspersky Endpoint Security is installed will be automatically sent to Kaspersky for processing. Do not upload the file if you do not agree to the processing of transmitted data. For detailed description of the transmitted data, refer to Kaspersky Managed Detection and Response help section.
Page top