In the Kaspersky Security Center Administration Console tree, expand the Managed devices node.
Select the administration group for which you want to configure the task.
Select the Policies tab.
Open the policy properties window by double-clicking the name of the policy.
In the policy properties window, go to the Real-Time Computer Protection section.
In the AMSI Scanner block, click the Settings button.
The AMSI Scanner window opens on the General tab.
Select the action that you want Kaspersky Industrial CyberSecurity for Nodes to perform when a dangerous script is run:
Inform. The application allows running probably dangerous scripts. A corresponding event is logged in the task log.
Block. The application blocks probably dangerous scripts.
In the Scan of compound files block, specify the types of compound files that you want to scan: archives, distribution package, or files in office formats.
In the Size limit block, do one of the following:
To block the AMSI Scanner component from unpacking large compound files, select the Do not unpack large compound files check box and specify the required value in the Maximum file size (MB) field. The AMSI Scanner component will not unpack compound files that are larger than the specified size.
To allow the AMSI Scanner component to unpack large compound files, clear the Do not unpack large compound files check box.
The AMSI Scanner component scans large files that are extracted from archives, regardless of whether the Do not unpack large compound files check box is selected.
In the AMSI Scanner window, click the OK button.
Click the OK button in the Properties: <Policy name> window.
In the Application Console tree, select the Real-Time Computer Protection → AMSI Scanner section.
Click the Properties link in the results pane.
The AMSI Scanner window opens on the General tab.
Select the action that you want Kaspersky Industrial CyberSecurity for Nodes to perform when a dangerous script is run:
Inform. The application allows running probably dangerous scripts. A corresponding event is logged in the task log.
Block. The application blocks probably dangerous scripts.
In the Scan of compound files block, specify the types of compound files that you want to scan: archives, distribution package, or files in office formats.
In the Size limit block, do one of the following:
To block the AMSI Scanner component from unpacking large compound files, select the Do not unpack large compound files check box and specify the required value in the Maximum file size (MB) field. The AMSI Scanner component will not unpack compound files that are larger than the specified size.
To allow the AMSI Scanner component to unpack large compound files, clear the Do not unpack large compound files check box.
The AMSI Scanner component scans large files that are extracted from archives, regardless of whether the Do not unpack large compound files check box is selected.
In the main window of the Web Console, select Assets (Devices) → Policies & profiles.
Click the name of the Kaspersky Industrial CyberSecurity for Nodes policy.
The policy properties window opens.
Select the Application settings tab.
Select the Real-Time Computer Protection section.
In the AMSI Scanner block, click the Configure button.
The AMSI Scanner window opens.
Select the action that you want Kaspersky Industrial CyberSecurity for Nodes to perform when a dangerous script is run:
Inform. The application allows running probably dangerous scripts. A corresponding event is logged in the task log.
Block. The application blocks probably dangerous scripts.
In the Scan of compound files block, specify the types of compound files that you want to scan: archives, distribution package, or files in office formats.
In the Size limit block, do one of the following:
To block the AMSI Scanner component from unpacking large compound files, select the Do not unpack large compound files check box and specify the required value in the Maximum file size (MB) field. The AMSI Scanner component will not unpack compound files that are larger than the specified size.
To allow the AMSI Scanner component to unpack large compound files, clear the Do not unpack large compound files check box.
The AMSI Scanner component scans large files that are extracted from archives, regardless of whether the Do not unpack large compound files check box is selected.