Kaspersky Secure Mobility Management

Configuring protection levels in Kaspersky Security Center

These settings apply to Android devices.

Expand all | Collapse all

To configure rules for assigning protection levels in Kaspersky Security Center:

1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Policies & profiles. In the list of group policies that opens, click the name of the policy that you want to configure.
2. In the policy properties window, select Application settings.
3. Select Android and go to the KES for Android settings section.
4. On the Severity settings for device protection level card, click Settings.

   The Severity settings for device protection level window opens.

5. Enable the settings using the Severity settings for device protection level toggle switch.
6. Select the OK, Warning, or Critical protection level for each of the following conditions:
   • Real-time protection is not running

     Drop-down list where you can select the protection level of a mobile device on which real-time protection is not running.

     Real-time protection lets you detect threats in files being opened, as well as scan new apps and stop device infections in real time.

     Real-time protection may fail to run for the following reasons:

     • The user declined to use Kaspersky Security Network on the mobile device in the Anti-Malware settings of Kaspersky Endpoint Security for Android.
     • The user did not grant the app access to manage all files.

     If real-time protection is not running, you can also configure restrictions on operation of the mobile device in the Compliance Control settings of the policy.

   • Web Protection and Web Control are not running

     Drop-down list where you can select the protection level of a mobile device on which Web Protection and Web Control are not running.

     Web Protection lets you scan websites and block malicious and phishing websites.

     Web Control lets you configure user access to specific websites and categories of websites.

     Web Protection and Web Control may fail to run for the following reasons:

     • The user disabled Web Protection on the mobile device in the Kaspersky Endpoint Security for Android settings.
     • The user did not enable Kaspersky Endpoint Security for Android as an Accessibility feature.
     • The Ignore battery optimization permission has not been granted.
     • The Web Protection Statement has not been accepted.

     If Web Protection and Web Control are not running, you can also configure restrictions on the operation of the mobile device in the Compliance Control settings of the policy.

   • App Control is not running

     Drop-down list where you can select the protection level of a mobile device on which App Control is not running.

     App Control lets you block apps from running on mobile devices if those apps do not meet the corporate security requirements.

     App Control may not run if the user did not enable the app as an Accessibility feature on devices running Android 5 or later.

     If App Control is not running, you can also configure restrictions on the operation of the mobile device in the Compliance Control settings of the policy.

   • Device lock is not available

     Drop-down list where you can select the protection level of a mobile device on which device lock is not available.

     The device may be locked in the following cases:

     • The Anti-Theft command is received.
     • The SIM card is replaced or the device is turned on without a SIM card.
     • An attempt is made to remove Kaspersky Endpoint Security for Android while app removal protection is enabled.

     Device lock may be unavailable for the following reasons:

     • The user did not set the app as a device administrator.
     • The user did not enable the app as an Accessibility service on devices running Android 7 or later.
     • The user did not enable the app to overlay other windows on devices running Android 7 or later.
   • Device location is not available

     Drop-down list where you can select the protection level of a mobile device whose location cannot be determined.

     The location is determined after the Locate device command is received.

     Locating the device may be unavailable for the following reasons:

     • The user did not grant the device locate permission to the app.
     • The user turned off the GPS module in the device settings.
   • Versions of the Kaspersky Security Network Statement do not match

     Drop-down list where you can select the protection level of a mobile device if the version of the Kaspersky Security Network Statement accepted by the administrator does not match the version accepted by the device user. Statistics not listed in the version of the Statement accepted by the user are not sent to Kaspersky Security Network.

   • Versions of the Marketing Statement do not match

     Drop-down list where you can select the protection level of a mobile device if the version of the Statement regarding data processing for marketing purposes accepted by the administrator does not match the version accepted by the device user. Data is not transferred to third-party services.

     The list of third-party services can be found in the Statement regarding data processing for marketing purposes.

7. Click OK.
8. Click Save to save the changes you have made.

Mobile device settings are changed after the next device synchronization with Kaspersky Security Center.

For more information about default values, reasons, and conditions for assigning protection levels, please refer to the Mobile device protection levels section.