Contents and amount of information kept when upgrading the Kaspersky Anti Targeted Attack Platform

Central Node or PCN settings.

All data except:

• License keys
• Settings for integration with the Sandbox component
• Settings for integration with the Sensor component
• Settings for receiving mirrored traffic from SPAN ports in the high availability version of Central Node.

Application database on Central Node or PCN (alert database, application operation monitoring data, custom rule database, tasks, policies, rules added to exclusions).

All data except:

• Files in the scan queue when Kaspersky Anti Targeted Attack Platform is upgraded to version 6.1.
• Files in the rescan queue when Kaspersky Anti Targeted Attack Platform is upgraded to version 6.1.
• Report data.

Events database.

All data.

Storage and quarantine

All data.

Sandbox artifacts.

All data.

Sensor settings.

All data.

Sensor data.

Recorded raw network traffic dumps.