Participating in Kaspersky Security Network
December 13, 2023
To enhance the protection of virtual machines, Kaspersky Security can use data received from Kaspersky users all over the world. Kaspersky Security Network is designed to collect such data.
Kaspersky Security Network (KSN) is an infrastructure of cloud services providing access to Kaspersky online knowledge base with information about the reputation of files, web resources, and software. Data from Kaspersky Security Network ensures faster response by Kaspersky Security to unknown threats, improves the performance of some protection components, and reduces the risk of false positive.
If you are participating in Kaspersky Security Network, KSN services provide Kaspersky Security with information about the category and reputation of scanned files.
The following types of KSN are differentiated depending on the location of the infrastructure:
- Global KSN – the infrastructure is hosted by Kaspersky servers.
- Private KSN. This infrastructure is located within the corporate network or hosted by third-party servers of the service provider, such as on the Internet service provider's network.
Information about the type of KSN used by Kaspersky Security is displayed in the policy properties.
The interaction between SVMs managed by Kaspersky Security Center and the KSN infrastructure is facilitated by the KSN Proxy service. To use KSN in Kaspersky Security operations, the KSN Proxy service must be enabled in Kaspersky Security Center.
To use Private KSN, it must be enabled and configured in Kaspersky Security Center.
The KSN Proxy service and Private KSN can be configured in the properties of the Kaspersky Security Center Administration Server in the KSN proxy server section. See Kaspersky Security Center documentation for more information.
Use of KSN by Kaspersky Security is configured in policy properties.
If the KSN Proxy service is disabled in Kaspersky Security Center, no data is exchanged between SVMs and KSN. If the use of KSN is nonetheless enabled in the Kaspersky Security policy, this could reduce the performance of Kaspersky Security. It is recommended to disable the use of KSN in the Kaspersky Security policy if the KSN Proxy service is disabled in Kaspersky Security Center.
Kaspersky Security automatically sends information about KSN usage to Kaspersky, and may send other information depending on the selected KSN usage mode (standard KSN or extended KSN). The KSN mode affects the amount of data that is transmitted to Kaspersky when KSN is being used.
Your participation in Kaspersky Security Network when using extended KSN helps Kaspersky promptly gather information about the types and sources of new threats and develop solutions for neutralizing them.
Participation in Kaspersky Security Network is voluntary. The decision to participate in Kaspersky Security Network is made during the creation of a Kaspersky Security policy, and this decision can be changed at any time.