General task settings

To configure the general task settings:

1. Expand the Managed devices node in the Kaspersky Security Center Administration Console tree.
2. Select the administration group for which you want to configure application settings.
3. Perform one of the following actions in the details pane of the selected administration group:
   • To configure application settings for a group of protected devices, select the Policies tab and open the Properties: <Policy name> window.
   • To configure the application for a single protected device, select the Devices tab and open the Application settings window.

     If an active Kaspersky Security Center policy is applied to a device and blocks changes to application settings, then these settings cannot be edited in the Application settings window.

4. In the Real-time Server Protection section, click the Settings button in the Network Threat Protection subsection.

   The Network Threat Protection window opens.

5. Open the General tab.
6. In the Processing mode section select the processing mode:
   • Pass-through.

     If this mode is selected, Kaspersky Security for Windows Server scans inbound network traffic for activity that is typical of network attacks, but doesn't log events about detected activity and doesn't block network activity from the attacking computer.

     For example, you can use this mode in case of a decrease in the protected device's performance.

   • Only inform about network attacks.

     If this mode is selected, Kaspersky Security for Windows Server scans inbound network traffic for activity that is typical of network attacks, logs events about detected activity, but doesn't block network activity from the attacking computer.

   • Block connections when attack is detected.

     The check box enables or disables adding hosts showing activity typical of network attacks to the list of blocked hosts.

     If this mode is selected, Kaspersky Security for Windows Server scans inbound network traffic for activity that is typical of network attacks, logs events about detected activity, and adds IP addresses of hosts showing activity typical of network attacks to the list of blocked hosts.

     The mode is selected by default.

     You can view the list of blocked hosts in the Blocked Hosts storage.

     You can restore access to blocked hosts, and specify the number of days, hours and minutes after which hosts regain access to network file resources after being blocked by configuring the Blocked Hosts storage settings.

7. Select or clear the Don't stop traffic analysis when the task is not running check box.

   If this check box is selected, when Network Threat Protection task is stopped, Kaspersky Security for Windows Server scans inbound network traffic for activity that is typical of network attacks and blocks network activity from the attacking computer depending on the selected processing mode.

   If this check box is cleared, when Network Threat Protection task is stopped, Kaspersky Security for Windows Server doesn't scan inbound network traffic for activity that is typical of network attacks and doesn't block network activity from the attacking computer.

   The check box is cleared by default.

8. Click OK.