Updating databases and application modules

Kaspersky Industrial CyberSecurity for Networks provides the capability to update the following databases and application modules:

• System Intrusion Detection rules.
• Rules for obtaining information about devices and communication protocols.
• Event correlation rules for registering incidents.
• Modules for processing application-layer protocols for industrial process control purposes.
• Database of known vulnerabilities.
• Methods for identifying techniques of potential attacks based on system command detection events.

Application modules and databases are updated after installing updates released by Kaspersky.

Timely installation of updates ensures maximum protection of an industrial network using Kaspersky Industrial CyberSecurity for Networks. In addition, these updates can augment and update application modules involved in providing security for the application. Failure to regularly install updates over time will increase the risks to application security due to the emergence of new threats. You must also install security updates for your particular operating system.

It is recommended to manually start installing updates immediately after you install components of Kaspersky Industrial CyberSecurity for Networks. You can configure automatic scheduled start settings for regular installation of updates.

You can use the following update sources:

• Kaspersky update servers.
• Kaspersky Security Center Administration Server.

For an update source, you can also use files from a local resource if installation of updates is started manually.

You can configure the settings and start the installation of updates when connected to the Server through the web interface.

Updates of databases and application modules are subject to the following limitations and special considerations:

• Update functionality is available after a license key is added.
• To download updates from Kaspersky update servers, you must have Internet access. When connected to update servers from a computer that performs functions of the Kaspersky Industrial CyberSecurity for Networks Server, the connection is established over the HTTPS protocol (connection through a proxy server is not supported).
• To download updates from the Kaspersky Security Center Administration Server to Kaspersky Industrial CyberSecurity for Networks, the capability for application interaction with Kaspersky Security Center must be added. You can add this functionality during installation or reinstallation of Kaspersky Industrial CyberSecurity for Networks. Updates are downloaded from the Administration Server repository, which obtains its updates through the corresponding task in Kaspersky Security Center.