Kaspersky Anti Targeted Attack Platform

Configuring traffic redirection from the Endpoint Agent component to the Sensor server

You can use the Sensor server as a proxy server for communication between the Endpoint Agent component and the Central Node to reduce the load on the Central Node.

When configuring the traffic redirection, keep in mind the following limitations:

• The maximum incoming traffic volume for the Sensor may not exceed 1 Gbps.
• The recommended channel bandwidth between Central Node and Sensor servers must be 15% of the SPAN port traffic.
• The maximum allowed packet loss between Sensor servers and the Central Node is 10% with a packet delay of up to 100 ms.

You can only use the Sensor as a proxy server if the Sensor and Central Node are located on different servers.

If you are using Sensor as a proxy server, make sure to enter the IP address of the Sensor instead of the IP address of the Central Node when configuring the integration of Kaspersky Anti Targeted Attack Platform with the application that acts as the Endpoint Agent component on that application's side.

To use the Sensor as a proxy server, connect the Sensor to the Central Node.