Configuring the blocking period for an untrusted computer
An untrusted computer is a remote computer that is engaging in malicious activity or data encryption. By default, Kaspersky Industrial CyberSecurity for Nodes blocks a remote user's session for one hour. When the blocking period expires, Kaspersky Industrial CyberSecurity for Nodes removes the computer from the block list and restores access to the shared folder.
In the Kaspersky Security Center Administration Console tree, select the Policies folder.
Select the necessary policy and double-click to open the policy properties.
In the policy properties window, select Real-Time Computer Protection.
Click Settings in the Anti-Cryptor section.
Use the Anti-Cryptor check box to enable or disable the component.
Go to the Protection of shared folders tab.
Under Upon detection of external encryption of shared folders, configure the blocking period of an untrusted computer that is engaging in malicious activity or data encryption.
Save your changes. To apply the policy on computers, close the locks .
In the main window of the Web Console, select Assets (Devices) → Policies & profiles.
Click the name of the Kaspersky Industrial CyberSecurity for Nodes policy.
The policy properties window opens.
Select the Application settings tab.
Go to Real-Time Computer Protection → Anti-Cryptor and click the Configure button.
The Anti-Cryptor window opens.
Use the Enable Anti-Cryptor check box to enable or disable the component.
Go to the Protection of shared folders tab.
Under Detection of external encryption, configure the blocking period of an untrusted computer that is engaging in malicious activity or data encryption.
Save your changes. To apply the policy on computers, close the locks .
Select Real-Time Computer Protection → Anti-Cryptor in the Kaspersky Industrial CyberSecurity for Nodes Console tree.
Click Properties in the results pane of the Anti-Cryptor node.
The Properties:Anti-Cryptor window opens.
Select the Anti-Cryptor check box.
Go to the Protection of shared folders tab.
Under Protection of shared folders against external encryption, configure the blocking period of an untrusted computer that is engaging in malicious activity or data encryption.