Managing Kaspersky Endpoint Agent policies

This section describes how to create Kaspersky Endpoint Agent policies and enable policy settings.

Creating Kaspersky Endpoint Agent policy

This section provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.

To create a Kaspersky Endpoint Agent policy in the Kaspersky Security Center Web Console:

1. In the main window, select Devices → Policies and profiles.
2. Click the Add button.

   The policy creation wizard starts.

3. Select the Kaspersky Endpoint Agent application and click Next.
4. Select the required Kaspersky Endpoint Agent deployment method by selecting the appropriate check boxes:
   • Integration with Kaspersky Sandbox
   • Endpoint Detection and Response Optimum
   • Endpoint Detection and Response Expert (KATA EDR), Kaspersky Industrial CyberSecurity for Networks.

   Policy type and integration with Kaspersky Sandbox and KATA EDR cannot be selected in Kaspersky Security Center Cloud Console.

5. Click Next.
6. On the General tab, you can perform the following actions:
   • Change the policy name.
   • Select policy status:
     • Active. After the next synchronization, the policy will be active on the computer.
     • Inactive. Backup policy. An inactive policy can be made active, if required.
     • Out-of-office. The policy will become active when the computer leaves the corporate network.
   • Configure the policy settings inheritance:
     • Inherit settings from parent policy. If this option is enabled, the policy settings will be inherited from the upper-level policy. The policy settings cannot be modified if the Force inheritance of settings in child policies option is enabled in the parent policy.
     • Force inheritance of settings in child policies. If this option is enabled, the parent policy settings will be applied to child policies. In the properties window of the child policy, the Inherit settings from parent policy option is automatically enabled and cannot be disabled.
7. On the Application settings tab, you can configure Kaspersky Endpoint Agent policy settings.
8. Click the Save button.

Enabling settings in Kaspersky Endpoint Agent policy

When you configure Kaspersky Endpoint Agent policy settings, by default these settings are saved, but are not applied until you enable them.

You can enable settings for the groups where these settings are located. You can enable either individual groups of settings or all groups of settings within one policy.

To enable the group of settings in Kaspersky Endpoint Agent policy:

1. Open the policy properties window.
   1. In the main Kaspersky Security Center Web Console window select Devices → Policies and profiles.
   2. Select the policy you want to configure.
   3. In the <Policy name> window that opens, select the Application settings tab.
2. Select the section and group of settings to which the required setting belongs.
3. In the upper right corner of the settings group, change the switch from Undefined to Enforce.

All the settings of the group will be applied in the policy.