Kaspersky Anti Targeted Attack Platform

Viewing information about Central Node or Sensor servers

To view information about a Central Node or Sensor component:

1. Select the Sensor servers section in the window of the application web interface.
2. Click the card of the relevant component.

   This opens a window with information about the component.

The Settings tab for the Central Node and Sensor components displays the following information:

• Status is the current status of the component indicated by an icon and text description.
• Node type indicates the application component: Server (Central Node component) or Sensor (Sensor component).
• Disk space currently used by the application is the disk space occupied by application files. Includes installed files and files created by the application in the course of its operation.
• Maximum disk space that can be used by the application is the disk space that can be occupied by application files. Includes installed files and the sum total of all space limits configured in data storage rules. This value may not exceed the amount of available disk space.
• Occupied on disk is the disk space used by all files. Includes application files, operating system files, and files of other applications. The space is calculated on the disk that contains the /var directory in the file system of the component.
• Free disk space is the disk space that is not used by files. The space is calculated on the disk that contains the /var directory in the file system of the component.
• Total disk space is the total volume of disk space on the drive that contains the /var directory in the file system of the component.
• BPF filtering indicates whether filtering using the Berkley Packet Filter (BPF) technology based on address parameters in network packets is enabled or disabled.
• External storage for traffic dump files indicates the connection status of the external storage. The following statuses may be displayed: Connected, Not connected.
• Retention rules indicate current and maximum values of size, number of items, and storage duration of application data.

For the Sensor component, in addition to the Settings tab, the External storage, Other, ICAP integration, POP3 integration, and SMTP integration tabs are also displayed.

• The External storage tab displays information about the configuration of the external storage for mirrored SPAN traffic.
• On the Other tab, the following information is displayed:
  • Maximum size of scanned file is the current limit on the size of files that can be scanned by the component.
  • Dump HTTP body indicates whether HTTP body content dumping is enabled or disabled.
• The ICAP Integration tab displays the settings of integration with a proxy server via ICAP.
• The POP3 Integration tab displays the POP3 mail server integration settings.
• The SMTP Integration tab displays the SMTP mail server integration settings.