Friday, April 19, 2013

How to add an application into the Trusted Zone Kaspersky Administrative Kit

Kaspersky Administration Kit 8.0 allows an administrator to add software into the Trusted Zone remotely. This article explains remote administration of the Trusted Zone in Kaspersky Anti-Virus 6.0 for Windows Workstations MP4.
Trusted Zone is a list of objects composed by an administrator. It contains objects not monitored by Kaspersky Anti-Virus. It is a list of exceptions for the protection scheme.
The Trusted Zone is edited via the policy for a particular Kaspersky Lab application. Open properties of the policy for workstations tab Protection, and click the button Trusted Zone.

There are two tabs in the section Trusted Zone: Trusted applications and Exclusion rules.

Trusted applications are the applications which you believe to be secure and do not want them to be checked by Kaspersky Anti-Virus. When you choose an application, Kaspersky Anti-Virus memorizes internal attributes of the executable file, and uses them to identify the application as a trusted one during further checks.
Click Add to add a trusted application into the list. Specify full path and actions which will not be monitored by Kaspersky Anti-Virus.
  • Do not scan opened files – any files opened by the process of the trusted application will not be scanned.
  • Do not control application activity – the component Proactive Defense will not scan any activity (even suspicious) of the trusted application.
  • Do not control registry access – all attempts to access system registry by the trusted application will not be scanned.
  • Do not scan network traffic - network traffic initiated by the trusted application will not be scanned. This exclusion does not affect network traffic scan by the Anti-Hacker component which governs the analysis of the network activity of the given application. You can exclude from scan either all network traffic of an application or only encrypted traffic (using SSL). Click the link all to change its value to encrypted. You can also limit the exclusion to a particular host/port.
  • Allow interaction with application interface – remote access applications (e.g. Remote Administrator) will be able to manage Kaspersky Anti-Virus settings via the application interface.
An exclusion rule is a set of conditions for excluding an object from scan by Kaspersky Anti-Virus.

Click Add to create a new rule.
Object is an exclusion of a particular object, folder, file(s) or a mask from scan.

The block Rule description allows to configure values for selected exclusion types and choose the Kaspersky Anti-Virus components to use that rule.
What can be excluded from scan: a file of a certain format, a file mask, an area (e.g. a folder or a program), processes of applications, objects according to Virus Encyclopedia classification (status assigned to the object by Kaspersky Anti-Virus during a scan).

Threat type is a status assigned to the object by Kaspersky Anti-Virus during a scan. Status is assigned according to malware and potentially dangerous software classification listed in Kaspersky Lab Virus Encyclopedia.

No comments:

Post a Comment