Suspending the use of Kaspersky Managed Detection and Response temporarily

In order to comply with the terms of using the MDR solution it is required to suspend the use of the solution on the assets if they are temporarily located on the United States territory (for example, during a business trip).

To suspend the use of the MDR solution temporarily on particular assets:

1. In Kaspersky Security Center, create a new administration group to manage assets on which you want to suspend the use of the MDR solution. You will be able to modify the list of assets in this group later.
2. For this administration group, create new policies of the EPP applications used to provide the MDR telemetry from the assets, and then disable the use of the MDR solution and Kaspersky Security Network in the policy settings.

   For details about configuring the policies, refer to the help articles for a particular EPP application. For example, Kaspersky Endpoint Security for Windows help contains instructions on managing policies and configuring integration with the MDR solution.

3. Move the assets on which you want to suspend the use of the MDR solution to the created administration group.

   The new policy where the use of MDR solution and Kaspersky Security Network are disabled will be applied to the assets after synchronization. You can also manually force the synchronization.

To resume the use of Kaspersky Managed Detection and Response after suspension:

1. Exclude the asset from the administration group used for suspension.
2. Apply a regular policy where the use of MDR solution is enabled and configured to this asset.

   The assets will not be monitored by the MDR solution until a policy where the use of MDR solution is enabled and configured is applied to them.

Page top