You can configure the integration of Kaspersky Anti Targeted Attack Platform with email sensors . Mail sensor is a server or a virtual machine on which Kaspersky Secure Mail Gateway (KSMG) or Kaspersky Security for Linux Mail Server (KLMS) is installed.
As a result of the integration, applications send copies of email messages for scanning by Kaspersky Anti Targeted Attack Platform and can block individual messages based on the scan results. When a threat is detected, Kaspersky Anti Targeted Attack Platform creates an alert.
If you have configured the integration with KSMG, the alerts contain information about what actions the KSMG application performed with the message. You can find these alerts in the alert table, filtering them by values [[Object ID]] and [[Actions on object]].
If you configured exclusion rules by message recipients and MD5 amounts on the Kaspersky Anti Targeted Attack Platform side, these rules are not applied when processing messages by mail sensors.
Page top