Resetting deviations in the network behavior of devices

When Interaction Control technologies are running in monitoring mode, the application registers events whenever detected interactions between devices do not comply with the enabled Interaction Control rules. Such events are considered deviations in the network behavior of devices. If a device was not running in normal operating mode when events were registered (for example, while the device was involved in maintenance and commissioning operations), you can reset the network behavior deviations for this device.

After you reset network behavior deviations, the application assigns the Resolved status to all events that are deviations and are related to the selected devices. However, allow rules are not automatically created based on these events.

You can view information about the number of unprocessed events that were registered while monitoring the network interactions of a device. The information is displayed in the device details area on the Network behavior tab. To view detailed information about the registered events, you can navigate to the table of events by using the Learning quality widget.

To reset deviations in the network behavior of devices:

Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface.
Select the Assets section.
On the Devices tab, select the devices for which you want to reset the network behavior deviations.
Right-click to open the context menu.
In the context menu, select Reset deviations.
A window with a confirmation prompt opens.
If there are risks associated with the network behavior deviation events of the selected devices and you want to assign the Accepted status to all of these risks at the same time, select the Assign the Accepted status for risks related to the events check box.
In the prompt window, confirm that you want to reset the network behavior deviations for the selected devices.