About automatic detection of Process Control settings for devices

Kaspersky Industrial CyberSecurity for Networks can automatically identify the Process Control settings for devices and save these settings in the device information. Settings are identified by analyzing traffic to detect the protocol commands for devices involved in the industrial process.

The application automatically adds or edits Process Control settings for devices that have been added to the devices table. Devices can also be automatically added to the devices table if the Device Activity Detection method is enabled for Asset Management.

Automatically added Process Control settings are considered to be system settings. The application can change these settings if protocol commands with updated parameter information are detected in traffic.

Process Control settings that are manually added by a user are considered to be custom settings. The application does not change custom Process Control settings. If a user manually changes system settings for Process Control, these settings will also become custom settings.

Process Control settings for devices are automatically detected when the application is running in a mode known as Device Discovery for Process Control. You can enable and disable this mode.

To automatically detect Process Control settings, the application employs modules for processing application-layer protocols. The application is installed with built-in modules that can determine the main settings for a number of devices and protocols that are indicated on the list of types of devices and protocols supported by the application. You can update protocol processing modules by installing updates.