- Kaspersky Endpoint Security overview
- Install and uninstall Kaspersky Endpoint Security
- Kaspersky Endpoint Security interface
- About notifications
- Kaspersky Endpoint Security licensing
- Perform common tasks
- Open and quit the application
- View the status of computer protection
- Disable and resume computer protection
- Perform scan tasks
- Use Protection Center
- Configure the automatic start of a scheduled virus scan task
- What to do if file access is blocked
- Update application databases
- Restore a file that has been deleted or disinfected by the application
- View the application operation report
- What to do if notification windows appear
- Advanced configuration of the application
- Participate in Kaspersky Security Network
- Manage the application from the command line
- Manage the application from the command line
- View Help
- Run virus scan
- Update the application
- Roll back the last update
- Start/stop a component or task
- View status and statistics of a component or task
- Export protection preferences
- Activate the application
- Return codes of the command line
- Quit the application
- Manage the application via Kaspersky Security Center
- Deploy Kaspersky Endpoint Security on a corporate network
- Prepare for remote installation of Kaspersky Endpoint Security
- Manage Network Agent from the command line
- Install and uninstall Kaspersky Endpoint Security
- Start and stop the application via Kaspersky Security Center
- Create and manage tasks
- Create and manage policies
- Create and manage policy profiles
- Generate a report on detected objects
- Contact Technical Support
- Sources of information about the application
- Appendices
- AO Kaspersky Lab
- Information about third-party code
- Trademark notices
Configure policy settings
You can make changes to the policy that you created in Kaspersky Security Center and block any changes to its settings in the policies of subgroups and in task settings.
Kaspersky Endpoint Security policy settings include application settings and task settings.
Configure policy settings
- Start Administration Console of Kaspersky Security Center.
- Expand the Administration Server <Server name> node.
- Open the Managed devices folder.
- In the workspace, select the Policies tab.
- Right-click the policy you want to configure and choose Properties.
- In the Properties: <Policy name> window, configure policy settings as necessary:
Configure the following protection settings in the Protection section
- Enable or disable real-time protection of the client computer.
- Enable or disable the start of Kaspersky Endpoint Security when the client computer starts.
- Configure Trusted Zone.
- Select types of objects to be detected.
- Disable or enable the start of scheduled tasks when the computer is running on battery power.
Configure the following settings in the File Anti-Virus section
- Enable or disable Web Anti-Virus.
- Select one of the preset security levels or configure security settings manually.
- Enable or disable checking of web addresses against the database of malicious web addresses.
- Configure Anti-Phishing settings.
- Add trusted addresses whose traffic will not be scanned by Web Anti-Virus.
- Select the action to be performed upon detecting a malicious object in web traffic.
- Enable or disable scanning of inbound and outbound HTTPS traffic.
Configure the following settings in the Network Attack Blocker section
- Enable or disable Network Attack Blocker.
- Configure Network Attack Blocker settings.
- Specify the IP addresses of computers whose network activity will not be blocked.
Configure the following settings in the FileVault Disk Encryption section
- Enable or disable FileVault disk encryption management for client computers.
- Encrypt or decrypt startup disk on client computers.
If the Enable FileVault disk encryption management checkbox is unselected, users with administrator rights can encrypt and decrypt their Mac startup disks from System Preferences.
If the Enable FileVault disk encryption management checkbox and the Encrypt disk option are selected, users with administrator rights can't decrypt the startup disk of their Mac from System Preferences.
If the Enable FileVault disk encryption management checkbox and the Decrypt disk option are selected, users with administrator rights can't encrypt the startup disk of their Mac from System Preferences.
Configure the following settings in the Update section
- Enable or disable updating application modules.
- Enable or disable copying of update files to a specific folder.
- Specify the folder to which the application will copy update files.
- Specify update sources.
Configure the following settings in the KSN section
- Read the full text of the Kaspersky Security Network Statement by clicking the KSN Statement button.
- Enable or disable the use of Kaspersky Security Network.
- Enable or disable extended KSN mode.
- Enable or disable the use of KSN proxy.
Configure the following settings in the User Interaction section
- Enable or disable event notifications.
- Select how Kaspersky Endpoint Security will notify the user about events.
- Enable or disable displaying the Kaspersky Endpoint Security icon in the menu bar.
- Enable or disable displaying the Quit item in the shortcut menu of the Kaspersky Endpoint Security icon on the client computer.
- Select the language used to display Kaspersky Security Center events.
- Configure Kaspersky Endpoint Security settings available to users of the client computer.
Configure the following settings in the Network section
- Enable or disable the use of a proxy server.
- Specify the proxy server address.
- Enable or disable the use of a proxy server for local addresses.
- Specify the user name and password for proxy server authentication.
Configure the following settings in the Reports section
- Enable or disable saving of non-critical events in the report.
- Enable or disable saving of recent events only.
- Enable or disable removal of events after the specified period.
- Specify the period for storing events.
- Enable or disable removal of objects from Backup after the specified period.
- Specify the period for storing objects in Backup.
- Click OK to save changes and close the policy properties window.