Configuring Heuristic Analyzer and integration with other application components

To start the KSN Usage task, you must accept the Kaspersky Security Network Statement.

To configure Heuristic Analyzer and integration with other components:

1. Open the Real-time file protection window.
2. On the General tab, clear or select the Use heuristic analyzer check box.
   

   This check box enables / disables Heuristic Analyzer during object scanning.

   If the check box is selected, Heuristic Analyzer is enabled.

   If the check box is cleared, Heuristic Analyzer is disabled.

   The check box is selected by default.

3. If necessary, adjust the level of analysis using the slider.
   

   The heuristic analysis level sets the balance between the thoroughness of searches for threats, the load on the operating system's resources and the time required for scanning.

   The following scanning sensitivity levels are available:

   • Light. Heuristic Analyzer performs fewer instructions within executable files. The probability of threat detection in this mode is somewhat lower. Scanning is faster and less resource-intensive.
   • Medium. Heuristic Analyzer performs the number of executable file instructions recommended by Kaspersky experts.

   This level is selected by default.

   • Deep. Heuristic Analyzer performs more instructions within executable files. The probability of threat detection in this mode is higher. Scanning uses more system resources, takes more time, and can produce a higher number of false alarms.

   The setting is available if the Use heuristic analyzer check box is selected.

4. In the Integration with other components section, configure the following settings:
   • Select or clear the Apply Trusted Zone check box.
     

     This check box enables / disables use of the Trusted Zone for a task.

     If the check box is selected, Kaspersky Security for Windows Server adds file operations of trusted processes to the scan exclusions configured in the task settings.

     If the check box is cleared, Kaspersky Security for Windows Server disregards the file operations of trusted processes when forming the protection scope for the task.

     The check box is selected by default.

   • Select or clear the Use KSN for protection check box.
     

     This check box enables or disables the use of KSN services.

     If the check box is selected, the application uses Kaspersky Security Network data to ensure that the application responds more quickly to new threats and to reduce the likelihood of false positives.

     If the check box is cleared, the task does not use KSN services.

     The check box is selected by default.

     The Send data about scanned files check box must be selected in the KSN Usage task settings.

   • Select or clear the Block access to network shared resources for the hosts that show malicious activity check box.
   • Select or clear the Launch critical areas scan when active infection is detected check box.
     

     If the check box is selected, when active infection is detected, Kaspersky Security for Windows Server creates and launches a temporary Critical Areas Scan task. When the Critical Areas Scan temporary task finishes, Kaspersky Security for Windows Server removes this temporary task.

     If the check box is cleared, when active infection is detected, Kaspersky Security for Windows Server does not create and launch Critical Areas Scan task.

     The check box is selected by default.

   • Select or clear the Use Kaspersky Sandbox for protection check box.
     

     This check box enables or disables the use of Kaspersky Sandbox.

     If the check box is selected, Kaspersky Endpoint Agent sends objects to Kaspersky Sandbox. Kaspersky Sandbox analyzes the behavior of these objects to identify malicious activity and signs of targeted attacks.

     If the check box is cleared, the task does not send objects to Kaspersky Sandbox.

     The check box is cleared by default.

     The Kaspersky Sandbox functionality does not work if Kaspersky Endpoint Agent is not installed on the protected device.

     The running Traffic Security task might obstruct the use of Kaspersky Sandbox. To use the Traffic Security task and Kaspersky Sandbox on the same protected device, restart Traffic Security task after the installation of Kaspersky Security for Windows Server and Kaspersky Endpoint Agent.

5. Click OK.

The configured task settings are applied immediately to a running task. If the task is not running, the modified settings are applied at next start.