Known issues

Kaspersky Next XDR Expert has a number of limitations that are not critical to the operation of the application:

• On the investigation graph, the Undo and Redo buttons may not work correctly in some cases.
• If you select the Full path to the file option when moving files to quarantine, the response action is completed with an error.
• The launch of a third-party custom script by using a playbook is supported only on a Linux device.
• When upgrading Kaspersky Next XDR Expert from version 1.2 to 1.3, certain configuration steps for a specific component must be performed manually. If the component is configured automatically, it may lead to resource overflow, and Kaspersky Next XDR Expert may not work correctly. For proper manual configuration, contact Technical Support.
• When specifying a trigger for aggregation or segmentation rules, jq expressions with functions that have interdependent parameters are considered invalid. For example:

  any(.Observables[]; .Type == "ip" and .Value == "1.1.1.1")

• After you add or delete tenants in the Tenants section (Settings → Tenants), the changes to the tenant list are not synchronized with the tenant filter in the Threat hunting section. The tenant filter still contains the deleted tenants and does not contain the added ones.
• After you shut down the infrastructure servers of the Kubernetes cluster and then start them again, an attempt to sign in to OSMP Console returns en error.
• If you enable the Use custom permissions option on the Access rights tab in the properties of the Managed devices administration group, the client devices cannot be exported from Open Single Management Platform to KUMA.
• The playbooks that contain response actions through Kaspersky Endpoint Security for Windows are displayed as available in the playbook list even though the Kaspersky Endpoint Security for Windows web plug-in is not installed in Kaspersky Next XDR Expert.
• When you import the Download updates to the repositories of distribution points or Update verification task the Select devices to which the task will be assigned option is enabled. These tasks cannot be assigned to a device selection or specific devices. If you assign the Download updates to the repositories of distribution points or Update verification task to specific devices, the task will be imported incorrectly.
• In the investigation graph, rearranging nodes is performed incorrectly.
• When migrating data from the secondary Administration Server of Kaspersky Security Center Windows to the primary Administration Server of Kaspersky Next XDR Expert, the Migration wizard does not finish the Importing data step. This issue occurs if you create a global task on the secondary Administration Server (for example, the Uninstall application remotely task) and select only the Kaspersky Security Center Administration Server value for the Managed applications to export parameter in the Migration wizard.
• Receiving Kaspersky announcements is not available.
• The Administration Server properties window contains settings for mobile devices, though Kaspersky Next XDR Expert does not support management of mobile devices.
• The notifications about new versions of web plug-ins that are available to download are disabled. You can update the plug-ins by using Kaspersky Deployment Toolkit.
• After creating a new tenant, the alerts related to the tenant are sent to the server, but not displayed in the alert table. You may need to refresh the webpage to update the table data.
• In the properties window of any object that supports revision management, the Revision history section contains the Web Console IP address field displaying an incorrect IP address.

For the list of known issues of Open Single Management Platform, refer to the Kaspersky Security Center documentation.

Page top