Contents
Known issues and limitations
Kaspersky Endpoint Security has following known issues and limitations:
- If an application that collects information and sends it to be processed is installed on your computer, Kaspersky Endpoint Security may classify this application as malware. To avoid this, you can exclude the application from scanning by configuring Kaspersky Endpoint Security as described in this document.
- Application functional settings can be modified by editing configuration files.
- In Kaspersky Security Center, local tasks may be listed twice in the properties of managed devices.
- Changing the update source for a local update task disables automatic execution of the update task.
- To exclude Safari network traffic from scanning by Kaspersky Endpoint Security, you need to add the following paths to the exclusion list:
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc/Contents/MacOS/com.apple.WebKit.Networking
/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent
/System/Library/PrivateFrameworks/SafariShared.framework/Versions/A/XPCServices/com.apple.Safari.SearchHelper.xpc/Contents/MacOS/com.apple.Safari.SearchHelper
/System/Library/Frameworks/webkit2.framework/versions/a/xpcservices/com.apple.webkit.networking.xpc/contents/macos/com.apple.webkit.networking
- To exclude Google Chrome network traffic from scanning by Kaspersky Endpoint Security, you need to add the following path to the exclusion list:
/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/<VersionNumber>/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper
- After you create a policy profile for a Kaspersky Endpoint Security policy using Kaspersky Security Center Web Console and Cloud Console, you need to check that the settings are applied correctly on client computers.
- On computers running macOS 11 and 12, when enabling FileVault disk encryption in policy settings, users with administrator rights can decrypt the startup disk of their Mac from System Preferences.
- Changes in the proxy server options will be applied only after Kaspersky Endpoint Security is restarted.
- Safari might not connect to a website with an untrusted certificate. You can add such a website to the exclusions or use another browser.
- On macOS 11 and 12, after uninstalling Kaspersky Endpoint Security 11.2 remotely via Kaspersky Security Center, one of the application’s system extension may remain in computer memory. After that, in rare cases, a problem with the Full Disk Access permission may occur when installing Kaspersky Endpoint Security. In this case, we recommend to uninstall the application locally and reinstall it.
- The applications that need Rosetta might not be installed if Kaspersky Endpoint Security is running. To resolve the problem, quit Kaspersky Endpoint Security and try to reinstall the application. After that, you can run Kaspersky Endpoint Security again.
List of objects scanned by extension
If when creating a scan task in Kaspersky Security Center, in the scan settings you have selected the Scan applications and documents by extension option, Kaspersky Endpoint Security performs virus scans on objects without extensions and objects with the following extensions:
General formats:
- txt
- csv
- htm
- html
Multimedia (audio/video) files:
- flv
- f4v
- avi
- 3gp
- 3g2
- 3gp2
- 3p2
- divx
- mp4
- mkv
- mov
- qt
- asf
- wmv
- rm
- rmvb
- vob
- dat
- mpg
- mpeg
- bik
- fcs
- mp3
- mpeg3
- flac
- ape
- ogg
- aac
- m4a
- wma
- ac3
- wav
- mka
- rm
- ra
- ravb
- mid
- midi
- cda
Image files:
- jpg
- jpe
- jpeg
- jff
- gif
- png
- bmp
- tif
- tiff
- emf
- wmf
- eps
- psd
- cdr
- swf
Executable and system files:
- exe
- dll
- scr
- ocx
- com
- sys
- class
- o
- so
- elf
- prx
- vb
- vbs
- js
- bat
- cmd
- msi
- deb
- rpm
- sh
- pl
- dylib
Documents and templates:
- doc
- dot
- docx
- dotx
- docm
- dotm
- xsl
- xls
- xlsx
- xltx
- xlsm
- xltm
- xlam
- xlsb
- ppt
- pot
- pps
- pptx
- potx
- pptm
- potm
- ppsx
- ppsm
- rtf
- msg
- eml
- vsd
- vss
- vst
- vdx
- vsx
- vtx
- xps
- oxps
- one
- onepkg
- xsn
- odt
- ods
- odp
- sxw
- pub
- mdb
- accdb
- accde
- accdr
- accdc
- chm
- mht
Archives:
- zip
- 7z*
- 7-z
- rar
- iso
- cab
- jar
- bz
- bz2
- tbz
- tbz2
- gz
- tgz
- arj
- dmg
- smi
- img
- xar
Note: The actual format of a file may not match its file name extension.
Page topMasks in paths to files and folders
A file name mask or a folder name mask represents the name and extension of a file or the name of a folder using common symbols.
You can use these symbols when you specify the protection scope, scan scope, and Trusted Zone:
- The tilde symbol (
~
) replaces/Users/<user name>
in the path to a file or folder. For example, the path~/Desktop
means that the protection scope includes Desktop folders of all users on computers that you want to protect. - The asterisk symbol (
*
) takes the place of any set of characters in the file or folder name, except the\
and/
characters (which delimit the names of files and folders in paths to files and folders). For example, the mask/*/*.txt
will include all paths to files with the TXT extension located in folders on the internal disk, but not in subfolders. - Two consecutive asterisk symbols (
**
) take the place of any set of characters (including an empty set) in the file or folder name, including the\
and/
characters (which delimit the names of files and folders in paths to files and folders). For example, the mask/Folder/**/*.txt
will include all paths to files with the TXT extension located in the folder named Folder and its subfolders. The mask must include at least one nesting level. The mask/**/*.txt
is not a valid mask. - The question mark (
?
) takes the place of any single character in the file or folder name, except the\
and/
characters (which delimit the names of files and folders in paths to files and folders). For example, the mask/Folder/???.txt
will include paths to all files located in the folder named Folder that have the TXT extension and a name consisting of three characters.