Configuring Process Control

Kaspersky Industrial CyberSecurity for Networks can monitor an industrial process by tracking process parameters and system commands transmitted in industrial network traffic. The application tracks this data for devices that are displayed in the devices table and that have defined Process Control settings.

Process Control settings can be configured for the types of devices and protocols that are supported by the application.

For automated control of the industrial process, you can employ Process Control rules and system command monitoring functionality. You can also track process parameters in online mode.

A Process Control rule is a group of settings that define a condition for the values of a tag. Process Control rules contain descriptions of situations that must be detected in industrial network traffic (for example, when a tag exceeds the specified value).

When the condition defined in a rule is fulfilled, an event is registered by Kaspersky Industrial CyberSecurity for Networks. You can define the relevant event registration settings (for example, headers of events) when configuring Process Control rules.

Monitoring system commands ensures registration of events when transmitted system commands are detected in traffic. When configuring Process Control settings for devices, you can select the relevant system commands to monitor. This functionality can be used regardless of Process Control rules.

Only users with the Administrator role can configure Process Control settings for devices and generate lists of monitored tags and Process Control rules. However, data can be viewed and exported by users with the Administrator or Operator roles.

You can generate lists of monitored tags and Process Control rules on the Server web interface page in the Process control section. You can configure Process Control settings for devices when working with the devices in the Assets section and Network map section.