Configuring Heuristic Analyzer and integration with other application components

To start the KSN Usage task, you must accept the Kaspersky Security Network Statement.

To configure Heuristic Analyzer and integration with other components:

1. Open the Task settings window.
2. On the General tab, clear or select the Use heuristic analyzer check box.
   

   This check box enables / disables Heuristic Analyzer during object scanning.

   If the check box is selected, Heuristic Analyzer is enabled.

   If the check box is cleared, Heuristic Analyzer is disabled.

   The check box is selected by default.

3. If necessary, adjust the level of analysis using the slider.
   

   The heuristic analysis level sets the balance between the thoroughness of searches for threats, the load on the operating system's resources and the time required for scanning.

   The following scanning sensitivity levels are available:

   • Light. Heuristic Analyzer performs fewer instructions within executable files. The probability of threat detection in this mode is somewhat lower. Scanning is faster and less resource-intensive.
   • Medium. Heuristic Analyzer performs the number of executable file instructions recommended by Kaspersky experts.

   This level is selected by default.

   • Deep. Heuristic Analyzer performs more instructions within executable files. The probability of threat detection in this mode is higher. Scanning uses more system resources, takes more time, and can produce a higher number of false alarms.

   The setting is available if the Use heuristic analyzer check box is selected.

4. In the Integration with other components section, configure the following settings:
   • Select or clear the Apply Trusted Zone check box.
     

     This check box enables / disables use of the Trusted Zone for a task.

     If the check box is selected, Kaspersky Industrial CyberSecurity for Nodes adds file operations of trusted processes to the scan exclusions configured in the task settings.

     If the check box is cleared, Kaspersky Industrial CyberSecurity for Nodes disregards the file operations of trusted processes when forming the protection scope for the task.

     The check box is selected by default.

     Click the Trusted Zone link to open the Trusted Zone settings.

   • Select or clear the Use KSN for protection check box.
     

     This check box enables or disables the use of KSN services.

     If the check box is selected, the application uses Kaspersky Security Network data to ensure that the application responds more quickly to new threats and to reduce the likelihood of false positives.

     If the check box is cleared, the task does not use KSN services.

     The check box is selected by default.

     The Send data about scanned files check box must be selected in the KSN Usage task settings.

   • Select or clear the Block access to network shared resources for the hosts that show malicious activity check box.
     

     The check box enables or disables blocking current session and controls the availability of network shared resources in terms of current session.

     If the check box is selected, Kaspersky Industrial CyberSecurity for Nodes blocks current session and, in terms of current session, makes network shared resources unavailable for hosts for which malicious activity was detected in the Blocked hosts storage section.

     If the check box is cleared, conditions are not applied and Kaspersky Industrial CyberSecurity for Nodes functions typically.

     The check box is cleared by default.

     You can view the list of blocked hosts in the Blocked Hosts storage.

     You can restore access to blocked hosts, and specify the number of days, hours and minutes after which hosts regain access to network file resources after being blocked by configuring the Blocked Hosts storage settings.

   • Select or clear the Launch critical areas scan when active infection is detected check box.
     

     If the check box is selected, when active infection is detected, Kaspersky Industrial CyberSecurity for Nodes creates and launches a temporary Critical Areas Scan task. When the Critical Areas Scan temporary task finishes, Kaspersky Industrial CyberSecurity for Nodes removes this temporary task.

     If the check box is cleared, when active infection is detected, Kaspersky Industrial CyberSecurity for Nodes does not create and launch Critical Areas Scan task.

     The check box is selected by default.

5. Click OK.

The newly configured settings will be applied.

Page top