Application modes based on the license

Kaspersky Anti Targeted Attack Platform provides various operating modes depending on the added keys.

No license

After the application is installed and the web interface is started, the application operates in this mode until you add a key.

Unlicensed mode has the following limitations:

Application databases are not updated.
There is no connection to the Kaspersky Security Network Knowledge Base.
Receiving and processing of data from network traffic and mail traffic is limited.
The web interface sections Threat Hunting, Tasks, Prevention, Custom rules, Storage, and Endpoint Agents have limited functionality.

Commercial license

In this operating mode, the application connects to the Kaspersky Security Network Knowledge Base and updates its databases.

When the key for commercial license expires, the application stops updating its databases and does not connect to the Knowledge Base of Kaspersky Security Network.

To resume the operation of the application, you must replace the key or add a new commercial license key.

In the current version of Kaspersky Anti Targeted Attack Platform, the available functionality of the application also depends on the type of the added license key:

KATA and KEDR keys. Full functionality of the application.
KEDR key. Receiving and processing of data from network traffic and mail traffic is limited.
KATA key. The web interface sections Threat Hunting, Tasks, Prevention, Custom rules, Storage, and Endpoint Agents have limited functionality.