Enabling and disabling a System Integrity Monitoring rule

All System Integrity Monitoring rules are added to the list of rules with the Enabled status. If a rule is enabled, System Integrity Monitoring applies the rule.

You can disable any system integrity monitoring rule. If a rule is disabled, System Integrity Monitoring temporarily stops applying the rule.

To enable or disable a system integrity monitoring rule in Kaspersky Security Center:

1. Open Kaspersky Security Center Administration Console.
2. In the Managed devices folder of the console tree, open the folder with the name of the administration group to which the relevant protected virtual machines belong.
3. In the workspace, select the Policies tab.
4. Select a Light Agent for Windows policy in the list of policies and open the Properties: <Policy name> by double-clicking.
5. In the policy properties window, select the System Integrity Monitoring section in the list on the left.
6. In the right part of the window, click the Settings button located on the right of the Monitor files and the registry check box in one of the following sections:
   • In the System Integrity Monitoring scope section if you want to configure a Real-Time System Integrity Monitoring rule.
   • In the System Integrity Check scope section if you want to configure a rule for the System Integrity Check task and baseline update task.
7. In the System Integrity Monitoring rules window that opens, in the list of system integrity monitoring rules select the required rule and perform one of the following actions in the Status column:
   • Select the value On if you want to enable the rule.
   • Select the value Off if you want to disable the rule.
8. In the System Integrity Monitoring rules window, click OK.
9. Click the Apply button.

To enable or disable a system integrity monitoring rule in the local interface:

1. On the protected virtual machine, open the application settings window.
2. In the left part of the window, in the Endpoint control section, select the System Integrity Monitoring section.

   In the right part of the window, the System Integrity Monitoring component settings are displayed.

   If the settings in the local interface are not available, this means that the values of settings defined by the policy are used for all protected virtual machines of the administration group.

3. Do one of the following:
   • Click the Settings button located on the right of the Monitor files and the registry check box in the upper part of the System Integrity Monitoring settings section if you want to configure a Real-Time System Integrity Monitoring rule.
   • Click the Settings button located on the right of the Monitor files and the registry check box in the lower part of the System Integrity Monitoring settings section if you want to configure a rule for the System Integrity Check task and baseline update task.

   The System Integrity Monitoring rules window opens.

4. Complete steps 7–8 of the previous instructions.
5. To save changes, click the Save button.