Web Threat Protection
February 8, 2024
ID 197959
While the Web Threat Protection component is running, Kaspersky Industrial CyberSecurity for Linux Nodes scans inbound traffic, can prevent download of malicious files from the Internet and block phishing, adware, or other malicious websites. Web Threat Protection is started by default when the application starts.
The application scans HTTP, HTTPS, and FTP traffic. Also, the application scans websites and IP addresses. You can specify the network ports or network port ranges to be monitored.
To monitor HTTPS traffic, enable encrypted connection scans. To monitor FTP traffic, select the Monitor all network ports check box.
Web Threat Protection settings
Setting | Description |
|---|---|
Web Threat Protection enabled / disabled | This toggle button enables or disables the Web Threat Protection component. The toggle button is switched off by default. |
Action on threat detection | In this section, you can specify the action that the application performs on the web resource where the dangerous object is detected:
|
Detect malicious objects | This check box enables or disables checking of links against the databases of malicious web addresses. The check box is selected by default. |
Detect phishing links | This check box enables or disables checking of links against the databases of phishing web addresses. The check box is selected by default. |
Use heuristic analysis for detecting phishing links | This check box enables or disables the use of heuristic analysis for detecting phishing links. This check box is available if the Detect phishing links check box is selected, and is selected by default. |
Detect adware | This check box enables or disables checking links against the databases of adware web addresses. This check box is cleared by default. |
Detect legitimate applications that may be used by hackers to harm devices or data | This check box enables or disables checking links against the databases of legitimate applications that can be used by hackers to harm devices or data. This check box is cleared by default. |
Trusted web addresses | This table contains addresses of URLs and web pages whose content you consider trusted. You can only add HTTP/HTTPS web addresses to the list of trusted web addresses. You can use masks to specify web addresses. Masks are not supported to specify IP addresses. By default, the table is empty. |
