Changing Kaspersky Industrial CyberSecurity for Networks configuration settings using a script

In Kaspersky Industrial CyberSecurity for Networks 4.3, you can change the application configuration settings listed in the table below. Settings are edited with the help of the kics4net-params script, located at /opt/kaspersky/kics4net/sbin/ on the Server computer.

Kaspersky Industrial CyberSecurity for Networks configuration settings

Configuration setting (alternate name for setting)	Default value	Range of values	Description
-t (--logon_session_timeout)	600 minutes (equivalent to 10 hours)	From 1 to 43,200 minutes	Validity period for Server connection sessions via the web interface and authentication tokens in the Kaspersky Industrial CyberSecurity for Networks API. The value is presented in minutes.
-l (--max_password_ttl_in_days)	90 days.	From 1 to 366 days	The maximum password age requiring a password change. The value is expressed in days.
-a (--attempts_to_login_limit)	3	From 1 to 100	The number of failed login attempts that triggers a notification to the administrator.

You can use the kics4net-params script to view and adjust configuration settings.

To view the running configuration settings:

1. On the Server computer, log in to the system using the account credentials of a user account with root privileges that you want to use to run the kics4net-params script.
2. Go to the /opt/kaspersky/kics4net/sbin/ folder and enter the following command for running the script to view the currently defined value:

   sudo python kics4net-params get -n <configuration setting>

   where:

   • -n disables display of the internal name used to represent the value in the application configuration. If the setting is undefined, the value is displayed together with the name, e.g.: logon_session_timeout=<value>.
   • <configuration setting> is the configuration setting to display on the screen (mandatory parameter).

   For example, to display the maximum password age, enter sudo python kics4net-params get -n -l.

To adjust configuration settings:

1. On the Server computer, log in to the system using the account credentials of a user account with root privileges that you want to use to run the kics4net-params script.
2. Go to the /opt/kaspersky/kics4net/sbin/ folder and enter the following command for running the script to change the value:

   python kics4net-params set -r <configuration setting>=<values>

   where:

   • -r enables automatic restart of application services on the Server computer after a new value is applied. If this parameter is not defined, you will have to manually restart the Server computer or restart services after the script is finished.
   • <configuration setting>=<value> is the new value for the setting (mandatory parameter).

   For example, to change the maximum password age, enter sudo python kics4net-params set -r -l=100.

Page top