Using Kaspersky Security Network

To enhance the protection of virtual machines, Kaspersky Security solution components can use data received from Kaspersky users all over the world. Kaspersky Security Network is designed for getting such data.

Kaspersky Security Network (KSN) is an infrastructure of cloud services providing access to Kaspersky online knowledge base with information about the reputation of files, web resources, and software. The use of data from Kaspersky Security Network ensures faster responses by the Kaspersky Security solution to unknown threats, improves the performance of some protection components, and reduces the likelihood of false positives.

Kaspersky Security supports the following infrastructure solutions to work with Kaspersky's reputation databases:

• Kaspersky Security Network (KSN) – A solution that receives information from Kaspersky and sends data about objects detected on user devices to Kaspersky for additional verification by Kaspersky analysts and to add to reputation and statistical databases.
• Kaspersky Private Security Network (KPSN) – A solution that allows accessing Kaspersky's reputation databases, as well as other statistical data, without sending data to Kaspersky. KPSN is designed for corporate clients who can't use Kaspersky Security Network, for example, for the following reasons:
  • No connection of local workplaces to the Internet
  • Legal prohibition or corporate security restrictions on sending any data outside the country or the organization's local network

If you use Kaspersky Security Network, KSN services provide the Kaspersky Security solution with information about the category and reputation of scanned files, as well as information about the reputation of scanned web addresses.

Use of Kaspersky Security Network is voluntary. You can start or stop using KSN at any time.

Settings for using KSN in the operation of Kaspersky Security solution components are specified separately for each component. For information on using KSN in the operation of a Light Agent, see the Kaspersky Endpoint Security for Linux Help.

It is recommended to specify the same KSN usage settings for the Protection Server and the Light Agent that interacts with this Protection Server.

Using KSN in the operation of the Protection Server

Use of KSN is enabled and disabled in the Protection Server policy properties.

If you have enabled the use of Kaspersky Security Network, by default the Protection Server uses KSN in extended mode. The KSN mode affects the amount of data that is transmitted to Kaspersky when KSN is being used.

The Protection Server's interaction with the KSN infrastructure is facilitated by the KSN Proxy service. To use KSN in Kaspersky Security operations, the KSN Proxy service must be enabled in Kaspersky Security Center. For more information about the KSN Proxy service, see the Kaspersky Security Center Help.

If the KSN Proxy service is disabled in Kaspersky Security Center, no data is exchanged between the Protection Server and KSN. If the use of KSN is enabled in the Protection Server policy, Kaspersky Security's performance may decrease. It is recommended to disable KSN usage in the Protection Server policy if the KSN Proxy service is disabled in Kaspersky Security Center.

The KSN infrastructure solution (KSN or KPSN) used by the Protection Server is defined in the properties of the Kaspersky Security Center Administration Server (in Administration Console, in the KSN proxy server section; or in Web Console, in the KSN proxy server settings section). In this section you can also configure KPSN settings. For more information, see the Kaspersky Security Center Help.