1. Unpack the ZIP archive from the distribution kit.
2. Open the .dmg file from the contents of the unpacked archive.
3. In the window that opens, double-click Install Kaspersky Endpoint Security.

   The Kaspersky Endpoint Security Installation Assistant opens.

4. Click Install.
5. Follow the steps of the Installation Assistant to complete the installation.

When the installation is finished, Kaspersky Endpoint Security starts automatically. You don't have to restart your computer.

1. Unpack the ZIP archive from the distribution kit.
2. Open the .dmg file from the contents of the unpacked archive.
3. In the window that opens, double-click Install Kaspersky Endpoint Security.

   The Kaspersky Endpoint Security Installation Assistant opens.

4. Click Customize, deselect checkboxes next to components that you don't want to install and click Continue.
5. Follow the steps of the Installation Assistant to complete the installation.

When the installation is finished, Kaspersky Endpoint Security starts automatically. You don't have to restart your computer.

1. On your Mac, choose Apple menu > System Preferences, then click Sharing.
2. Select the Remote Management checkbox.
3. On another Mac that you want to be a server, install Apple Remote Desktop. For more information on Apple Remote Desktop, refer to Apple Support.
4. Open Apple Remote Desktop.
5. In the Remote Desktop window, click Scanner on the left and select the devices on which you want to install Kaspersky Endpoint Security.
6. Click Install.
7. In the prompt for administrator credentials, enter an administrator name and password and click Add.
8. Click and select the .dmg file with the Kaspersky Endpoint Security installation package.
9. Click Install.

Installation of Kaspersky Endpoint Security starts on the selected devices.

1. In the Essential Protection window, do the following actions to ensure that File Threat Protection functions properly:
   • If you want Kaspersky Endpoint Security to detect dangerous file activity and processes attempting to run on your Mac, and monitor web traffic and network content, then install the kernel extension. To do this, click Install next to the Kernel extension item and follow the instructions on the screen.
   • If you want Kaspersky Endpoint Security to work properly, allow Kaspersky Endpoint Security to scan every file on your Mac. To do this, click Allow next to the Full disk access item and follow the instructions on the screen.

   Important: Kaspersky Endpoint Security will not work properly without granting these permissions. You must grant all permissions in the Essential Protection window.

2. Click Continue.

The main application window opens.

1. In the Essential Protection window, do the following actions to ensure that File Threat Protection and Web Threat Protection function properly:
   • If you want File Threat Protection to monitor dangerous file activity and processes attempting to run on your Mac, install the system extension. To do this, click Install next to the System extension item and follow the instructions on the screen.
   • If you want Kaspersky Endpoint Security to work properly, allow Kaspersky Endpoint Security to scan every file on your Mac. To do this, click Allow next to the Full disk access item and follow the instructions on the screen.
   • If you want Web Threat Protection to inspect network packets before they can harm your Mac, allow network content filtering. To do this, click Allow next to the Network content filtering item and follow the instructions on the screen.
   • If you want Kaspersky Endpoint Security to search for malware and Internet threats in encrypted HTTPS traffic, allow encrypted web traffic inspection. To do this, click Allow next to the Encrypted web traffic inspection item and follow the instructions on the screen.

   Important: Kaspersky Endpoint Security will not work properly without granting these permissions. You must grant all permissions in the Essential Protection window.

2. Click Continue.

The main application window opens.

In the menu bar, click the application icon and choose Kaspersky Endpoint Security.

In the menu bar, click the application icon.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Interface tab, in the Application icon section, deselect the Show in menu bar checkbox.

Do one of the following:

• In the menu bar, click the application icon and choose Preferences.
• In the menu bar, click Kaspersky Endpoint Security > Preferences.
• If Kaspersky Endpoint Security is running, click the application icon in the Dock and choose Preferences.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Interface tab, in the Notifications section, deselect the Enable notifications checkbox.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Interface tab, in the Reports section, select the Log non-critical events checkbox to receive notifications about informational Kaspersky Endpoint Security events.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Interface tab, in the Notifications section, deselect the Turn on alert sounds on malware detection checkbox.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Advanced tab, click Show KSN Statement.

1. Open the main application window and click .

   The Licensing window opens.

2. In the Licensing window, click Try.
3. In the Activate Trial Version window, click Activate Trial Version.

   Kaspersky Endpoint Security connects to Kaspersky activation servers and sends data for verification. If verification is successful, the application receives and adds a key for the free trial version.

   Click Continue to complete activating the application.

   Important: A trial version of Kaspersky Endpoint Security can be activated only if the application has not been previously activated on the computer.

1. Open the main application window and click .

   The Licensing window opens.

2. In the Licensing window, click Activate.
3. In the window that opens, enter the activation code that you received when purchasing Kaspersky Endpoint Security.
4. Click Activate.

   Note: An activation code is a unique combination of twenty Latin letters and numbers in the form xxxxx-xxxxx-xxxxx-ххххх.

   Kaspersky Endpoint Security connects to Kaspersky activation servers and sends the activation code to verify its authenticity. If the activation code is successfully verified, the application automatically receives and adds the license key.

5. Click Continue to complete activating the application.

   Note: Depending on the activation code that you have received, you may need to fill out a registration form.

If activation code verification fails, a corresponding notification is displayed. In this case, contact the software vendor that supplied you with this activation code.

Open the main application window and click .

The Licensing window opens.

1. Open the main application window and click Open Protection Center.
2. In the Protection Center window, click Renew.

A webpage opens, with information on renewing your license through the Kaspersky online store or Kaspersky partners. When you renew a license via an online store, an activation code for Kaspersky Endpoint Security is sent to the email address specified in the order form after you complete the payment.

1. Open the main application window and click .

   The Licensing window opens.

2. In the Licensing window, click Visit Service Provider Website.

The website of your service provider opens.

1. Open the main application window and click .

   The Licensing window opens.

2. In the Licensing window, click the button.

In the menu bar, click the application icon and choose Kaspersky Endpoint Security.

In the menu bar, click the application icon and choose Quit.

When you quit the application, the application process is removed from computer memory.

1. In the menu bar, click the application icon and choose Turn Protection Off/Turn Protection On.

   When you turn off protection, a prompt for administrator credentials appears.

2. In the prompt for administrator credentials, enter an administrator name and password and confirm that you want to turn off protection.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the General section, deselect/select the Enable protection checkbox.

In the menu bar, click Protection > Turn Protection Off/Turn Protection On.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the <component name> section, deselect the Enable <component name> checkbox.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the <component name> section, select the Enable <component name> checkbox.

Open the main application window and click Open Protection Center.

Click the button with the name of a recommended action to fix the problem or neutralize the threat.

The application performs the selected action.

1. Open the main application window and click .

   The Scan window opens.

2. Click the  Start Full Scan button.

A full scan of the computer starts.

1. Open the main application window and click .

   The Scan window opens.

2. Click the  Start Quick Scan button.

A quick scan of the computer starts.

Do one of the following:

• Right-click a selected item and choose Scan for Viruses.
• Drag a selected item to the application icon in the Dock.
• Drag a selected item onto the Scan window.

1. Open the main application window and click .

   The Scan window opens.

2. Click Schedule Scan.

   A dialog opens where you can set the schedule.

3. Select the Full Scan or Quick Scan checkbox.
4. Specify the scanning frequency and the scan start time.
5. Click OK.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Scan tab, click Schedule.
3. In the window that opens, select the checkbox next to the name of the scan task you want to start on a schedule.
4. Configure the scan task frequency and time.
5. Click OK to save changes made to the scan task schedule.

1. Open the main application window and click .

   The Update window opens.

2. Click Update.

The application checks for updates. If updates are available, the application downloads and installs them on your computer.

You can also start an update task in one of the following ways:

• Click the application icon and choose Update.
• In the menu bar, choose Protection > Update.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Update tab, in the Databases section, select/deselect the Download updates automatically checkbox.

1. In the menu bar, choose Protection > Detected Objects.

   The Detected Objects window opens.

2. In the Detected Objects section, click next to the required file and choose Disinfect.

   The application starts disinfecting the selected object. While disinfection is in progress, the application shows a dialog where you can choose the action to take on the object.

1. In the menu bar, choose Protection > Detected Objects.

   The Detected Objects window opens.

2. In the Detected Objects section, click Disinfect All.

   The application starts disinfecting detected objects. While disinfection is in progress, the application shows a notification window where you can choose the action to take on the object. If you select the Apply to all checkbox in the notification window when choosing an action, the application applies the same action to all files of this type.

1. In the menu bar, choose Protection > Detected Objects.

   The Detected Objects window opens.

2. In the Back up section, click next to the file that you want to restore.

   The pop-up menu opens.

3. Choose Restore File.

   A window for specifying the file name, tag, and folder to which the file will be restored opens. By default, the original file name and location are already specified.

4. Specify the file name and folder to which the file will be restored.
5. Click Save.

The application restores the file to the specified location with the specified name.

You need to scan the file for viruses immediately after restoring it. It is possible that the object can be disinfected using updated databases without becoming corrupted.

Important: We recommend that you not restore backup copies of files unless restoring them is absolutely necessary, because doing so could lead to a computer infection.

In the menu bar, choose Protection > Reports.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Threats tab, in the Objects to detect section, select the checkboxes next to the categories of objects to detect.

   Note: Kaspersky Endpoint Security always protects your computer against viruses, worms, Trojans, malicious tools, adware, and auto-dialers. Accordingly, it is not possible to deselect the checkbox for this category.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Threats tab, in the Exclusions section, click Trusted Zone.

   The Trusted Zone preferences window opens.

3. On the Trusted files and folders tab, edit the list of trusted files and folders:
   • To add a file or folder to the list:
     1. Click .

        A dialog where you can select a file or folder opens.

     2. Select a file or folder that you want to add.
     3. Click Open.
   • To remove a file or folder from the list:
     1. Select a file or folder that you want to remove from the list of trusted files and folders.
     2. Click .
4. Click OK.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Threats tab, in the Exclusions section, click Trusted Zone.

   The Trusted Zone preferences window opens.

3. On the Trusted web addresses tab, edit the list of trusted web addresses:
   • To add a web address to the list:
     1. Click .
     2. Enter the web address that you want to add to the list.
     3. Click OK.
   • To remove a web address from the list:
     1. Select a web address that you want to remove.
     2. Click .
4. Click OK.

By default, the list of trusted web addresses is empty.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Threats tab, in the Exclusions section, click Trusted Zone.

   The Trusted Zone preferences window opens.

3. On the Trusted web addresses tab, deselect the checkbox next to a web address that you want Kaspersky Endpoint Security to monitor.
4. Click OK.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the File Threat Protection section, select/deselect the Enable File Threat Protection checkbox.

   You can also enable File Threat Protection in Protection Center. Disabling computer protection or disabling protection components puts your computer at much higher risk of infection. This is why Protection Center informs you when protection is disabled.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the File Threat Protection section, click Protection Scope.

   A window with a list of objects that File Threat Protection scans opens. By default, File Threat Protection scans all objects located on internal, removable, and network disks connected to your computer.

   Note: On computers running macOS 10.15 or later, you can skip scanning of the read-only system volume to significantly reduce scanning time. By default, File Threat Protection does not scan the read-only system volume.

3. In the Protection scope section, add/remove the objects to/from the protection scope:
   • To add a file or folder to the protection scope:
     1. Click .

        A pop-up menu where you can select objects to add to the protection scope opens.

     2. In the pop-up menu, choose the Files and Folders item.

        A dialog where you can select a file or folder opens.

     3. Select a file or folder that you want to add to the protection scope.
     4. Click Open.
   • To remove a file or folder from the protection scope:
     1. Select an object in the list of protection scope objects.
     2. Drag the selected object from the window or click .
4. If you want to scan the read-only system volume, in the Optimization section, deselect the Skip scanning of read-only system volume checkbox.

   Important: Optimization might be disabled for security reasons.

5. Click Save.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the File Threat Protection section, click Protection Scope.

   A window with a list of objects that File Threat Protection scans opens. By default, File Threat Protection scans all objects located on internal, removable, and network disks connected to your computer.

   Note: On computers running macOS 10.15 or later, you can skip scanning of the read-only system volume to significantly reduce scanning time. By default, File Threat Protection does not scan the read-only system volume.

3. In the Protection scope section, add/remove the objects on the list of default objects to/from the protection scope:
   • To add an object on the list of default objects to the protection scope:
     1. Click .

        A pop-up menu where you can select objects to add to the protection scope opens.

     2. In the pop-up menu, select an object that you want to add to the protection scope (for example, All Internal Disks).
   • To remove an object on the list of default objects from the protection scope:
     1. Select an object in the list of protection scope objects.
     2. Drag the selected object from the window or click .
4. If you want to scan the read-only system volume, in the Optimization section, deselect the Skip scanning of read-only system volume checkbox.

   Important: Optimization might be disabled for security reasons.

5. Click Save.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the File Threat Protection section, click Protection Scope.

   A window with a list of objects that File Threat Protection scans opens. By default, File Threat Protection scans all objects located on internal, removable, and network disks connected to your computer.

   Note: On computers running macOS 10.15 or later, you can skip scanning of the read-only system volume to significantly reduce scanning time. By default, File Threat Protection does not scan the read-only system volume.

3. Deselect the checkbox next to an object in the list of protection scope objects.
4. Click Save.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the File Threat Protection section, click Protection Scope.

   A window with a list of objects that File Threat Protection scans opens. By default, File Threat Protection scans all objects located on internal, removable, and network disks connected to your computer.

   Note: On computers running macOS 10.15 or later, you can skip scanning of the read-only system volume to significantly reduce scanning time. By default, File Threat Protection does not scan the read-only system volume.

3. In the Optimization section, deselect the Skip scanning of read-only system volume checkbox.

   Important: Optimization might be disabled for security reasons.

4. Click Save.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the File Threat Protection section, select the action that File Threat Protection performs after detecting an infected file.

1. In the menu bar, choose Protection > Reports.

   The Reports window opens.

2. Open the File Threat Protection tab.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the Web Threat Protection section, select/deselect the Enable Web Threat Protection checkbox.

You can also enable Web Threat Protection via Protection Center. Disabling computer protection or disabling protection components puts your computer at much higher risk of infection. This is why Protection Center informs you when protection is disabled.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the Web Threat Protection section, select the action that Web Threat Protection performs after detecting a dangerous web traffic object.

1. In the menu bar, choose Protection > Reports.

   The Reports window opens.

2. Open the Web Threat Protection tab.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the Network Threat Protection section, select/deselect the Enable Network Threat Protection checkbox.

You can also enable Network Threat Protection in Protection Center. Disabling computer protection or disabling protection components puts your computer at much higher risk of infection. This is why Protection Center informs you when protection is disabled.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the Network Threat Protection section, select the Enable Network Threat Protection checkbox.
3. Click Preferences.

   A window with a list of trusted computers and a list of blocked computers opens.

4. Open the Blocked computers tab.
5. If you are sure that the blocked computer is not a threat, select the IP address of the computer in the list and click Unblock.

   A confirmation dialog opens.

6. In the confirmation dialog, select one of the following:
   • If you want to unblock the computer, click Unblock.

     Kaspersky Endpoint Security unblocks the IP address.

   • If you want Kaspersky Endpoint Security to never block the selected IP address, click Unblock and Exclude.

     Kaspersky Endpoint Security unblocks the IP address and adds it to the list of trusted computers.

7. Click Save.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Essential tab, in the Network Threat Protection section, select the Enable Network Threat Protection checkbox.
3. Click Preferences.

   A window with a list of trusted computers and a list of blocked computers opens.

4. Open the Trusted computers tab.
5. Edit the list of trusted computers:
   • To add an IP address to the list of trusted computers:
     1. Click .
     2. In the field that appears, enter the IP address of the computer that you trust to be safe.
   • To remove an IP address from the list of trusted computers:
     1. Select an IP address in the list.
     2. Click .
   • To edit an IP address in the list of trusted computers:
     1. Select an IP address in the list.
     2. Click Edit.
     3. Change the IP address.
6. Click Save.

1. In the menu bar, choose Protection > Reports.

   The Reports window opens.

2. Open the Network Threat Protection tab.

1. Open the main application window and click .

   The Scan window opens.

2. In the Scan window, click the Start Full Scan or Start Quick Scan button.

The scan task starts.

1. Open the main application window and click .

   The Scan window opens.

2. To start the Custom Scan task, do one of the following:
   • Drag a file or folder onto the window.
   • Click Choose and open a file or folder.

The scan task starts.

1. Open the main application window and click .

   The Scan window opens.

2. In the Scan window, click Stop next to the scan task that you want to stop.

   A confirmation dialog opens.

3. In the confirmation dialog, click Stop.

The scan task stops.

1. Open the main application window and click .

   The Scan window opens.

2. Click Schedule Scan.

   A dialog opens where you can set the schedule.

3. Select the Full Scan or Quick Scan checkbox.
4. Specify the scanning frequency and the scan start time.
5. Click OK.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Scan tab, click Schedule.
3. In the window that opens, select the checkbox next to the name of the scan task you want to start on a schedule.
4. Configure the scan task frequency and time.
5. Click OK to save changes made to the scan task schedule.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Scan tab, in the list on the left, select the Full Scan or Quick Scan task.
3. In the Optimization section, deselect/select the Skip scanning of read-only system volume checkbox.

   Important: Optimization might be disabled for security reasons.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Scan tab, in the list on the left, select the Quick Scan task.
3. In the Scan scope section, click Edit.

   A window with the list of objects in the Quick Scan task scan scope opens.

4. Edit the list of scan scope objects:
   • To add a file or folder to the Quick Scan task scan scope:
     1. Click .

        A pop-up menu where you can select objects to add to the scan scope appears.

     2. Choose the Files and Folders item.

        A dialog where you can select a file or folder opens.

     3. Select a file or folder that you want to add to the Quick Scan task scan scope.
     4. Click Open.
   • To remove a file or folder from the Quick Scan task scan scope:
     1. Select an object that you want to remove.
     2. Drag the selected object from the window or click .
5. Click Save.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Scan tab, in the list on the left, select the Quick Scan task.
3. In the Scan scope section, click Edit.

   A window with the list of objects in the scan scope opens.

4. Click .

   A pop-up menu where you can select objects to add to the scan scope appears.

5. In the pop-up menu, select an object that you want to add to the scan scope (for example, Memory).
6. Click OK.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Scan tab, in the list on the left, select the Quick Scan task.
3. In the Scan scope section, click Edit.

   A window with the list of scan scope objects opens.

4. Deselect the checkbox next to the object in the list of scan scope objects.
5. Click OK.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Scan tab, select a task in the task list.
3. In the Action section, select the action that Kaspersky Endpoint Security performs after detecting infected files.

1. In the menu bar, choose Protection > Reports.

   The Reports window opens.

2. Open the Scan tab.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Update tab, in the Databases section, select/deselect the Download updates automatically checkbox.

1. Open the main application window and click .

   The Update window opens.

2. Click Update.

The application starts updating databases.

You can also start an update task in one of the following ways:

• Click the application icon and choose Update.
• In the menu bar, choose Protection > Update.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. Select the Update tab.
3. In the Proxy section, select the Use proxy server checkbox and click Preferences.

   A window opens, in which you can configure the proxy server connection preferences.

4. Configure the connection to a proxy server.
5. Click Save to save the changes made to the proxy server connection preferences.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. Select the Update tab.
3. In the Rollback section, click Roll Back Update.

1. In the menu bar, choose Protection > Reports.
2. The Reports window opens.
3. Open the Update tab.

1. In the menu bar, choose Protection > Detected Objects.

   The Detected Objects window opens.

2. In the Back up section, view the list of backed up files.

1. In the menu bar, choose Protection > Detected Objects.

   The Detected Objects window opens.

2. In the Back up section, click next to the file that you want to restore.

   The pop-up menu opens.

3. Choose Restore File.

   A window for specifying the file name, tag, and folder to which the file will be restored opens. By default, the original file name and location are already specified.

4. Specify the file name and folder to which the file will be restored.
5. Click Save.

The application restores the file to the specified location with the specified name.

You need to scan the file for viruses immediately after restoring it. It is possible that the object can be disinfected using updated databases without becoming corrupted.

Important: We recommend that you not restore backup copies of files unless restoring them is absolutely necessary, because doing so could lead to a computer infection.

1. In the menu bar, choose Protection > Detected Objects.

   The Detected Objects window opens.

2. In the Back up section, do the following:
   • To delete all backup copies of files, click Delete All.
   • To delete the selected backup copy, click next to it and choose Delete Backed Up Copy.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Threats tab, in the Backup section, select the Delete backed up objects after <number> days checkbox and specify the period after which files stored in Backup are automatically deleted.

In the menu bar, choose Protection > Reports.

1. In the menu bar, choose Protection > Reports.

   The Reports window opens.

2. In the left pane, select the tab with the desired report.
3. In the upper-right corner, click .
4. In the window that opens, specify the file name, tags, and destination folder for the report.
5. Click Save.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Interface tab, in the Reports section, select the Log non-critical events checkbox to receive notifications about informational Kaspersky Endpoint Security events.

1. Choose Apple menu > System Preferences, then click Security & Privacy.
2. On the FileVault tab, at the bottom of the window, click the lock.
3. In the prompt for administrator credentials, enter the user name and password.
4. Click Enable Users.
5. In the window that opens, select a user to authorize to unlock the computer and click Enable User next to his or her name.
6. In the window that opens, enter the password of the user's computer account and click OK.
7. Click Done.

The user can access the encrypted disk.

1. In the menu bar, click the application icon and choose Preferences.

   The application preferences window opens.

2. On the Advanced tab, in the Improved protection section, click Show KSN Statement to view the Kaspersky Security Network Statement.
3. If you want Kaspersky Endpoint Security to use information about the reputation of files, web resources, and applications received from Kaspersky Security Network and you accept all the terms of the Statement, select the Participate in Kaspersky Security Network checkbox.
4. In the window that opens, click Confirm.

The Participate in Kaspersky Security Network and Enable extended KSN mode checkboxes will be selected.

Note: By default, Kaspersky Endpoint Security uses the Extended KSN mode. Extended KSN mode is a mode in which Kaspersky Endpoint Security sends additional data to Kaspersky. If you do not want to provide these data to Kaspersky, deselect the Enable extended KSN mode checkbox.

If the Participate in Kaspersky Security Network checkbox is selected and the Enable extended KSN mode checkbox is unselected, Kaspersky Endpoint Security provides to Kaspersky the following data:

• Information about the license used: the type and validity period of the license, number of days till license expiration, identifier of the partner from whom the license was purchased, Regional Activation Center identifier, checksum of the activation code, ticket body hash calculated using the SHA1 algorithm, license ticket creation date and time, license information identifier, license ticket identifier, license ticket sequence identifier, unique identifier of the user's computer, date from which the license ticket is valid, date to which the license ticket is valid, license ticket current state, ticket header version, license version, ticket header signature certificate identifier, checksum of the key file, ticket header signer serial number, authentication token.
• Full version of installed Software; type of installed Software; Software update ID; ID of reputation service; protocol type ID; ID of a regional activation center; version of list of revoked Software service's decisions; ID of the triggered record in the Software's anti-virus databases; timestamp of the triggered record in the Software's anti-virus databases; type of the triggered record in the Software's anti-virus databases; unique ID of the instance of application installation on the computer; license activation date; license expiration date; license identifier; status of the license used by the Software; checksum type for the object being processed; name of the detected malware or legitimate software that can be used to damage the user's device or data; checksum of the object being processed; checksum of the Software activation code; full version of the Software; unique device ID; Software ID; checksum of the Software key file; ID of the information model used to provide the Software license; identifier of the certificate used to sign the Software license ticket header; the Software license ticket create date and time; the Software license ticket checksum; the Software license ticket version; the Software activation code version; format of the data in the request to Rightholder infrastructure; current license ticket ID; the Software component ID; the result of the Software action; error code; accessed address of the web service (URL, IP); port number; web address of the source of the web service request (referrer).

If the Participate in Kaspersky Security Network and Enable extended KSN mode checkboxes are selected, Kaspersky Endpoint Security provides to Kaspersky the following data:

• Information about the version of the operating system (OS) and service packs installed on the computer, version and checksums (MD5, SHA2-256, SHA1) of the OS kernel file, parameters of the OS run mode.
• Information about the failed last OS reboot: number of failed reboots.
• Information about the Kaspersky installed application and the anti-virus protection status: unique identifier of the instance of application installation on the computer, application type, ID of application type, the full version of the application installed, the identifier of the application settings version, the identifier of the computer type, the unique identifier of the computer on which the application is installed, the unique User identifier in the Kaspersky services, locale language and operation state, version of the installed Software components and their operation state, version of the protocol used to connect with the Kaspersky services.
• Full version of installed Software; type of installed Software; Software update ID; ID of reputation service; protocol type ID; ID of a regional activation center; version of list of revoked Software service`s decisions; ID of the triggered record in the Software's anti-virus databases; timestamp of the triggered record in the Software's anti-virus databases; type of the triggered record in the Software's anti-virus databases; Unique ID of the instance of application installation on the computer; license activation date; license expiration date; license identifier; status of the license used by the Software; checksum type for the object being processed; name of the detected malware or legitimate software that can be used to damage the user's device or data; checksum of the object being processed; checksum of the Software activation code; full version of the Software; unique device ID; Software ID; checksum of the Software key file; ID of the information model used to provide the Software license; identifier of the certificate used to sign the Software license ticket header; the Software license ticket create date and time; the Software license ticket checksum; the Software license ticket version; the Software activation code version; format of the data in the request to Rightholder infrastructure; current license ticket ID; the Software component ID; the result of the Software action; error code; accessed address of the web service (URL, IP); port number; web address of the source of the web service request (referrer).
• Information about all scanned objects and operations: the name of the scanned object, the date and time of the scan, the URL- and Referrer addresses from which it was downloaded, the size of scanned files and the paths to them, the archive sign, the date and time of the file's creation, the name, size and checksums (MD5, SHA2-256) of the packer (if the file was packed), the file's entropy, the file's type, the file type code, the executable file sign, ID and format, the object's checksum (MD5, SHA2-256), the type and value of the object's supplementary checksum, data about the object's digital signature (certificate): data on the certificate's publisher, number of starts of the object since the last statistics delivery, ID of the application's scanning task, the means of receiving information about the object's reputation, the value of the target filter, technical parameters of the applicable detection technologies.

  For executable files: the entropy of the file sections, reputation verification flag or file signature flag, name, type, ID type, checksum (MD5) and the size of the application that was loaded by the object being validated, the application path and template paths, an attribute indicating presence in the Autorun list, date of entry, the list of attributes, name of the packer, information about the digital signature of the application: the publisher certificate, the name of the uploaded file in the MIME format, file build date and time.

• Information about the applications launched and their modules: checksums (MD5, SHA2-256) of running files, size, attributes, creation date, name of the packer (if the file was packed), names of files, information about processes running on the system (process ID (PID), process name, information about the account the process was started from, the application and command that started the process, the full path to the process's files, and the starting command line, a description of the application that the process belongs to (the name of the application and information about the publisher), as well as the digital certificates being used and information needed to verify their authenticity or information about the absence of a file's digital signature), and information about the modules loaded into the processes: their names, sizes, types, creation dates, attributes, checksums (MD5, SHA2-256, SHA1), the paths to them, PE-file header information, names of packers (if the file was packed), information about the availability and validity of these statistics, identifier of the mode for generating the statistics being sent.
• If threats or vulnerabilities are detected, in addition to information about the detected object, information is provided about the identifier, version, and type of the record in the anti-virus database, the name of the threat based on the Kaspersky classification, the date and time of the last update of the anti-virus database, executable file name, the checksum (MD5) of the application file that requested the URL where the threat was detected, the IP address (IPv4 or IPv6) of the detected threat, the vulnerability identifier and its threat level, the URL and Referrer of the web page where the vulnerability was detected.
• If a potentially malicious object is detected, information is provided about data in the processes' memory.
• Network attack information: IP address of the attacking computer and number of the port on the user's computer targeted by the network attack, ID of the attack protocol, name and type of attack.
• Information about network connections: version and checksums (MD5, SHA2-256, SHA1) of the file from which process was started that opened the port, the path to the process's file and its digital signature, local and remote IP addresses, numbers of local and remote connection ports, connection state, timestamp of the port's opening.
• The URL and IP address of the web page where harmful or suspicious content was detected, the name, size, and checksum of the file that requested the URL, the identifier, weight and degree of the rule used to reach a verdict, the objective of the attack.
• Information about updates of the installed application and anti-virus databases: status of completion of the update task, type of error that may have occurred during the update process, the number of unsuccessful updates, the identifier of the application component that performs updates.
• Information about the use of Kaspersky Security Network (KSN): KSN identifier, application identifier, full version of the application, depersonalized IP address of the user's device, indicators of the quality of fulfillment of KSN requests, indicators of the quality of the processing of KSN packets, indicators of the number of KSN requests and information about the types of KSN requests, date and time when statistics began being sent, date and time when statistics finished being sent, information about KSN configuration updates: identifier of the active configuration, identifier of the configuration received, error code of the configuration update.
• Information about system log events: event time, name of the log where the event has been detected, type and category of event, name of the event source and event description.
• Information to determine the reputation of files and URL-addresses: the URL-address at which the reputation is being requested and the Referrer, the connection's protocol type, the internal identifier of the application type, the number of the port being used, the User identifier, checksum of the scanned file (MD5), type of the detected threat, information about the record used to detect a threat (record identifier for the anti-virus databases, the record timestamp and type).
• Data on the application territorial distribution: date of the application installation and activation, ID of the partner providing the license for the application activation, application ID, application language localization ID, license serial number for the application activation, KSN participation sign.
• Information about the license used: the type and validity period of the license, number of days till license expiration, identifier of the partner from whom the license was purchased, Regional Activation Center identifier, checksum of the activation code, ticket body hash calculated using the SHA1 algorithm, license ticket creation date and time, license information identifier, license ticket identifier, license ticket sequence identifier, unique identifier of the user's computer, date from which the license ticket is valid, date to which the license ticket is valid, license ticket current state, ticket header version, license version, ticket header signature certificate identifier, checksum of the key file, ticket header signer serial number, authentication token.
• Information about hardware installed on the computer: type, name, model name, firmware version, parameters of built-in and connected devices.
• Information about the operation of the Web Control component: component version, categorization reason, additional information about categorization reason, categorized URL, host IP address of blocked/categorized object.

1. On the Kaspersky Security Center administrator's workstation, unpack the archive with the Kaspersky Endpoint Security installation package files.
2. Open the folder with the Kaspersky Endpoint Security installation package files.
3. Double-click klcfginst.exe.

Installation of the Kaspersky Endpoint Security administration plug-in starts.

1. On the remote computer, open the folder with the Network Agent distribution kit.
2. Open the Network Agent distribution kit (.dmg file).

   A window with the contents of the distribution kit opens.

3. In the window with the contents of the distribution kit, double-click Kaspersky Network Agent.
4. Confirm that you want to install Network Agent by clicking Continue.
5. In the Introduction window, click Continue.
6. In the License window, read the text of the Network Agent End User License Agreement between you and AO Kaspersky Lab and do the following:
   • To accept all the terms of the agreement and proceed with the installation, click Continue.
   • To print the text of the agreement, click Print.
   • To save the agreement as a text file, click Save.
7. In the confirmation window, do one of the following:
   • To proceed with the installation of Network Agent, click Agree.
   • To return to the text of the End User License Agreement, click Read License.
   • To cancel the installation, click Disagree.
8. In the Preferences window, do the following:
   1. In the Server field, specify the IP address or DNS name of the server on which Kaspersky Security Center is installed.
   2. In the Port field, specify the port number for an unencrypted connection to the server.
   3. In the SSL Port field, specify the port number for an SSL connection to the server.
   4. If you want to launch Network Agent immediately after installation, select the Run after installation checkbox.

   If you do not want to use SSL to connect to the server, deselect the Use SSL checkbox. To proceed with the installation, click Continue.

9. In the Installation Type window, read the information about the disk on which Network Agent will be installed.

   To install Network Agent using the recommended preferences, click Install and enter the administrator's password to confirm your choice.

   Wait until the Network Agent installer finishes installing the application components.

10. Click Close to quit the installer.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, select the Advanced folder, then Remote installation subfolder, and then the Installation packages subfolder.
4. In the workspace, click Create installation package.
5. In the Select installation package type window, click Create an installation package for a Kaspersky application.
6. In the Defining the installation package name window, type the name of the new installation package in the Name field and click Next.
7. In the Selecting the distribution package for installation window, click Browse.

   The window for selecting a file for creating the installation package opens.

8. Open the folder with the contents of the Network Agent installation package and select the klnagent.kud file.

   The Selecting the distribution package for installation window shows the name and version of the application to be installed remotely using the file that has been added.

9. Click Next.

   The Kaspersky Endpoint Security installation package is created with the specified settings.

10. In the last window of the wizard, click Finish to exit the New Package Wizard.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. Select the Tasks folder.
4. In the workspace, start the New Task Wizard by clicking New task.
5. Follow the steps of the New Task Wizard below to create a task for remote installation of Kaspersky Endpoint Security on the client computer.

1. In the Select the task type window, maximize the Kaspersky Security Center 12 Administration Server node.
2. Select the Install application remotely task.

In the Select installation package window, do one of the following:

• If the Network Agent installation package with the required settings has been created previously, select it in the list of installation packages in the upper part of the Select installation package window.
• If the required installation package has not been created yet, click New to start the New Package Wizard.

In the Settings window, do the following:

1. Select the Using operating system resources through Administration Server checkbox.
2. Deselect all other checkboxes.

In the Move to list of managed devices window, select a group to which computers will be moved after the installation, if necessary.

In the Select devices to which the task will be assigned window, select the method you want to use to specify client computers:

• To select from among computers detected on the network by Administration Server, select the Select networked devices detected by Administration Server option.
• To specify the IP addresses of computers manually or import the IP addresses of computers from a file, select the Specify device addresses manually or import addresses from list option.
• To create a task for a selection of devices based on a preset criterion, select the Assign task to a device selection option.
• To select computers from a specific administration group, select the Assign task to an administration group option.

In the window that opens (Select devices, Device selection, or Select Administration group, depending on the option you selected in the previous step), select the client computers, specify the IP addresses of computers, specify a computer selection, or select the administration group to which the task will be applied.

1. In the Selecting an account to run the task window, select the Account required (Network Agent is not used) checkbox.
2. Click Add > Account.

   The Account window opens.

3. Enter the login and password of the dedicated administrator account of a remote computer.
4. Click OK.

1. In the Configure task schedule window, select the start mode in the Scheduled start drop-down list.
2. If necessary, configure a scheduled task to start automatically (by specifying the task start date and time).
3. If you want to run tasks that the application was unable to start according to schedule (for example, because the computer was turned off at the scheduled time), select the Run missed tasks checkbox.

   Kaspersky Endpoint Security starts the task as soon as the obstacle preventing the task from being started is eliminated.

In the Define the task name window, in the Name field, enter the name of the task you are creating.

In the Finish task creation window, do the following:

1. If you want the task to start as soon as the wizard is finished, select the Run the task after the Wizard finishes checkbox.
2. Click Finish to close the wizard.

1. Start the SSH client on the administrator's workstation.
2. Connect to the remote computer.
3. Connect the shared folder of Administration Server as a network drive on the remote computer. To do this, enter the following commands in the SSH client:

   mkdir /Volumes/KLSHARE

   mount_smbfs //<administrator account>:<password>@<Administration Server IP address>/KLSHARE /Volumes/KLSHARE

   Parameter descriptions:

   • <administrator account> – Name of the administrator account on Administration Server.
   • <password> – Password of the administrator on Administration Server.
   • <Administration Server IP address> – IP address of the server hosting Kaspersky Security Center.
4. Run the installation script. To do this, enter the following command in the SSH client:

   cd /Volumes/KLSHARE/<klnagent_package_folder>

   where <klnagent_package_folder> is the folder, in which the Network Agent installation package is located.

   sudo ./install.sh -r <server> [-s <action>] [-p <port number>] [-l <SSL port number>]

   Parameter descriptions:

   • <action> – Parameter that defines whether encryption will be used when establishing the connection between Network Agent and Administration Server. If the value is "0", an unencrypted connection is used. If the value is "1", the connection is established via the SSL protocol (default value).
   • <server> – IP address or DNS name of the server on which Kaspersky Security Center is installed.
   • <port number> – Number of the port that will be used to establish an unencrypted connection to Administration Server. Port 14000 is used by default.
   • <SSL port number> – Number of the port that will be used to establish an encrypted connection to Administration Server using the SSL protocol. Port 13000 is used by default.

   Important: Administrator rights are required for executing this command.

5. Disconnect the network drive on the remote computer. To do this, enter the following command in the SSH client:

   umount /Volumes/KLSHARE

6. Check if Network Agent functions properly on the remote computer. To do this, enter the following commands in the SSH client:

   cd /Library/Application\ Support/Kaspersky\ Lab/klnagent/Binaries/

   sudo ./klnagchk

   If the check is successful, Network Agent functions properly.

On the remote computer, launch the launchctl utility with the unload command from the command line.

Command syntax:

sudo launchctl unload /Library/LaunchDaemons/com.kaspersky.klnagent.plist

On the remote computer, launch the launchctl utility with the load command from the command line.

Command syntax:

sudo launchctl load /Library/LaunchDaemons/com.kaspersky.klnagent.plist

On the remote computer, run the klnagchk utility from the command line.

The klnagchk utility is included in the Network Agent distribution kit.

On the remote computer, run the klmover utility from the command line.

The klmover utility is included in the Network Agent installation package.

1. Start the SSH client on the Kaspersky Security Center administrator's workstation.
2. Connect to the remote computer.
3. Connect the shared folder of Administration Server as a network drive on the remote computer. To do this, enter the following commands in the SSH client:

   mkdir /Volumes/KLSHARE

   mount_smbfs //<administrator account>:<password>@<Administration Server IP address>/KLSHARE /Volumes/KLSHARE

   Parameter descriptions:

   • <administrator account> – Name of the administrator account on Administration Server.
   • <password> – Password of the administrator on Administration Server.
   • <Administration Server IP address> – IP address of the server hosting Kaspersky Security Center.
4. Run the installation script. To do this, enter the following commands in the SSH client:

   cd /Volumes/KLSHARE/<KES package folder>

   sudo ./install.sh

   where <KES package folder> is the folder, in which the Kaspersky Endpoint Security installation package is located.

   Important: Administrator rights are required for executing this command.

5. Disconnect the network drive on the remote computer. To do this, enter the following command in the SSH client:

   umount /Volumes/KLSHARE

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. Select the Tasks folder.
4. In the workspace, start the New Task Wizard by clicking New task.
5. Follow the steps of the New Task Wizard below to create a task for remote installation of Kaspersky Endpoint Security on the client computer.

1. In the Select the task type window, maximize the Kaspersky Security Center 12 Administration Server node.
2. Select the Install application remotely task.

In the Select installation package window, do one of the following:

• If the Kaspersky Endpoint Security installation package with the required settings has been created previously, select it in the list of installation packages in the upper part of the Select installation package window.
• If the required installation package has not been created yet, click New to start the New Package Wizard.

In the Advanced window, select the Install Network Agent together with this application and <Network Agent installation package name> checkboxes if you want to install Network Agent on the client computer also.

Note: The installation package for Network Agent must be created beforehand. If it has not been created, click Create to start the New Package Wizard.

In the Settings window, configure the remote installation of the application.

In the Move to list of managed devices window, select a group to which computers will be moved after the installation, if necessary.

Note: The Move to list of managed devices window appears if you select installation of Network Agent in step 3.

In the Select devices to which the task will be assigned window, select the method you want to use to specify client computers:

• To select from among computers detected on the network by Administration Server, select the Select networked devices detected by Administration Server option.
• To specify the IP addresses of computers manually or import the IP addresses of computers from a file, select the Specify device addresses manually or import addresses from list option.
• To create a task for a selection of devices based on a preset criterion, select the Assign task to a device selection option.
• To select computers from a specific administration group, select the Assign task to an administration group option.

In the window that opens (Select devices, Device selection, or Select Administration group, depending on the option you selected in the previous step), select the client computers, specify the IP addresses of computers, specify a computer selection, or select the administration group to which the task will be applied.

In the Selecting an account to run the task window, select the No account required (Network Agent installed) checkbox.

It is assumed that you have installed Network Agent before starting this wizard.

1. In the Configure task schedule window, select the start mode in the Scheduled start drop-down list.
2. If necessary, configure a scheduled task to start automatically (by specifying the task start date and time).
3. If you want to run tasks that the application was unable to start according to schedule (for example, because the computer was turned off at the scheduled time), select the Run missed tasks checkbox.

   Kaspersky Endpoint Security starts the task as soon as the obstacle preventing the task from being started is eliminated.

In the Define the task name window, in the Name field, enter the name of the task you are creating.

In the Finish task creation window, do the following:

1. If you want the task to start as soon as the wizard is finished, select the Run the task after the Wizard finishes checkbox.
2. Click Finish to close the wizard.

The task that you have created appears in the workspace of the Tasks folder.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, select the Advanced folder, then Remote installation subfolder, and then the Installation packages subfolder.
4. In the workspace, click Create installation package.
5. In the Select installation package type window, click Create an installation package for a Kaspersky application.
6. In the Defining the installation package name window, type the name of the new installation package in the Name field and click Next.
7. In the Selecting the distribution package for installation window, click Browse.

   The window for selecting a file for creating the installation package opens.

8. Open the folder with the contents of the Kaspersky Endpoint Security installation package and select the kesmac.kud file.

   The Selecting the distribution package for installation window shows the name and version of the application to be installed remotely using the file that has been added.

9. Select the Copy updates from repository to installation package checkbox to copy application updates from the Kaspersky Security Center storage to the installation package, if necessary, and click Next.

   The installation package starts uploading to Administration Server. When the upload is finished, the Installation Type window opens.

10. In the Installation Type window, in the Packages to install section, deselect the checkboxes next to the names of the components that you want to skip during installation on the client computer, and click Next.

    The Kaspersky Endpoint Security installation package is created with the specified settings.

11. In the last window of the wizard, click Finish to complete the New Package Wizard.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. Select the Tasks folder.
4. In the workspace, start the New Task Wizard by clicking New task.
5. Follow the steps of the New Task Wizard below to create a task for remote uninstallation of Kaspersky Endpoint Security from the client computer.

1. In the Select the task type window, maximize the Kaspersky Security Center 12 Administration Server node.
2. Expand the Advanced child node.
3. Select the Uninstall application remotely task.

In the Select application to be uninstalled window, select Uninstall application supported by Kaspersky Security Center 12.

In the Settings window, do the following:

1. In the Application to be uninstalled drop-down list, select Kaspersky Endpoint Security for Mac (11.1).
2. Click Next.
3. Configure remote uninstallation of the application.

In the Selecting an operating system restart option window, select the Do not restart the device option.

In the Select devices to which the task will be assigned window, select the method you want to use to specify client computers:

• To select from among computers detected on the network by Administration Server, select the Select networked devices detected by Administration Server option.
• To specify the IP addresses of computers manually or import the IP addresses of computers from a file, select the Specify device addresses manually or import addresses from list option.
• To create a task for a selection of devices based on a preset criterion, select the Assign task to a device selection option.
• To select computers from a specific administration group, select the Assign task to an administration group option.

In the window that opens (Select devices, Device selection, or Select Administration group, depending on the option you selected in the previous step), select the client computers, specify the IP addresses of computers, specify a computer selection, or select the administration group to which the task will be applied.

In the Selecting an account to run the task window, select the No account required (Network Agent installed) checkbox.

It is assumed that you have installed Network Agent before starting this wizard.

1. In the Configure task schedule window, select the start mode in the Scheduled start drop-down list.
2. If necessary, configure a scheduled task to start automatically (by specifying the task start date and time).
3. If you want to run tasks that the application was unable to start according to schedule (for example, because the computer was turned off at the scheduled time), select the Run missed tasks checkbox.

   Kaspersky Endpoint Security starts the task as soon as the obstacle preventing the task from being started is eliminated.

In the Define the task name window, in the Name field, enter the name of the task you are creating.

In the Finish task creation window, do the following:

1. If you want the task to start as soon as the wizard is finished, select the Run the task after the Wizard finishes checkbox.
2. Click Finish to close the wizard.

The task that you have created appears in the workspace of the Tasks folder.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Managed devices.
4. Select the administration group that contains the required client computer.
5. Select the Devices tab.
6. Select a computer from the list of client computers.
7. Open the Properties: <Computer name> window in one of the following ways:
   • Double-click the name of the client computer.
   • Right-click the client computer and choose Properties from the context menu.
8. Select the Applications section.
9. In the Kaspersky applications installed on the device list, right-click to open the context menu of the Kaspersky Endpoint Security for Mac (11.1) item and do one of the following:
   • To start the application, select the Start item.
   • To stop the application, select the Stop item.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Managed devices.
4. Select the administration group that contains the required client computer.
5. In the workspace, select the Devices tab.
6. Select the computer from the list of client computers.
7. Open the Properties: <Computer name> window in one of the following ways:
   • Double-click the name of the client computer.
   • Right-click the client computer and choose Properties from the context menu.
8. In the Properties: <Computer name> window, select the Tasks section.

   The list of system tasks and custom tasks for the selected client computer is displayed in the workspace on the right.

9. Click Add in the lower part of the workspace.

   The New Task Wizard starts.

10. Follow the steps of the New Task Wizard to create a local task for a separate client computer.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Managed devices.
4. Select the administration group that contains the required client computer.
5. In the workspace, select the Tasks tab.
6. In the workspace, click New task to start the New Task Wizard.
7. Follow the steps of the New Task Wizard to create a task for client computers included in the administration group.

For detailed information on how to create group tasks, see the Kaspersky Security Center help.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Tasks.
4. In the workspace, click New task to start the New Task Wizard.
5. Follow the steps of the New Task Wizard to create a task for an arbitrary set of computers.

1. In the Select the task type window, maximize the Kaspersky Endpoint Security for Mac (11.1) node.
2. Select the type of the task you want to create:
   • To create a task for adding a key, select Add key.
   • To create a task to roll back the latest update, select Rollback.
   • To create a virus scan task, select Scan.
   • To create an update task, select Update.

Depending on the task type selected during the previous step, the contents of the settings window may vary. This window is not displayed for the Rollback task.

Application activation

In the Application activation window, do the following:

1. Select an activation code or key from Kaspersky Security Center storage or add a key file stored on your computer.
2. If you want to add the specified key as a reserve key, select the Add as reserve key checkbox.

   The reserve key becomes active when the current active key expires.

Information about the specified key (key, key type, and key expiration date) is displayed in the Application activation window.

Update

Dedicated Kaspersky update servers are the main source of updates for Kaspersky Endpoint Security. Kaspersky Endpoint Security can also use distribution points, local folders, or other web servers as an update source.

You can put downloaded updates in a local folder to update application databases and Kaspersky Endpoint Security modules on other computers on the corporate network in order to reduce the amount of Internet traffic.

You can set up update distribution as follows:

1. One of the computers on the network receives the Kaspersky Endpoint Security update package from Kaspersky update servers or a different update source. The retrieved updates are placed in a shared local folder.

   Note: The shared local folder must be created in advance.

2. Other computers on the network refer to the shared local folder as the update source.

   

   Distribution of updates via a local computer

If necessary, edit the Update task settings in the Update window:

1. To disable updates of application modules, deselect the Update application modules checkbox.
2. To change the update sources:
   1. Click Settings.

      The Settings: Update window opens.

   2. Select the checkboxes next to the update sources that you want to use.
3. To specify a different update source, click Add.

   The Update source window opens.

   1. Specify the web address of the update source or the path to a local or network folder that is an update source and click OK.
   2. Click OK to save changes and close the Settings: Update window.

Scan

By default, Kaspersky Endpoint Security uses the Recommended security level, prompts the user for an action when it detects an infected object after the scan, and scans the following objects:

• All removable drives
• All internal drives
• All network drives
• Memory

If necessary, edit the Scan settings in the Scan window:

1. Select one of the preset security levels or customize security settings.
2. Specify the action that Kaspersky Endpoint Security performs upon detecting an infected object.
3. Define a scan scope.

Note: This step is not relevant for local or group tasks.

In the Select devices to which the task will be assigned window, select the method you want to use to specify client computers:

• To select from among computers detected on the network by Administration Server, select the Select networked devices detected by Administration Server option.
• To specify the IP addresses of computers manually or import the IP addresses of computers from a file, select the Specify device addresses manually or import addresses from list option.
• To create a task for a selection of devices based on a preset criterion, select the Assign task to a device selection option.
• To select computers from a specific administration group, select the Assign task to an administration group option.

Note: This step is not relevant for local or group tasks.

In the window that opens (Select devices, Device selection, or Select Administration group, depending on the option you selected in the previous step), select the client computers, specify the IP addresses of computers, specify a computer selection, or select the administration group to which the task will be applied.

1. In the Configure task schedule window, select the start mode in the Scheduled start drop-down list.
2. If necessary, configure a scheduled task to start automatically (by specifying the task start date and time).
3. If you want to run tasks that the application was unable to start according to schedule (for example, because the computer was turned off at the scheduled time), select the Run missed tasks checkbox.

   Kaspersky Endpoint Security starts the task as soon as the obstacle preventing the task from being started is eliminated.

4. If you want Kaspersky Security Center to automatically determine the interval between task launches on different computers, select the Use automatically randomized delay for task starts checkbox.

   This helps to reduce the load on Kaspersky Security Center Administration Server.

5. To set the interval between task launches on different computers manually, select the Use randomized delay for task starts within an interval of (min) checkbox and specify the number of minutes.

   This helps to reduce the load on Kaspersky Security Center Administration Server.

In the Define the task name window, in the Name field, enter the name of the task you are creating.

In the Finish task creation window, do the following:

1. If you want the task to start as soon as the wizard is finished, select the Run the task after the Wizard finishes checkbox.
2. Click Finish to close the wizard.

1. Open the list of tasks that contains the task that you want to start or stop.
2. Select the task that you want to start or stop.
3. Start or stop the task in one of the following ways:
   • Right-click to display the context menu of the task and choose Start or Stop.
   • In the workspace, click Start or Stop.
   • Right-click to display the context menu of the task and choose Properties. In the window that opens, click Start or Stop.

1. Select the task list from which you want to export the task:
   • Select the administration group and then open the Tasks tab.
   • In the console tree, click Tasks.
2. Right-click the task you want to export and, in the task's shortcut menu, choose All Tasks > Export.
3. In the Save As window, specify the file name and location where the exported task will be saved.
4. Click Save.

1. Select the task list to which you want to import the task:
   • Select the administration group and then open the Tasks tab.
   • In the console tree, click Tasks.
2. Import the task in any of the following ways:
   • In the task list's shortcut menu, select All Tasks > Import.
   • Click Import task from file.
3. In the Open window, specify the path to the task file you want to import.
4. Click Open.

The task is displayed in the task list.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Managed devices.
4. Select the administration group that contains the required client computer.
5. In the workspace, select the Tasks tab.

The list of tasks for computers in the selected administration group is displayed.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Managed devices.
4. Select the administration group that contains the required client computer.
5. In the workspace, select the Devices tab.
6. Select the computer from the list of client computers.
7. Open the Properties: <Computer name> window in one of the following ways:
   • Double-click the name of the client computer.
   • Right-click the client computer and choose Properties from the context menu.
8. In the Properties: <Computer name> window, select the Tasks section.

The list of system tasks and custom tasks for the selected client computer is displayed in the workspace on the right.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Tasks.

The list of non-local tasks created for computers that may or may not be part of administration groups is displayed.

1. Open the list of local tasks.
2. Select a task in the list and open the task settings in one of the following ways:
   • Double-click the task name.
   • Right-click to display the task's shortcut menu and select Properties.

1. Open the list of group tasks for an administration group.
2. Select a task in the list and open the task settings in one of the following ways:
   • Double-click the task name.
   • Right-click to display the task's shortcut menu and select Properties.
   • Click the Configure task link in the workspace.

1. Open the list of non-local tasks.
2. Select a task in the list and open the task settings in one of the following ways:
   • Double-click the task name.
   • Right-click to display the task's shortcut menu and select Properties.
   • Click the Configure task link in the workspace.

For more information about tasks, see the Kaspersky Security Center help.

1. Open the window with the Add key task settings.
2. Select the Application activation section.
3. If necessary, add another key in one of the following ways:
   • To select a key or an activation code from among the activation codes added to the Kaspersky Security Center storage:
     1. Select the Key or activation code option.
     2. Click Browse.

        The Keys and activation codes in Kaspersky Security Center storage window opens.

     3. Select a key or activation code.
     4. Click OK.
   • To add a key file:
     1. Select the Key file option.
     2. Click Add.

        The file selection window opens.

     3. Select a key file.
     4. Click Open.

   Note: The current key is deleted when a different key is added.

4. To add the specified key as a reserve key, select the Add as reserve key checkbox.

   The reserve key becomes active when the current key expires.

   Note: The reserve key expiration date must be later than the current key expiration date.

5. Save the changes in one of the following ways:
   • Click Apply to remain in the Properties: <Task name> window after saving changes.
   • Click OK to close the Properties: <Task name> window after saving changes.

1. Open the window with the Scan task settings.
2. Select the Scan section.
3. To change the level of security at which Kaspersky Endpoint Security runs the Scan task, do one of the following in the Security level section:
   • Select a preset security level by moving the slider up or down the scale.

     You can select one of the following security levels:

     • Maximum protection. Kaspersky Endpoint Security performs the maximum monitoring of files that are opened, saved, or executed.
     • Recommended. Kaspersky Endpoint Security monitors files with the settings recommended by Kaspersky.

       This is the default security level.

     • Maximum speed. Kaspersky Endpoint Security monitors a minimum set of files. You can choose this security level if you want to use other applications that require significant memory resources.
   • Configure security settings manually:
     1. Click Settings.

        The Settings: Scan window opens.

     2. On the General tab, in the File types section, select the types of files that should be scanned by Kaspersky Endpoint Security when running the Scan task.
     3. On the General tab, in the Optimization section, configure scan performance settings.
     4. On the General tab in the Compound files section, select which compound files you want Kaspersky Endpoint Security to analyze for detectable objects.
     5. On the Advanced tab, in the Advanced settings section, configure the use of iSwift technology and recording of information about detected objects in the application statistics.
     6. On the Advanced tab, in the Heuristic Analyzer section, configure the use of Heuristic Analyzer and select the protection level to be applied by Heuristic Analyzer during virus scans.
     7. Click OK to save changes and close the Settings: Scan window.

        The security level changes to Custom.

   • To restore the default settings, click Default.

     The security level changes to Recommended.

4. If necessary, in the Action section, select the action that Kaspersky Endpoint Security should perform when an infected object is detected.
5. To specify a scan scope, in the Scan scope section, click Settings and do the following in the Scan scope window that opens:
   1. If you want Kaspersky Endpoint Security to scan all removable drives, select the All removable drives checkbox.
   2. If you want Kaspersky Endpoint Security to scan all internal drives, select the All internal drives checkbox.
   3. If you want Kaspersky Endpoint Security to scan all network drives, select the All network drives checkbox.
   4. If you want Kaspersky Endpoint Security to scan the computer memory, select the Memory checkbox.
   5. If you want Kaspersky Endpoint Security to scan other files or folders, click Add and specify a file, folder, or mask for file or folder names.
   6. Click OK to save changes and close the Scan scope window.
6. Save the changes in one of the following ways:
   • Click Apply to remain in the Properties: <Task name> window after saving changes.
   • Click OK to close the Properties: <Task name> window after saving changes.

1. Open the window with the Update task settings.
2. Select the Update section.
3. If you want Kaspersky Endpoint Security to update application modules along with application databases, select the Update application modules checkbox.
4. To choose an update source:
   1. Click Settings.

      The Settings: Update window opens.

   2. Specify the update source in one of the following ways:
      • If you want the application to download updates from Administration Server, select the Kaspersky Security Center checkbox.
      • If you want the application to download updates from Kaspersky update servers, select the Kaspersky update servers checkbox.
      • To add a different update source, click Add and, in the window that opens, enter the path to the update source.

        By default, Kaspersky Endpoint Security downloads updates from Kaspersky update servers.

   3. Click OK to save changes and close the Settings: Update window.
5. Save the changes in one of the following ways:
   • Click Apply to remain in the Properties: <Task name> window after saving changes.
   • Click OK to close the Properties: <Task name> window after saving changes.

1. Open the list of local tasks for a client computer.
2. In the list of local tasks, select the File Threat Protection task and open its properties in one of the following ways:
   • Double-click the task name.
   • Right-click to display the task's shortcut menu and select Properties.
   • Click Properties.
3. Select the File Threat Protection section.
4. If necessary, configure the following settings:
   • Enable or disable File Threat Protection on the client computer.
   • To select one of the preset security levels, use the slider in the Security level section.
   • To configure the security settings manually, click Settings and in the Settings: File Threat Protection window that opens, do the following:
     1. On the General tab, in the File types section, select the types of files that Kaspersky Endpoint Security should scan when they are opened, executed, or saved.
     2. On the General tab, in the Optimization section, configure scan performance settings and select the scan technology, and select whether Kaspersky Endpoint Security will skip scanning of the read-only system volume on client computers running macOS 10.15 or later.
     3. On the General tab, in the Compound files section, select which compound files should be scanned for detectable objects and set a restriction on scanning large objects.
     4. On the Protection scope tab, specify files or folders that should be scanned by File Threat Protection.

        By default, all objects located on removable, internal, and network drives connected to the client computer are scanned. You can add an object to the protection scope, modify an object on the list, temporarily disable scanning of an object on the list, or remove an object from the list.

     5. On the Advanced tab, in the Scan mode section, select the File Threat Protection mode.
     6. On the Advanced tab, in the Pause task section, enable or disable scheduled pausing of File Threat Protection and configure automatic pausing of tasks according to a schedule.
     7. On the Advanced tab, in the Heuristic Analyzer section, configure the use of Heuristic Analyzer by File Threat Protection.
     8. Click OK to save changes and close the Settings: File Threat Protection window.
   • In the If a malicious object is detected section, select the action that File Threat Protection performs upon detecting an infected object.
5. Save the changes in one of the following ways:
   • Click Apply to remain in the Properties: File Threat Protection window after saving changes.
   • Click OK to close the Properties: File Threat Protection window after saving changes.

1. Open the list of local tasks for a client computer.
2. In the list of local tasks, select the Web Threat Protection task and open its properties in one of the following ways:
   • Double-click the task name.
   • Right-click to display the task's shortcut menu and select Properties.
   • Click Properties.
3. Select the Web Threat Protection section.
4. If necessary, configure the following settings:
   • Enable or disable Web Threat Protection on the client computer.
   • To select one of the preset security levels, use the slider in the Security level section.
   • To configure the security settings manually, click Settings and in the Settings: Web Threat Protection window that opens, do the following:
     1. On the General tab, in the Scan mode section, enable or disable checking of web addresses against the database of malicious web addresses.
     2. On the General tab, in the Anti-Phishing settings section, enable or disable checking of web addresses against the database of phishing web addresses.
     3. On the General tab, in the Anti-Phishing settings section, enable or disable the use of Heuristic Analyzer for detecting phishing links.
     4. On the Trusted web addresses tab, enable or disable scanning of web traffic from trusted web addresses and create or edit a list of trusted web addresses.
     5. Click OK to save changes and close the Settings: Web Threat Protection window.
5. In the If a malicious object is detected section, select the action that Web Threat Protection performs upon detecting a dangerous object in web traffic.
6. Save the changes in one of the following ways:
   • Click Apply to remain in the Properties: Web Threat Protection window after saving changes.
   • Click OK to close the Properties: Web Threat Protection window after saving changes.

1. Open the list of local tasks for a client computer.
2. In the list of local tasks, select the Quick Scan task and open its properties in one of the following ways:
   • Double-click the task name.
   • Right-click to display the task's shortcut menu and select Properties.
   • Click Properties.
3. Select the Scan section.
4. If necessary, configure the following settings:
   • To select one of the preset security levels, use the slider in the Security level section.
   • To configure the security settings manually, click Settings and in the Settings: Scan window that opens, do the following:
     1. On the General tab, in the File types section, select the types of files that should be scanned by Kaspersky Endpoint Security.
     2. On the General tab, in the Optimization section, configure scan performance settings.
     3. On the General tab, in the Compound files section, select which compound files you want Kaspersky Endpoint Security to scan.
     4. On the Advanced tab, in the Advanced settings section, configure the use of iSwift technology and the saving of information about detected objects in the application statistics.
     5. On the Advanced tab, in the Heuristic Analyzer section, configure the use of Heuristic Analyzer and select the protection level to be applied by Heuristic Analyzer.
     6. Click OK to save changes and close the Settings: Scan window.
   • In the Action section, select the action that Kaspersky Endpoint Security should perform upon detecting an infected object.
   • To specify a scan scope, in the Scan scope section, click Settings and do the following in the Scan scope window that opens:
     • If you want Kaspersky Endpoint Security to scan objects in the default list, select the checkbox next to the relevant object.
     • If you want Kaspersky Endpoint Security to scan other files or folders, click Add and specify a file, folder, or mask for file or folder names.
     • Click OK to save changes and close the Scan scope window.
5. Save the changes in one of the following ways:
   • Click Apply to remain in the Properties: Quick Scan window after saving changes.
   • Click OK to close the Properties: Quick Scan window after saving changes.

1. Open the list of local tasks for a client computer.
2. In the list of local tasks, select the Full Scan task and open its properties in one of the following ways:
   • Double-click the task name.
   • Right-click to display the task's shortcut menu and select Properties.
   • Click Properties.
3. Select the Scan section.
4. If necessary, configure the following settings:
   • To select one of the preset security levels, use the slider in the Security level section.
   • To configure the security settings manually, click Settings and in the Settings: Scan window that opens, do the following:
     1. On the General tab, in the File types section, select the types of files that should be scanned by Kaspersky Endpoint Security.
     2. On the General tab, in the Optimization section, configure scan performance settings.
     3. On the General tab, in the Compound files section, select which compound files you want Kaspersky Endpoint Security to scan.
     4. On the Advanced tab, in the Advanced settings section, configure the use of iSwift technology and the saving of information about detected objects in the application statistics.
     5. On the Advanced tab, in the Heuristic Analyzer section, configure the use of Heuristic Analyzer and select the protection level to be applied by Heuristic Analyzer.
     6. Click OK to save changes and close the Settings: Scan window.
   • In the Action section, select the action that Kaspersky Endpoint Security should perform upon detecting an infected object.
   • To specify a scan scope, in the Scan scope section, click Settings and do the following in the Scan scope window that opens:
     • If you want Kaspersky Endpoint Security to scan objects in the default list, select the checkbox next to the relevant object.
     • If you want Kaspersky Endpoint Security to scan other files or folders, click Add and specify a file, folder, or mask for file or folder names.
     • Click OK to save changes and close the Scan scope window.
5. Save the changes in one of the following ways:
   • Click Apply to remain in the Properties: Full Scan window after saving changes.
   • Click OK to close the Properties: Full Scan window after saving changes.

1. Open the list of local tasks for a client computer.
2. In the list of local tasks, select the Custom Scan task and open its properties in one of the following ways:
   • Double-click the task name.
   • Right-click to display the task's shortcut menu and select Properties.
   • Click Properties.
3. Select the Scan section.
4. If necessary, configure the following settings:
   • To select one of the preset security levels, use the slider in the Security level section.
   • To configure the security settings manually, click Settings and in the Settings: Scan window that opens, do the following:
     1. On the General tab, in the File types section, select the types of files that should be scanned by Kaspersky Endpoint Security.
     2. On the General tab, in the Optimization section, configure scan performance settings.
     3. On the General tab, in the Compound files section, select which compound files you want Kaspersky Endpoint Security to scan.
     4. On the Advanced tab, in the Advanced settings section, configure the use of iSwift technology and the saving of information about detected objects in the application statistics.
     5. On the Advanced tab, in the Heuristic Analyzer section, configure the use of Heuristic Analyzer and select the protection level to be applied by Heuristic Analyzer.
     6. Click OK to save changes and close the Settings: Scan window.
   • In the Action section, select the action that Kaspersky Endpoint Security should perform upon detecting an infected object.
   • To specify a scan scope, in the Scan scope section, click Settings and do the following in the Scan scope window that opens:
     • Click Add and specify a file, folder, or name mask of a file or folder.
     • Click OK to save changes and close the Scan scope window.
5. Save the changes in one of the following ways:
   • Click Apply to remain in the Properties: Custom Scan window after saving changes.
   • Click OK to close the Properties: Custom Scan window after saving changes.

1. Open the list of local tasks for a client computer.
2. In the list of local tasks, select the Network Threat Protection task and open its properties in one of the following ways:
   • Double-click the task name.
   • Right-click to display the task's shortcut menu and select Properties.
   • Click Properties.
3. Select the Network Threat Protection section.
4. If necessary, configure the following settings:
   • Enable or disable Network Threat Protection on the client computer.
   • In the Network Threat Protection settings section, select or deselect the Block attacking computers for <value> min checkbox and specify the value.
   • You can also specify the IP addresses of computers whose network activity will not be blocked. To do this, perform the following steps:
     1. Click Exclusions.

        The Exclusions window opens.

     2. Click Add.

        The IP address window opens.

     3. Specify the IP address of the computer whose network activity will not be blocked and click OK.
     4. Click OK to save changes and close the Exclusions window.
5. Save the changes in one of the following ways:
   • Click Apply to remain in the Properties: Network Threat Protection window after saving changes.
   • Click OK to close the Properties: Network Threat Protection window after saving changes.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Managed devices.
4. Select the administration group that contains the required client computer.
5. In the workspace, select the Policies tab and click New policy.

   The New Policy Wizard opens.

6. Follow the steps of the New Policy Wizard to create a policy.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Policies.
4. In the workspace, click New policy.

   The New Policy Wizard opens.

5. Follow the steps of the New Policy Wizard to create a policy.

In the Select the application for which you want to create a group policy window, in the list of applications, select Kaspersky Endpoint Security for Mac (11.1).

1. In the Enter a group policy name window, in the Name field, specify the name of the policy that you are creating. The name can't contain the following symbols: “ * < : > ? \ |.
2. Select the Use policy settings for an earlier version of the application checkbox if you want to import the settings from an existing Kaspersky Endpoint Security policy to a new policy.

In the Protection window, configure the following settings if necessary:

• Configure protection settings for the operating system on the client computer.
• Configure Trusted zone.

  You can create a list of objects that Kaspersky Endpoint Security does not scan or monitor.

• Configure Trusted applications.

  You can create a list of applications whose network activity will not be monitored by Kaspersky Endpoint Security.

• Select types of objects to be detected.
• Disable or enable the start of scheduled tasks when the computer is running on battery power.

In the File Threat Protection window, do the following if necessary:

• Enable or disable File Threat Protection.

  By default, File Threat Protection is enabled.

• Select a security level.

  By default, the security level recommended by Kaspersky is selected.

• Configure File Threat Protection settings.
• Select the action to be performed upon detecting a malicious object.

In the Web Threat Protection window, do the following if necessary:

• Enable or disable Web Threat Protection.

  By default, Web Threat Protection is enabled.

• Select a security level.

  By default, the security level recommended by Kaspersky is selected.

• Configure Web Threat Protection settings.
• Select the action to be performed upon detecting a malicious object in web traffic.

In the Network Threat Protection window, do the following if necessary:

• Enable or disable Network Threat Protection.

  By default, Network Threat Protection is enabled.

• Configure Network Threat Protection settings.
• Create or edit a list of IP addresses of remote computers whose network activity will never be blocked by Kaspersky Endpoint Security.

In the Update window, do the following if necessary:

• Enable or disable updating of application modules.
• Specify update sources.

In the KSN window, do the following if necessary:

• Read the full text of the Kaspersky Security Network Statement by clicking the KSN Statement button.
• View information about KSN infrastructure provided by Kaspersky Security Center.
• Enable or disable the use of Kaspersky Security Network.
• Enable or disable extended KSN mode.
• Enable or disable the use of a KSN proxy.
• Enable or disable the use of Kaspersky servers when the KSN proxy is unavailable.

Note: Use of Kaspersky Security Network and a KSN proxy on remote computers is available only if Kaspersky Security Center Administration Server is used as the proxy server. For detailed information about Administration Server properties, see the Kaspersky Security Center help.

When Global KSN infrastructure is used by Kaspersky Security Center and you choose to participate in Kaspersky Security Network in policy settings, Kaspersky Endpoint Security statistics from client computers to which the policy is applied are automatically sent to Kaspersky to enhance protection of these computers.

Note: Kaspersky doesn't receive, process, or store any personal data without your explicit consent.

Data provided to Kaspersky when using Kaspersky Security Network in Global KSN infrastructure

When Private KSN infrastructure is used by Kaspersky Security Center and you choose to participate in Kaspersky Security Network in policy settings, Kaspersky Endpoint Security doesn't send statistics from client computers to which the policy is applied to Kaspersky.

After a policy is deleted or made inactive, KSN settings on a client computer return to the initial state.

In the User Interaction window, configure the Kaspersky Endpoint Security settings for interaction with the user of the client computer if necessary.

In the Network window, do the following if necessary:

• Configure the connection to a proxy server.
• Enable or disable scanning of inbound and outbound HTTPS traffic.
• Configure monitored ports.

  You can create a list of ports that are monitored by Kaspersky Endpoint Security.

In the Reports and Backup window, do the following if necessary:

• Configure settings for generating and storing reports.
• Configure settings for storing objects in Backup.

In the FileVault Disk Encryption window, do the following if necessary:

• Enable or disable FileVault disk encryption management for the user's startup disk.

  By default, FileVault disk encryption management is disabled.

• Choose the Encrypt disk option, if you want to encrypt the user's startup disk when the policy is applied to a client computer.

If the Enable FileVault disk encryption management checkbox is unselected, users with administrator rights can encrypt and decrypt their Mac startup disks from System Preferences.

If the Enable FileVault disk encryption management checkbox and the Encrypt disk option are selected, users with administrator rights can't decrypt the startup disk of their Mac from System Preferences.

If the Enable FileVault disk encryption management checkbox and the Decrypt disk option are selected, users with administrator rights can't encrypt the startup disk of their Mac from System Preferences.

In the Web Control window, do the following if necessary:

• Enable or disable Web Control.

  Note: If you enable Web Control to block access to dangerous web resources, Kaspersky Endpoint Security displays the Web Control is enabled notification in Protection Center on the remote computer.
  Kaspersky Endpoint Security displays notifications when the user accesses web resources blocked by Web Control on the remote computer if the Check secure connections (HTTPS) checkbox is selected in the Network window of the New policy Wizard.

• Add a new rule for Web Control by clicking Add.

  You can enter a rule name, choose whether the rule is active, specify a rule area by creating a list of specific web addresses or selecting website categories, and select an action that Kaspersky Endpoint Security performs when a user accesses a website included in this rule.

• Edit, delete, or organize created rules in the list.

The order in which the rules are sorted determines the priority of their application by Kaspersky Endpoint Security.

In the Target group window, click Browse to select an administration group to which you want to apply the policy.

In the Create the group policy for the application window, do the following:

1. Select the status that will be assigned to the policy:
   • Active policy: the policy is applied to the selected administration group.
   • Inactive policy: the policy is not applied.
   • Out-of-office policy: the policy is applied to the selected administration group when the computers are disconnected from the corporate network.

   Note: You can create multiple policies for an application in an administration group, but only one of them can be active.

   For detailed information about policy statuses, see the Kaspersky Security Center help.

2. Select the Open policy properties immediately after it is created checkbox if you want to review the policy settings after the policy is created.
3. Click Finish to close the New Policy Wizard.

   The policy that you have created appears on the Policies tab in the workspace of the relevant administration group. The policy is applied to client computers after their first synchronization with Administration Server.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Managed devices.
4. Select the administration group that contains the required client computer.
5. In the workspace, select the Policies tab.

   The list of policies is displayed.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Managed devices.
4. Select the administration group that contains the required client computer.
5. In the workspace, select the Policies tab.
6. Right-click the policy whose state you want to change and choose Properties from the context menu.
7. In the Properties: <Policy name> window, select the General section.
8. In the Policy status section, select one of the following policy statuses:
   • Active policy. The policy is always applied to the selected administration group.
   • Out-of-office policy. The policy is applied to the selected administration group when client computers are disconnected from the corporate network.
   • Inactive policy. The policy is not applied to the selected administration group.
9. Click OK to save changes and close the Properties: <Policy name> window.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Managed devices.
4. Select the administration group that contains the required client computer.
5. In the workspace, select the Policies tab.
6. Right-click the policy to display its context menu and choose Export.

   The Save As window opens.

7. Select the folder in which you want to save the KLP file for the policy.
8. Specify the file name.
9. Click Save to save the file in the selected folder.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Managed devices.
4. Select the administration group that contains the required client computer.
5. In the workspace, select the Policies tab.
6. Open the file selection window in one of the following ways:
   • By clicking the Import policy from file button.
   • By right-clicking an empty area in the workspace to open the context menu and selecting the Import item.
7. Select a KLP file with a policy and click Open.

The imported policy is added to the list of policies in the workspace.

1. In the console tree, select the administration group for which you want to create a policy profile.
2. In the workspace, select the Policies tab.
3. Do one of the following to open the properties of the policy for which you want to create a profile:
   • Double-click the name of the policy.
   • Right-click the policy name to display the context menu and choose Properties.
   • Click the Configure policy link.
4. In the Properties: <Policy name> window, select the Policy profiles section.
5. In the workspace, click Add.
6. In the Assigning policy profiles window, read the information about policies and click Next.

   If you don't want to display this window when you create new policy profiles, select the Do not show this window again checkbox before clicking Next.

7. In the Policy profile name window, do the following to configure the policy profile:
   • Enter the name of the new policy profile.

     Note: The name of a profile cannot include more than 100 characters.

   • In the Policy profile state section, select whether the policy profile is enabled or disabled.
   • In the drop-down list in the Policy profile state section, select whether the policy profile can be edited.
   • If you want to configure activation rules for the policy profile, select the After closing the New Policy Profile Wizard, proceed to configuring the policy profile activation rule checkbox.
8. Click Finish.
9. If you have selected the After closing the New Policy Profile Wizard, proceed to configuring the policy profile activation rule checkbox, proceed with the steps of the New Policy Profile Activation Rule Wizard.

The policy profile that you created appears in the Policy profiles section of the Properties: <Policy name> window.

1. In the console tree, select the administration group in which you want to create a policy profile activation rule.
2. In the workspace, select the Policies tab.
3. Do one of the following to open the properties of the policy:
   • Double-click the name of the policy.
   • Right-click the policy name to display the context menu and choose Properties.
   • Click the Configure policy link.
4. In the Properties: <Policy name> window, select the Policy profiles section.
5. In the workspace, select the policy profile for which you want to create an activation rule and click Properties.

   The Properties: <Policy profile name> window opens.

6. Select the Activation rules section.
7. In the workspace, click Add.

   The New Policy Profile Activation Rule Wizard starts.

Follow the steps of the New Policy Profile Activation Rule Wizard.

1. In the console tree, select the administration group for which you want to modify a policy profile.
2. In the workspace, select the Policies tab.
3. Do one of the following to open the properties of the policy for which you want to modify a profile:
   • Double-click the name of the policy.
   • Right-click the policy name to display the context menu and choose Properties.
   • Click the Configure policy link.
4. In the Properties: <Policy name> window, select the Policy profiles section.
5. In the workspace, select the policy profile that you want to modify and click Properties.

   The Properties: <Policy profile name> window opens.

6. Configure the profile if necessary:
   • In the General section, rename the profile or enable/disable the profile by selecting/deselecting the Enable profile checkbox.
   • In the Activation rules section, create, edit, or delete the activation rules.
   • In the Devices section, choose the devices to which the policy profile is applied.
   • Edit the policy settings in the relevant sections.
7. Click OK.

If the policy profile is active, the modified settings will be applied after the client computer is synchronized with Administration Server. If the policy profile is inactive, they will be applied after the activation rule is triggered.

1. In the console tree, select the administration group for which you want to change the priority of a policy profile.
2. In the workspace, select the Policies tab.
3. Do one of the following to open the properties of the policy for which you want to change the priority of a policy profile:
   • Double-click the name of the policy.
   • Right-click the policy name to display the context menu and choose Properties.
   • Click the Configure policy link.
4. In the Properties: <Policy name> window, select the Policy profiles section.
5. In the workspace, select the policy profile whose priority you want to change.
6. Raise/lower the priority of the selected profile by clicking the / buttons.

1. In the console tree, select the administration group for which you want to delete a policy profile.
2. In the workspace, select the Policies tab.
3. Do one of the following to open the properties of the policy for which you want to delete a profile:
   • Double-click the name of the policy.
   • Right-click the policy name to display the context menu and choose Properties.
   • Click the Configure policy link.
4. In the Properties: <Policy name> window, select the Policy profiles section.
5. In the workspace, select the profile that you want to delete and click Delete.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, click Managed devices.
4. Select the administration group that contains the required client computer.
5. Select the Devices tab.
6. Select the computer from the list of client computers.
7. Right-click the selected computer to open the context menu and choose All tasks > View report on threats.

The generated report opens in a browser window.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, select the Advanced folder, then Data encryption and protection subfolder, and then the Encrypted drives subfolder.
4. In the workspace, right-click the device with the encrypted disk to display the shortcut menu and select Get recovery key for macOS.

   A window with the recovery key opens.

5. Save the recovery key in any convenient way.

You can use this recovery key on a client computer to access the encrypted disk.

1. In the DEVICES section on the left, select the POLICIES&PROFILES section.
2. Click Add.
3. Select the application for which you want to create a policy and click Next.

   The New policy window opens.

4. On the GENERAL tab, specify the policy name and configure the policy status and the policy settings inheritance options.
5. On the APPLICATION SETTINGS tab, configure the application settings that will be applied to Kaspersky Endpoint Security on the client computer when the policy is enforced.
6. Click Save.

If the Kaspersky Security Network toggle switch is enabled and the Extended KSN mode toggle switch is disabled, Kaspersky Endpoint Security running on client computers provides to Kaspersky the following data:

• Information about the license used: the type and validity period of the license, number of days till license expiration, identifier of the partner from whom the license was purchased, Regional Activation Center identifier, checksum of the activation code, ticket body hash calculated using the SHA1 algorithm, license ticket creation date and time, license information identifier, license ticket identifier, license ticket sequence identifier, unique identifier of the user's computer, date from which the license ticket is valid, date to which the license ticket is valid, license ticket current state, ticket header version, license version, ticket header signature certificate identifier, checksum of the key file, ticket header signer serial number, authentication token.
• Full version of installed Software; type of installed Software; Software update ID; ID of reputation service; protocol type ID; ID of a regional activation center; version of list of revoked Software service's decisions; ID of the triggered record in the Software's anti-virus databases; timestamp of the triggered record in the Software's anti-virus databases; type of the triggered record in the Software's anti-virus databases; unique ID of the instance of application installation on the computer; license activation date; license expiration date; license identifier; status of the license used by the Software; checksum type for the object being processed; name of the detected malware or legitimate software that can be used to damage the user's device or data; checksum of the object being processed; checksum of the Software activation code; full version of the Software; unique device ID; Software ID; checksum of the Software key file; ID of the information model used to provide the Software license; identifier of the certificate used to sign the Software license ticket header; the Software license ticket create date and time; the Software license ticket checksum; the Software license ticket version; the Software activation code version; format of the data in the request to Rightholder infrastructure; current license ticket ID; the Software component ID; the result of the Software action; error code; accessed address of the web service (URL, IP); port number; web address of the source of the web service request (referrer).

If the Kaspersky Security Network and Extended KSN mode toggle switches are enabled, Kaspersky Endpoint Security running on client computers provides to Kaspersky the following data:

• Information about the version of the operating system (OS) and service packs installed on the computer, version and checksums (MD5, SHA2-256, SHA1) of the OS kernel file, parameters of the OS run mode.
• Information about the failed last OS reboot: number of failed reboots.
• Information about the Kaspersky installed application and the anti-virus protection status: unique identifier of the instance of application installation on the computer, application type, ID of application type, the full version of the application installed, the identifier of the application settings version, the identifier of the computer type, the unique identifier of the computer on which the application is installed, the unique User identifier in the Kaspersky services, locale language and operation state, version of the installed Software components and their operation state, version of the protocol used to connect with the Kaspersky services.
• Full version of installed Software; type of installed Software; Software update ID; ID of reputation service; protocol type ID; ID of a regional activation center; version of list of revoked Software service`s decisions; ID of the triggered record in the Software's anti-virus databases; timestamp of the triggered record in the Software's anti-virus databases; type of the triggered record in the Software's anti-virus databases; Unique ID of the instance of application installation on the computer; license activation date; license expiration date; license identifier; status of the license used by the Software; checksum type for the object being processed; name of the detected malware or legitimate software that can be used to damage the user's device or data; checksum of the object being processed; checksum of the Software activation code; full version of the Software; unique device ID; Software ID; checksum of the Software key file; ID of the information model used to provide the Software license; identifier of the certificate used to sign the Software license ticket header; the Software license ticket create date and time; the Software license ticket checksum; the Software license ticket version; the Software activation code version; format of the data in the request to Rightholder infrastructure; current license ticket ID; the Software component ID; the result of the Software action; error code; accessed address of the web service (URL, IP); port number; web address of the source of the web service request (referrer).
• Information about all scanned objects and operations: the name of the scanned object, the date and time of the scan, the URL- and Referrer addresses from which it was downloaded, the size of scanned files and the paths to them, the archive sign, the date and time of the file's creation, the name, size and checksums (MD5, SHA2-256) of the packer (if the file was packed), the file's entropy, the file's type, the file type code, the executable file sign, ID and format, the object's checksum (MD5, SHA2-256), the type and value of the object's supplementary checksum, data about the object's digital signature (certificate): data on the certificate's publisher, number of starts of the object since the last statistics delivery, ID of the application's scanning task, the means of receiving information about the object's reputation, the value of the target filter, technical parameters of the applicable detection technologies.

  For executable files: the entropy of the file sections, reputation verification flag or file signature flag, name, type, ID type, checksum (MD5) and the size of the application that was loaded by the object being validated, the application path and template paths, an attribute indicating presence in the Autorun list, date of entry, the list of attributes, name of the packer, information about the digital signature of the application: the publisher certificate, the name of the uploaded file in the MIME format, file build date and time.

• Information about the applications launched and their modules: checksums (MD5, SHA2-256) of running files, size, attributes, creation date, name of the packer (if the file was packed), names of files, information about processes running on the system (process ID (PID), process name, information about the account the process was started from, the application and command that started the process, the full path to the process's files, and the starting command line, a description of the application that the process belongs to (the name of the application and information about the publisher), as well as the digital certificates being used and information needed to verify their authenticity or information about the absence of a file's digital signature), and information about the modules loaded into the processes: their names, sizes, types, creation dates, attributes, checksums (MD5, SHA2-256, SHA1), the paths to them, PE-file header information, names of packers (if the file was packed), information about the availability and validity of these statistics, identifier of the mode for generating the statistics being sent.
• If threats or vulnerabilities are detected, in addition to information about the detected object, information is provided about the identifier, version, and type of the record in the anti-virus database, the name of the threat based on the Kaspersky classification, the date and time of the last update of the anti-virus database, executable file name, the checksum (MD5) of the application file that requested the URL where the threat was detected, the IP address (IPv4 or IPv6) of the detected threat, the vulnerability identifier and its threat level, the URL and Referrer of the web page where the vulnerability was detected.
• If a potentially malicious object is detected, information is provided about data in the processes' memory.
• Network attack information: IP address of the attacking computer and number of the port on the user's computer targeted by the network attack, ID of the attack protocol, name and type of attack.
• Information about network connections: version and checksums (MD5, SHA2-256, SHA1) of the file from which process was started that opened the port, the path to the process's file and its digital signature, local and remote IP addresses, numbers of local and remote connection ports, connection state, timestamp of the port's opening.
• The URL and IP address of the web page where harmful or suspicious content was detected, the name, size, and checksum of the file that requested the URL, the identifier, weight and degree of the rule used to reach a verdict, the objective of the attack.
• Information about updates of the installed application and anti-virus databases: status of completion of the update task, type of error that may have occurred during the update process, the number of unsuccessful updates, the identifier of the application component that performs updates.
• Information about the use of Kaspersky Security Network (KSN): KSN identifier, application identifier, full version of the application, depersonalized IP address of the user's device, indicators of the quality of fulfillment of KSN requests, indicators of the quality of the processing of KSN packets, indicators of the number of KSN requests and information about the types of KSN requests, date and time when statistics began being sent, date and time when statistics finished being sent, information about KSN configuration updates: identifier of the active configuration, identifier of the configuration received, error code of the configuration update.
• Information about system log events: event time, name of the log where the event has been detected, type and category of event, name of the event source and event description.
• Information to determine the reputation of files and URL-addresses: the URL-address at which the reputation is being requested and the Referrer, the connection's protocol type, the internal identifier of the application type, the number of the port being used, the User identifier, checksum of the scanned file (MD5), type of the detected threat, information about the record used to detect a threat (record identifier for the anti-virus databases, the record timestamp and type).
• Data on the application territorial distribution: date of the application installation and activation, ID of the partner providing the license for the application activation, application ID, application language localization ID, license serial number for the application activation, KSN participation sign.
• Information about the license used: the type and validity period of the license, number of days till license expiration, identifier of the partner from whom the license was purchased, Regional Activation Center identifier, checksum of the activation code, ticket body hash calculated using the SHA1 algorithm, license ticket creation date and time, license information identifier, license ticket identifier, license ticket sequence identifier, unique identifier of the user's computer, date from which the license ticket is valid, date to which the license ticket is valid, license ticket current state, ticket header version, license version, ticket header signature certificate identifier, checksum of the key file, ticket header signer serial number, authentication token.
• Information about hardware installed on the computer: type, name, model name, firmware version, parameters of built-in and connected devices.
• Information about the operation of the Web Control component: component version, categorization reason, additional information about categorization reason, categorized URL, host IP address of blocked/categorized object.

1. In the DEVICES section on the left, select the TASKS section.
2. Click Add.

   The Add Task Wizard starts.

3. In the Application drop-down list, select Kaspersky Endpoint Security for Mac (11.1).
4. In the Task type drop-down list, select the task you want to create.
5. If needed, edit the task name in the Task name field.
6. Select devices to which the task will be assigned.
7. Configure settings for the selected task type.
8. Complete the Add Task Wizard by clicking Finish.

Note: If you select the Open task details when creation is complete check box in the Finish task creation window, you can proceed with modifying the default task settings. If you do not select this check box, the task is created with the default settings. You can modify the default task settings later, at any time.

1. Go to DEVICES > TASKS.
2. Double-click a task with the Scan task type.
3. Click the APPLICATION SETTINGS tab.

1. Go to DEVICES > TASKS.
2. Double-click a task with the Add key task type.
3. Click the APPLICATION SETTINGS tab.

1. Go to DEVICES > TASKS.
2. Double-click a task with the Update task type.
3. Click the APPLICATION SETTINGS tab.

1. Click the administrator account name in the lower left corner of the Kaspersky Security Center Web Console or Cloud Console window.
2. Choose Interface options.
3. In the dialog that opens, turn on the Show Data encryption and protection toggle switch to enable managing data encryption and click Save.
4. Go to OPERATIONS > DATA ENCRYPTION AND PROTECTION > ENCRYPTED DRIVES.

   The list of encrypted devices opens.

5. Select the check box next to the device with the encrypted drive.
6. Click Grant access to the device in offline mode.
7. In the Grant access to the device in offline mode dialog, select the web plug-in for Kaspersky Endpoint Security and click OK.
8. Click Get recovery key.

   A recovery key appears in the current dialog window.

9. Save the recovery key in any convenient way.

You can use this recovery key on a client computer to access the encrypted drive.

This check box adds the Scan component to the Kaspersky Endpoint Security installation package.

The check box is selected by default and cannot be cleared.

This check box enables/disables adding the File Threat Protection component to the Kaspersky Endpoint Security installation package.

If this check box is selected, the File Threat Protection component is included in the Kaspersky Endpoint Security installation package.

If this check box is cleared, the File Threat Protection component is not included in the Kaspersky Endpoint Security installation package.

This check box is selected by default.

This check box enables/disables adding the Web Threat Protection and Web Control components to the Kaspersky Endpoint Security installation package.

If this check box is selected, the Web Threat Protection and Web Control components are included in the Kaspersky Endpoint Security installation package.

If this check box is cleared, the Web Threat Protection and Web Control components are not included in the Kaspersky Endpoint Security installation package.

This check box is selected by default.

This check box enables/disables adding the Network Threat Protection component to the Kaspersky Endpoint Security installation package.

If this check box is selected, the Network Threat Protection component is included in the Kaspersky Endpoint Security installation package.

If this check box is cleared, the Network Threat Protection component is not included in the Kaspersky Endpoint Security installation package.

This check box is selected by default.

This check box adds the Network Agent Connector component to the Kaspersky Endpoint Security installation package.

The check box is selected by default and cannot be cleared.

This check box enables/disables adding a specific key file or activation code as a reserve key.

If this check box is selected, Kaspersky Endpoint Security adds the specified key file or activation code as a reserve key.

If this check box is cleared, Kaspersky Endpoint Security adds the specified key file or activation code as the active key.

This check box is cleared by default.

Clicking this link opens a window where you can create the scan scope.

Kaspersky Endpoint Security doesn't process objects until the scan is complete. At that point, Kaspersky Endpoint Security displays a notification with information about each infected object and prompts the user to select what action to take. The available options depend on the type of object.

This option is selected by default.

Kaspersky Endpoint Security displays a notification with information about each infected object that the application detects and prompts the user to select a further action. The available options depend on the type of object.

Kaspersky Endpoint Security records information about detected objects in the report without processing them.

This check box enables/disables disinfection of infected objects that Kaspersky Endpoint Security detects without prompting the user for confirmation.

If this check box is selected, Kaspersky Endpoint Security automatically disinfects infected objects.

If the check box is cleared, Kaspersky Endpoint Security skips infected objects.

This check box is available if the Do not prompt for action option is selected.

This check box is selected by default.

This check box enables/disables removal of infected or probably infected objects after an attempt to disinfect them fails.

If this check box is selected, Kaspersky Endpoint Security automatically removes infected objects that could not be disinfected.

If this check box is cleared, Kaspersky Endpoint Security does not remove infected objects that could not be disinfected.

This check box is displayed if the Do not prompt for action option is selected and the Disinfect automatically check box is selected.

This check box is selected by default.

Kaspersky Endpoint Security scans all file system objects that are executed, opened, or saved.

Kaspersky Endpoint Security scans only objects that may be infected based on file format.

The list of file formats is defined by Kaspersky and is part of Kaspersky Endpoint Security databases.

Kaspersky Endpoint Security scans only objects that may be infected based on file extension.

The list of file extensions is defined by Kaspersky and is part of Kaspersky Endpoint Security databases.

Kaspersky Endpoint Security always scans files without extensions.

This check box enables/disables scanning of only those files that Kaspersky Endpoint Security recognizes as new or modified since the previous scan.

If this check box is selected, Kaspersky Endpoint Security scans only files that it recognizes as new or modified since the previous scan.

If this check box is cleared, Kaspersky Endpoint Security scans all files.

This check box enables/disables excluding files larger than the specified size from scanning.

If this check box is selected, Kaspersky Endpoint Security skips files larger than the specified size.

If this check box is cleared, Kaspersky Endpoint Security scans files regardless of their size.

This check box is cleared by default.

By default, the size is set to 100 MB.

This check box enables/disables the limit on the duration of file scans. Kaspersky Endpoint Security skips a file if scanning the file exceeds the specified time limit.

If this check box is selected, Kaspersky Endpoint Security skips a file if scanning the file exceeds the specified time limit.

If this check box is cleared, Kaspersky Endpoint Security scans files regardless of how much time the scan might take.

The default value is 30 seconds.

This check box enables/disables scanning of archives.

If this check box is selected, Kaspersky Endpoint Security scans archives.

If this check box is cleared, Kaspersky Endpoint Security skips archives during scans.

Kaspersky Endpoint Security scans all archives.

This option is available if the Scan archives check box is selected.

Kaspersky Endpoint Security scans only new archives.

This option is available if the Scan archives check box is selected.

This check box enables/disables scanning of password-protected archives.

If this check box is selected, Kaspersky Endpoint Security scans password-protected archives.

If this check box is cleared, Kaspersky Endpoint Security skips password-protected archives during scans.

This check box enables/disables scanning of objects embedded in a file, such as Excel spreadsheets, macros, or email attachments.

If this check box is selected, Kaspersky Endpoint Security scans embedded OLE objects.

If this check box is cleared, Kaspersky Endpoint Security skips embedded OLE objects during scans.

Kaspersky Endpoint Security scans all OLE objects.

This option is available if the Scan embedded OLE objects check box is selected.

Kaspersky Endpoint Security scans only new embedded OLE objects.

This option is available if the Scan embedded OLE objects check box is selected.

This check box enables/disables scanning of files in email formats and email databases.

If this check box is selected, Kaspersky Endpoint Security scans files in email formats and email databases.

If this check box is cleared, Kaspersky Endpoint Security skips files in email formats and email databases during scans.

Clicking this button opens a dialog where you can specify a file, folder, or file/folder mask to be added to the scan scope.

Clicking this button removes an object from the scan scope.

This button is available if the check box next to the object is selected.

You cannot delete the default objects included in the scan scope.

This column contains the objects scanned during a virus scan.

The toggle switch in this column enables/disables scanning of the objects added to the scan scope.

If the toggle switch is turned on, Kaspersky Endpoint Security scans the corresponding object.

If the toggle switch is turned off, Kaspersky Endpoint Security doesn't scan the corresponding object.

This column indicates whether Kaspersky Endpoint Security scans subfolders of the corresponding object.

Path to a file, folder, or file/folder mask.

This check box enables/disables scanning of an object as a folder.

If this check box is selected, Kaspersky Endpoint Security scans the object that you have specified in the Enter a file name, folder name, or mask field as a folder.

If this check box is cleared, Kaspersky Endpoint Security scans the object that you have specified in the Enter a file name, folder name, or mask field as a file.

This check box is selected by default.

This check box enables/disables scanning of subfolders in the folder specified in the Enter a file name, folder name, or mask field.

If this check box is selected, Kaspersky Endpoint Security scans subfolders during virus scans.

If this check box is cleared, Kaspersky Endpoint Security scans only the files directly in the folder specified in the Enter a file name, folder name, or mask field during virus scans.

This check box is selected by default.

Clicking this link opens the Protection window where you can manage general settings for Kaspersky Endpoint Security installed on users computers and select the types of objects that Kaspersky Endpoint Security will detect.

Clicking this link opens the Reports and Backup window where you can manage reports and backup settings.

Clicking this link opens the User interaction window where you can set up notifications displayed by Kaspersky Endpoint Security, the display language for events displayed in Kaspersky Security Center, and additional settings for Kaspersky Endpoint Security.

Clicking this link opens the Network window where you can manage proxy server settings, enable or disable scanning of encrypted connections (HTTPS), and configure monitored ports.

Clicking this link opens the Trusted zone window where you can add exclusions for File Threat Protection or scan tasks and configure trusted applications.

This check box enables/disables automatic start of Kaspersky Endpoint Security when a remote computer is turned on or after its operating system is restarted.

If the check box is selected, Kaspersky Endpoint Security starts automatically when the remote computer is turned on or its operating system is restarted.

If the check box is cleared, Kaspersky Endpoint Security does not start automatically when the remote computer is turned on or its operating system is restarted.

This check box is selected by default.

This check box enables/disables protection of a remote computer with Kaspersky Endpoint Security installed.

If this check box is selected, protection of the remote computer is enabled.

If this check box is cleared, protection of the remote computer is disabled.

This check box is selected by default.

This check box enables/disables detection of the following types of programs:

• All types of malware.
• Applications that show advertisements (such as banners) on your computer or replace the search results in your browser with advertising websites.
• Applications that surreptitiously establish phone connections through a computer's modem.

The check box is selected by default and cannot be cleared.

This check box enables/disables detection of applications that are not malicious or dangerous but which under certain circumstances may be used to harm a user's computer.

If the check box is selected, Kaspersky Endpoint Security detects legitimate software that can be used by intruders to damage a user's computer or personal data.

If the check box is cleared, Kaspersky Endpoint Security does not detect legitimate software that can be used by intruders to damage a user's computer or personal data.

This check box is cleared by default.

This check box enables/disables the start of scheduled scan tasks on computers running on battery power.

If this check box is selected, Kaspersky Endpoint Security does not start scheduled scan tasks on computers running on battery power.

If this check box is cleared, Kaspersky Endpoint Security starts scheduled scan tasks on computers running on battery power.

This check box is selected by default.

When the Enforce toggle switch is turned on, Kaspersky Endpoint Security prohibits changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

When the Enforce toggle switch is turned off, Kaspersky Endpoint Security allows changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

This check box enables/disables deletion of reports after the specified period.

If this check box is selected, Kaspersky Endpoint Security deletes reports after the specified period. By default, Kaspersky Endpoint Security stores reports for 30 days.

If this check box is cleared, Kaspersky Endpoint Security stores reports indefinitely.

This check box is selected by default.

This check box enables/disables logging of non-critical events (such as informational events) in the report. Non-critical events do not affect security.

If this check box is selected, Kaspersky Endpoint Security logs informational events in the report.

If this check box is cleared, Kaspersky Endpoint Security does not log informational events in the report.

This check box is cleared by default.

This check box enables/disables keeping only information about important events from the previous run of the task.

If this check box is selected, each time a task starts, Kaspersky Endpoint Security removes information about non-critical events from the previous run of the task but keeps important information (for example, about detected malware) in the report.

If this check box is cleared, Kaspersky Endpoint Security keeps all information from the previous run of the task.

This check box is cleared by default.

This check box enables/disables removal of objects from Backup after the specified period.

If this check box is selected, Kaspersky Endpoint Security removes objects from Backup after the specified period. The default storage period is 30 days.

If this check box is cleared, Kaspersky Endpoint Security stores objects in Backup indefinitely.

This check box is selected by default.

When the Enforce toggle switch is turned on, Kaspersky Endpoint Security prohibits changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

When the Enforce toggle switch is turned off, Kaspersky Endpoint Security allows changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

This check box enables/disables the display of the application icon in the menu bar on a remote computer.

If this check box is selected, the application icon is displayed in the menu bar.

If this check box is cleared, the application icon is hidden from the menu bar.

This check box is selected by default.

This check box enables/disables a user's ability to open the Kaspersky Endpoint Security main window and use the application interface on a remote computer.

If this check box is selected, a user can open the Kaspersky Endpoint Security main window and use the application interface on a remote computer.

If this check box is cleared, Kaspersky Endpoint Security prevents a user from opening the main application window and hides the application interface on a remote computer.

This check box is selected by default.

The Notifications toggle switch enables/disables notifications about Kaspersky Endpoint Security events.

If the Notifications toggle switch is turned on, Kaspersky Endpoint Security shows notifications about events that occur while Kaspersky Endpoint Security components are running.

If the Notifications toggle switch is turned off, Kaspersky Endpoint Security doesn't show notifications about events that occur while Kaspersky Endpoint Security components are running.

This toggle switch is turned on by default.

Clicking this link opens a window where you can select the types of notifications to be used for all event types.

This check box enables/disables availability of the Quit item in the context menu of the application icon shown in the menu bar.

If this check box is selected, the Quit item is available in the context menu of the application icon. The user of a remote computer can quit Kaspersky Endpoint Security on the remote computer.

If this check box is cleared, the Quit item is unavailable in the context menu of the application icon. The user of a remote computer cannot quit Kaspersky Endpoint Security on the remote computer.

This check box is selected by default.

From this drop-down list, you can select the display language for Kaspersky Endpoint Security events in Kaspersky Security Center.

This check box enables/disables local management of Kaspersky Endpoint Security updates on a remote computer.

If this check box is selected, local management of Kaspersky Endpoint Security updates on a remote computer is enabled.

If this check box is cleared, Kaspersky Endpoint Security updates on a remote computer can be managed only using the Kaspersky Endpoint Security administration plug-in in Kaspersky Security Center.

This check box is selected by default.

This check box enables/disables local management of Kaspersky Endpoint Security keys on a remote computer.

If the check box is selected, local management of Kaspersky Endpoint Security keys on a remote computer is enabled.

If the check box is cleared, Kaspersky Endpoint Security keys on a remote computer can be managed only using the Kaspersky Endpoint Security administration plug-in in Kaspersky Security Center.

This check box is selected by default.

When the Enforce toggle switch is turned on, Kaspersky Endpoint Security prohibits changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

When the Enforce toggle switch is turned off, Kaspersky Endpoint Security allows changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

This column lists events that might occur while Kaspersky Endpoint Security is running:

• Critical events. Events of crucial importance in terms of security.
• Functional failure. Events that cause the system to fail.
• Important events. Events that the user should attend to.
• Informational events. Events that are informational in nature.

A notification is a pop-up message that notifies the user about an event.

The check box in the Notifications column enables/disables pop-up notifications about events of a particular category.

A sound notification associated with an event.

The check box in the Sound column enables/disables sound notifications for events of a particular category.

If this option is selected, Kaspersky Endpoint Security does not use a proxy server to connect to update sources for application databases and modules.

If this option is selected, Kaspersky Endpoint Security connects to update sources for application databases and modules using the proxy server settings configured in your operating system.

This option is selected by default.

If this option is selected, Kaspersky Endpoint Security connects to update sources for application databases and modules using the proxy server settings you have specified.

IP address or symbolic name of a proxy server.

This field is available if the Use specified proxy server settings option is selected.

Proxy server port number.

The default port number is 8080.

This field is available if the Use specified proxy server settings option is selected.

This check box enables/disables the use of authentication when connecting to a proxy server.

If this check box is selected, Kaspersky Endpoint Security requires the user's credentials to connect to a proxy server.

If this check box is cleared, Kaspersky Endpoint Security does not require the user's credentials to connect to a proxy server.

This check box is selected by default.

This check box is available if the Use specified proxy server settings option is selected.

User name for connecting to the proxy server.

This field is available if the Use specified proxy server settings option and the Use authentication check box are selected.

Password for the specified user name.

This field is available if the Use specified proxy server settings option and the Use authentication check box are selected.

Clicking this button shows the characters of the password you enter in the Password field.

This check box enables/disables use of a proxy server when updating application databases and modules from a local or network folder.

If this check box is selected, Kaspersky Endpoint Security does not use a proxy server when updating application databases and modules from a local or network folder.

If this check box is cleared, Kaspersky Endpoint Security uses a proxy server when updating application databases and modules from a local or network folder.

This check box is selected by default.

This check box is available if the Use specified proxy server settings option is selected.

The Secure connections (HTTPS) check toggle switch enables/disables scanning of secure connections established via the HTTPS protocol and displaying notifications when Web Control blocks the user's access to dangerous web resources.

If the Secure connections (HTTPS) check toggle switch is turned on, Kaspersky Endpoint Security does the following:

• Web Threat Protection scans data that is sent and received by your computer over the HTTPS protocol in Safari, Google Chrome, or Firefox.
• The application displays notifications when the user accesses web resources blocked by Web Control on the remote computer.

If the Secure connections (HTTPS) check toggle switch is turned off, Kaspersky Endpoint Security does the following:

• Web Threat Protection does not scan data that is sent and received by your computer via the HTTPS protocol.
• The application does not display notifications when the user accesses web resources blocked by Web Control on the remote computer.

This toggle switch is turned off by default.

Clicking this link opens a window where you can configure a list of ports that are monitored by Kaspersky Endpoint Security.

When the Enforce toggle switch is turned on, Kaspersky Endpoint Security prohibits changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

When the Enforce toggle switch is turned off, Kaspersky Endpoint Security allows changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

A list of ports for which you can configure monitoring of transmitted data.

By default, the list of ports contains ports that are frequently used by the most common services.

Clicking this button opens a dialog where you can add a port you want to be monitored by Kaspersky Endpoint Security.

Clicking this button removes the selected port from the list.

This button is available if the check box next to the port is selected.

This column contains the port numbers.

This column contains a toggle switch that indicates the status of monitoring of data transmitted through the port.

If the status is Monitored, the traffic transmitted through the corresponding port is scanned by Kaspersky Endpoint Security.

If the status is Not monitored, the traffic transmitted through the corresponding port is not scanned by Kaspersky Endpoint Security.

This column contains a description of the port.

The number of a port for which you want Kaspersky Endpoint Security to scan transmitted data.

Additional information about the port, for example, the port type.

Clicking this button opens a dialog where you can add a file or folder to Trusted zone.

Clicking this button removes a selected file or folder from the list of exclusions.

This button is available if the check box next to the file or folder is selected.

This column contains files or folders added to Trusted zone.

The toggle switch in this column disables/enables scanning of the file or folder added to Trusted zone.

If the toggle switch is turned on, Kaspersky Endpoint Security doesn't scan the corresponding file or folder.

If the toggle switch is turned off, Kaspersky Endpoint Security scans the corresponding file or folder.

Information about the file or folder added to Trusted zone.

When the Enforce toggle switch is turned on, Kaspersky Endpoint Security prohibits changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

When the Enforce toggle switch is turned off, Kaspersky Endpoint Security allows changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

Path to a file or folder, or a file/folder mask that will be excluded from the protection scope.

This check box enables/disables scanning of subfolders of the folder specified in the Enter a file name, folder name, or mask field.

If this check box is selected, Kaspersky Endpoint Security does not scan subfolders of the specified folder during virus scans.

If this check box is cleared, Kaspersky Endpoint Security only excludes files directly in the folder specified in the Enter a file name, folder name, or mask field during virus scans. Subfolders of the specified folder are scanned.

This check box is selected by default.

Neither the Scan nor File Threat Protection component will not scan the specified file or folder.

This option lets you select components.

If this check box is selected, the File Threat protection component will not scan the specified file or folder.

This check box is available if the From list option is selected.

If this check box is selected, the Scan component will not scan the specified file or folder.

This check box is available if the From list option is selected.

Information about the file or folder added to Trusted zone.

Kaspersky Endpoint Security scans the corresponding file or folder.

Kaspersky Endpoint Security doesn't scan the corresponding file or folder.

A list of trusted applications whose network activity will not be monitored by Kaspersky Endpoint Security.

Clicking this button opens a dialog where you can enter a path to an application whose network activity will not be monitored by Kaspersky Endpoint Security.

Clicking this button removes the selected trusted application from the list.

This button is available if the check box next to the trusted application is selected.

This column contains the application name or the last segment of the path to an application.

This column contains a toggle switch that indicates the status of monitoring the application network activity.

If the status is Enabled, the network activity of the corresponding application is not monitored by Kaspersky Endpoint Security.

If the status is Disabled, the network activity of the corresponding application is monitored by Kaspersky Endpoint Security.

This column contains the application path on the client computer, which you add manually.

When the Enforce toggle switch is turned on, Kaspersky Endpoint Security prohibits changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

When the Enforce toggle switch is turned off, Kaspersky Endpoint Security allows changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

The path to an application whose network activity will not be monitored by Kaspersky Endpoint Security.

This check box enables/disables updates of application modules. The application databases are always updated.

If this check box is selected, Kaspersky Endpoint Security updates application modules.

If this check box is cleared, Kaspersky Endpoint Security doesn't update application modules.

This check box is selected by default.

This list contains the addresses of resources from which Kaspersky Endpoint Security downloads and installs updates of application databases and modules. You can specify a local or network folder, or an FTP or HTTP server as an update source.

By default, the list of update sources contains Kaspersky update servers.

If you manage Kaspersky Endpoint Security via Kaspersky Security Center Web Console, the list of update sources also includes Kaspersky Security Center servers by default.

If you manage Kaspersky Endpoint Security via Kaspersky Security Center Cloud Console, the list of update sources also includes distribution points by default. For detailed information about distribution points, see the Kaspersky Security Center help.

You cannot remove the default update sources from the list.

Clicking this button opens a dialog where you can specify the path to a local or network folder, or web address to be added to the list of update sources.

Clicking this button removes the selected update source from the list.

This button is available if the check box next to the update source is selected.

This column contains update sources for Kaspersky Endpoint Security.

If the toggle switch in this column is turned on, Kaspersky Endpoint Security uses the corresponding update source from the Update source column to receive updates.

If the toggle switch in this column is turned off, Kaspersky Endpoint Security doesn't use the corresponding update source from the Update source column to receive updates.

When the Enforce toggle switch is turned on, Kaspersky Endpoint Security prohibits changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

When the Enforce toggle switch is turned off, Kaspersky Endpoint Security allows changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

Address of the resource from which Kaspersky Endpoint Security copies updates.

You can specify a path to a local or network folder, or the web address or IP address of an FTP or HTTP server as the address of the resource.

You can specify the web address of an FTP server in the following format: ftp://<user name>:<password>@<host>:<port>.

The web address is added to the list of update sources, but Kaspersky Endpoint Security doesn't use this web address as an update source.

The web address is added to the list of update sources and Kaspersky Endpoint Security uses this web address as an update source.

The FileVault disk encryption toggle switch enables/disables FileVault disk encryption management.

If the FileVault disk encryption toggle switch is turned on, FileVault disk encryption can be applied to client computers from Kaspersky Security Center.

If the FileVault disk encryption toggle switch is turned off, FileVault disk encryption can't be applied to client computers from Kaspersky Security Center.

This toggle switch is turned off by default.

Note: If the FileVault disk encryption toggle switch is turned off, users with administrator rights can encrypt and decrypt their Mac startup disks from System Preferences. For more information on FileVault, refer to Apple documentation.

Kaspersky Endpoint Security displays a prompt for computer account credentials on client computers to which the policy is applied. When the user enters the credentials, Kaspersky Endpoint Security starts encrypting the user's startup disk.

If the FileVault disk encryption toggle switch is turned on and the Encrypt disk option is selected, users with administrator rights can't decrypt the startup disk of their Mac from System Preferences.

Kaspersky Endpoint Security displays a prompt for computer account credentials on client computers to which the policy is applied. When the user enters the credentials, Kaspersky Endpoint Security starts decrypting the user's startup disk.

If the FileVault disk encryption toggle switch is turned on and the Decrypt disk option is selected, users with administrator rights can't encrypt the startup disk of their Mac from System Preferences.

When the Enforce toggle switch is turned on, Kaspersky Endpoint Security prohibits changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

When the Enforce toggle switch is turned off, Kaspersky Endpoint Security allows changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

The Web Control toggle switch enables/disables Web Control.

If the Web Control toggle switch is turned on, you can create rules to manage websites that users visit on remote computers.

If the Web Control toggle switch is turned off, you can't manage websites that users visit on remote computers.

This toggle switch is turned off by default.

This list contains rules that you have created to manage websites that users visit on remote computers.

The order in which the rules are sorted determines the priority of their application by Kaspersky Endpoint Security.

Clicking this button opens a window where you can create a new rule for Web Control.

Clicking this button removes the selected rule from the list of rules.

This button is available if the check box next to the rule is selected.

Clicking this button moves the selected rule up in the list of rules and raises the priority of its application by Kaspersky Endpoint Security.

Clicking this button moves the selected rule down in the list of rules and drops the priority of its application by Kaspersky Endpoint Security.

The rule name.

The toggle switch in this column defines whether the rule is active or not.

You can turn on/off the toggle switch next to a corresponding rule to change the state of the rule.

An action that Kaspersky Endpoint Security performs when the user visits a certain web address, group of web addresses, or category of websites affected by the rule.

You can change the assigned action by selecting another option in the corresponding shortcut menu in this column.

When the Enforce toggle switch is turned on, Kaspersky Endpoint Security prohibits changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

When the Enforce toggle switch is turned off, Kaspersky Endpoint Security allows changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

The rule name.

If this option is selected, you create an active rule. It will be applied to the remote computer right after the policy is enforced.

If this option is selected, you create an inactive rule. It will be pending when the policy is enforced.

If this option is selected, Kaspersky Endpoint Security allows the user to visit the web address, group of web addresses, or category of websites affected by the rule.

Note: Kaspersky Endpoint Security allows to visit web resources on the remote computer if the Secure connections (HTTPS) check toggle switch is turned on in the Network window of the New Policy wizard.

This option is selected by default.

If this option is selected, Kaspersky Endpoint Security prevents the user from visiting the web address, group of web addresses, or category of websites affected by the rule.

Note: Kaspersky Endpoint Security displays notifications when the user accesses web resources blocked by Web Control on the remote computer if the Secure connections (HTTPS) check toggle switch is turned on in the Network window of the New Policy wizard.

If this option is selected, Kaspersky Endpoint Security shows a warning when the user attempts to visit the web address, group of web addresses, or category of websites affected by the rule.

If this option is selected, you create a rule for website categories.

Clicking this link opens a dialog where you can select website categories affected by the rule.

If this option is selected, you create a rule for a particular web address or a group of web addresses.

This option is selected by default.

Clicking this button opens a dialog where you can specify a web address or web address mask affected by the rule.

Clicking this button removes the selected web address or web address mask from the list of web addresses affected by the rule.

This button is available if the check box next to the web address or web address mask is selected.

Web addresses or web address masks affected by the rule.

Web address or web address mask that will be affected by the rule.

This list contains the list of website categories you can add to the rule.

The check box next to a website category name adds/removes websites belonging to this category to/from the rule.

All check boxes are cleared by default.

Clicking this link opens a window where you can set up File Threat Protection settings.

Clicking this link opens a window where you can set up Web Threat Protection settings.

Clicking this link opens a window where you can set up Network Threat Protection settings.

The File Threat Protection toggle switch enables/disables File Threat Protection.

If the File Threat Protection toggle switch is turned on, Kaspersky Endpoint Security performs real-time monitoring of the file system of the client computers to which the policy is applied.

If the File Threat Protection toggle switch is turned off, Kaspersky Endpoint Security doesn't protect the file system of the client computers to which the policy is applied.

This toggle switch is turned on by default.

Clicking this button opens a dialog in which you can specify a file, folder, or mask to be added to the list of objects included in the protection scope.

Clicking this button removes an object from the protection scope.

This button is available if an object is selected in the list of protected objects.

You cannot delete the default objects included in the protection scope.

This column contains the objects that Kaspersky Endpoint Security scans when File Threat Protection is enabled.

By default, Kaspersky Endpoint Security scans the following objects:

• All removable drives. Kaspersky Endpoint Security scans all removable drives.
• All internal drives. Kaspersky Endpoint Security scans all internal drives.
• All network drives. Kaspersky Endpoint Security scans all network drives.

If the toggle switch in this column is turned on, Kaspersky Endpoint Security scans the corresponding object in the Protection scope column when File Threat Protection is enabled.

If the toggle switch in this column is turned off, Kaspersky Endpoint Security doesn't scan the corresponding object in the Protection scope column when File Threat Protection is enabled.

This column indicates whether Kaspersky Endpoint Security scans subfolders of a corresponding object.

Kaspersky Endpoint Security displays a notification window with information about the malicious object that has infected the file and prompts you to choose the action to be taken by Kaspersky Endpoint Security. Actions may vary depending on the status of the object.

This option is selected by default.

Kaspersky Endpoint Security blocks access to the infected file and attempts to disinfect it without requesting confirmation from the user.

If the file is disinfected, Kaspersky Endpoint Security saves it in its original location under the original file name. If disinfection fails, Kaspersky Endpoint Security deletes the infected file.

Kaspersky Endpoint Security blocks access to the infected file and attempts to disinfect it without requesting confirmation from the user.

If the file is disinfected, Kaspersky Endpoint Security saves it in its original location under the original file name. If disinfection fails, Kaspersky Endpoint Security keeps the infected file in a blocked state in its original location.

This check box enables/disables scanning of only files that Kaspersky Endpoint Security recognizes as new or modified since the last scan.

If this check box is selected, Kaspersky Endpoint Security scans only files that it recognizes as new or modified since the last scan.

If this check box is cleared, Kaspersky Endpoint Security scans all files.

This check box is selected by default.

This check box disables/enables scanning of the read-only system volume by Kaspersky Endpoint Security.

If this check box is selected, Kaspersky Endpoint Security skips scanning of the read-only system volume to significantly reduce scanning time.

If this check box is cleared, Kaspersky Endpoint Security scans the read-only system volume.

This check box is available if macOS 10.15 or later is running on the remote computer.

This check box is selected by default.

This check box enables/disables use of iSwift technology during scanning. iSwift allows Kaspersky Endpoint Security to use a special algorithm to exclude certain objects from scanning, which helps increase the scan speed.

If this check box is selected, Kaspersky Endpoint Security uses iSwift during scanning.

If this check box is cleared, Kaspersky Endpoint Security does not use iSwift during scanning.

This check box is selected by default.

Kaspersky Endpoint Security scans all file system objects that are executed, opened, or saved.

Kaspersky Endpoint Security scans only objects that may be infected based on their content.

Kaspersky Endpoint Security scans only objects that may be infected based on their file extension.

The list of extensions is defined by Kaspersky and is included in Kaspersky Endpoint Security databases.

Kaspersky Endpoint Security always scans files without extensions.

This check box enables/disables scanning of archives. For the list of extensions, refer to the Kaspersky Endpoint Security Administrator's Guide.

If the check box is selected, Kaspersky Endpoint Security scans archives.

If this check box is cleared, Kaspersky Endpoint Security skips archives during scans.

This check box enables/disables scanning of installation packages.

If this check box is selected, Kaspersky Endpoint Security scans installation packages.

If this check box is cleared, Kaspersky Endpoint Security skips installation packages during scans.

This check box enables/disables scanning of objects embedded in a file, such as Excel spreadsheets, macros, or email attachments.

If this check box is selected, Kaspersky Endpoint Security scans embedded OLE objects.

If this check box is cleared, Kaspersky Endpoint Security skips embedded OLE objects during scans.

This check box enables/disables a limit on the size of archives to be scanned.

If this check box is selected, Kaspersky Endpoint Security skips archives larger than the specified value during scans.

If this check box is cleared, Kaspersky Endpoint Security extracts and scans archives regardless of their size.

This check box is available if the Scan archives check box is selected.

An option that limits the size of archives to be scanned.

If this check box is selected, Kaspersky Endpoint Security scans all archives whose size exceeds the set limit, but does so with a lower priority two minutes after detecting such an archive.

If this check box is cleared, Kaspersky Endpoint Security scans all archives with equal priority.

This check box is available if the Scan archives check box is selected.

When the Enforce toggle switch is turned on, Kaspersky Endpoint Security prohibits changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

When the Enforce toggle switch is turned off, Kaspersky Endpoint Security allows changing the values of task settings, application settings, policies of subgroups, and secondary Administration Servers on a local computer.

Path to a file, folder, or file/folder mask.