Creating allowing rules for applications launch control from Kaspersky Security Center events

To create allowing rules for applications launch control from Kaspersky Security Center events:

1. Open the Applications Launch Control rules window.
2. Click the Add button.
3. In the button’s context menu, select Create allowing rules for applications from Kaspersky Security Center events.
4. Select the principle for adding the rules to the list of previously created Application Launch Control rules:
   • Add to existing rules, if you want to add the imported rules to the list of existing rules. Rules with identical settings are duplicated.
   • Replace existing rules, if you want to replace the existing rules with the imported rules.
   • Merge with existing rules, if you want to add the imported rules to the list of existing rules. Rules with identical settings are not added; the rule is added if at least one rule parameter is unique.

   The Generating of the Applications Launch Control rules window opens.

5. Select the event types based on which the application will create applications launch control rules:
   • Statistics only mode: application launch denied.
   • Application launch denied.
6. Select the time period from the Request events that were generated within the period drop-down list.
7. If necessary, in the Use events generated for a group of managed devices field, enter the name or a fragment of the name of the group of devices managed by Kaspersky Security Center whose events will be the basis for creating applications launch control rules.
8. Clear or select the Prioritize the use of hash when generating rules check box.

   If the check box is selected, Kaspersky Embedded Systems Security for Windows uses the checksum of the file to generate the rule when both the checksum and the certificate of the file are available.

   If the check box is cleared, Kaspersky Embedded Systems Security for Windows uses the digital certificate of the file to generate the rule when both the checksum and the certificate of the file are available.

9. Click the Generate rules button.
10. Click the Save button in the Applications Launch Control rules window.

    The rule list in the Applications Launch Control task will be populated with new rules generated based on system data from the protected device with the Kaspersky Security Center Administration Console installed.

    Rules with the same hash are not added, because all rules in the list must be unique.