Advice and solutions for Kaspersky Endpoint Security for Business

The materials provided on the Advice and Solutions (Forum Knowledgebase) part of the Forum result from the work of the Kaspersky Customer Support team and Forum community members. They are shared here for ease of use of Kaspersky products, deploying and configuring them. Please remember that using commands or recommendations from the articles without a clear understanding of their purpose may result in errors or system inoperability. Please note that some materials presented are not official, so technical support may decline to support a specific unsupported configuration in some instances. Please also ensure to use the official documentation, found in this link…

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. If you encounter an 'Incorrect format' error while saving an Application Control rule in the KES Cloud console, follow these steps to resolve it: Temporarily replace all '+' symbols in the rule with a different character. Save the rule. Export the rules list to a JSON file. Open the JSON file and manually change the placeholder symbols back to the correct path (using '+'). Import the modified JSON file back into the console. This issue is scheduled to be fixed in the next KES Cloud release.

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Scenario Enable Network Threat Protection Connect another Mac via a thunderbolt cable Try to send any data from one computer to another Connection times out Workaround & Solution Connect computers by other means or disable NTP when using Thunderbolt bridge. RCA This issue is caused by a bug in macOS' built-in packet filter and was reported to apple.

I DO HAVE A NEW LICENSE KEY BUT WHEN I INSERT IT GIVES ME THIS ERROR : unknown error (error code: 0xA0450022). kindly assist me or reply to this email address: *****@*****.tld

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. This article is about Kaspersky Endpoint Security for Windows (KES for Windows) Outlook add-in failure may be related to a KES upgrade. Step-by-step guide As the first step to quickly fix majority of the issues with Outlook add-in, unregister it and register again. Here is how to do it properly: Close Outlook if opened. Execute regsvr32 /u <product_folder>/mcou.dll regsvr32 /u <product_folder>/x64/mcou.dll…

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Problem KSWS10 and KSWS11 may have two issues because of the Application Control component: Can't uninstall KSWS with the error "There is a problem with this Windows Installer package. A DLL required for this install to complete could not be run" Can't run GSI with this error "Unable to unpack the critical file. GsiSharp.bin" Solution Disable Application Control and retry uninstallation. Сollect GSI, if necessary.

Problem Description, Symptoms & Impact Local installation from a standalone package fails Diagnostics Check installation logs of the product. We are looking for the following string: 09.02.2022 17:06:19.453 00000374.000028B4 L1 KLSTD: #1, Error was caught in KLERR_throwError, c:\a\b\a_6vlf7p9h\s\csadminkit\development2\klri\pkginst\klpkinst.cpp@1061. Error params: (1187/0x0 ("Bad parameter "VerifyCertDate""), "KLSTD", c:\a\b\a_6vlf7p9h\s\csadminkit\development2\klri\pkginst\klpkinst.cpp@1061) Error loc: ''. This string means that a certificate in the package is out of date Workaround & Solution In order to fix the problem y…

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. When USB connection bus is blocked on hosts with KES 12.4 and further, devices (adapters) USB-COM (or USB-Serial) are denied, too. In Windows Device Manager, the following message is displayed: "This device cannot start. (Code 10) {Access Denied}" Such devices are not supported on KSC and cannot be added to Trusted. Starting from KES 12.4, these devices are treated as USB devices, not Serial. Since USB bus is blocked, they are blocked as well. As a workaround, instead of blocking all USB devices, use granular access control for specific devices instead.

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. In some cases, KESMac versions 11.2.1.145 and 11.3.0.320 may indicate the status "Some protection components are not running" on the macOS 15 Sequoia: This can be a reason of disabled system extension the Kaspersky Endpoint Security Daemon. You need to re-enable it once again. In order to fix this error: 1. Open System Settings and navigate to General → Login Items & Extensions; 2. Then find the Kaspersky Endpoint Security Daemon and Enable it: In case this would not help, try restarting the application or the system; …

Hello, I have this error, windows server 2016, sql express 2022, KES 14.2 No connection to the database server. Please configure connection.(Cannot connect the DB server: 18 '[DBNETLIB][ConnectionOpen (SECDoClientHandshake()).]SSL Security error.{08001};' LastStatement='ADODB.Connection')

Symptoms OS hang, sometimes with open file errors in journals Customer application degrades with errors "unable to open file", "too many open files" Hangs and third-party (compatibility) issues often require advanced data collection and are sophisticated to investigate. However, a quick check is possible: On a system where KESL has worked for some time (not immediately after reboot/restart), validate the output of the following command, ran as root, for numerous records of /usr/bin or /usr/sbin folders lsof | grep -E 'kesl.+DIR.+\/usr\/s?bin' Root Cause Under heavy load, KESL may display linear increase in file d…

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Description and cautions The original scenario located on the page https://support.kaspersky.com/kes11mac/diagnostics/15299, requires a lot of efforts and manual manipulations. I am offering a bit easier and time-saving approach doing the same. Details All the commands from the original document are saved here, but placed together and being run one after another consequently; the old product logs are also wiped up in order to avoid mess: Login under root: sudo -i …

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Please, follow the instructions below in order to create remote installation package for KES 12.5 patch (and probably newer versions): 1. Download the patch provided by our technical support. 2. Unpack the patch into a separate folder. 3. Make sure that the folder contains the patch file (.msp) and digital signature file (.kcat). 2. In KSC navigate to Advanced > Remote installation > Installation packages. 3. Click Create installation package. 4. Select option Create an installation package for the specified executable file. 5. Give …

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. In cases when you need to diagnose an intermittent network issue, or capture an event that occurs only once in a while, you may need to use ring-buffer mode in Wireshark. In this mode, the number and overall size of the capture files will be fixed and when the limit will be reached, the newest data will start continuously overwrite the oldest data in the capture buffer. Below, you will find instructions for how to configure this capture mode: Download and install Wireshark from the official website, if you have not done that already. Launch Wireshark and click Captur…

This happens because, when cloud mode is enabled, KES doesn't use a full version of antivirus databases, using KSN instead, therefore when the device loses access to KSN, KES can't provide the same level of protection. There are a few workarounds for this error: 1. Disable cloud mode, as described here: https://support.kaspersky.com/KESWin/12.5/en-US/155760.htm 2. If the Administration server has access to KSN, configure KSN proxy on the Administration server, as described here: https://support.kaspersky.com/KSC/14.2/en-US/89312.htm

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. You need a Mac device with macOS 14+ to supervise iOS device log via Apple Configurator Your iOS device will be reset to factory settings during supervising Download Apple configurator via App Store. Run Apple Configurator. Connect your iOS device. Unlock the device and tap Trust. Select your device and click on the Prepare button Select 'Manual Configuration'. Check 'Supervise devices' and 'Allow devices to pair with other computers' (if you want to allow it). Click on the Next button. …

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Problem Description, Symptoms & Impact KES File Threat Protection sometimes can't check Microsoft office documents from mounted Google Drive shares, therefore generating Processing error events. This issue is caused by an incompatibility between Google Drive VFS driver and KES. There are no plans on making KES compatible with Google Drive. Workaround & Solution As a workaround, add files with Office extensions stored on the share to exclusions, this shouldn't lower protection, because Office creates a temporary copy of a document when it is opened, which will not …

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. This article might be useful in the following cases: If you want to configure multi-vendor security on endpoints, keeping both Kaspersky and Microsoft technologies; If you don't know how to properly configure a Microsoft solution after installing KES; If you're having some issues with the product and the OS after configuring KES and Defender. The differences between the Defender products There are three different products: Windows Defender: an anti-malware solution for Windows 8, 8.1 and Server systems based on it. For details, see here. Micro…

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. There are multiple settings in both KES and KSC that allow to set notifications about various events. This article is based on example of setting complaint notification (message send to administrator if the users considers the blocking of the page to be mistaken). Let's review three main scenarios, when KES is connected to KSC (either constantly or intermittently) and when it is not connected. KES is always connected to KSC How to set To set address for email notifications go to Administration Server properties -> Notification delivery settings -> Notification a…

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Problem There are slight differences when connecting devices to the Wi-Fi network configured via Kaspersky Endpoint Security for Mobile in Android 10. The main difference is that the connection to the target Wi-Fi network is made automatically through the product installed on the device and can't be forced manually via device settings. Step-by-step description The following scenario demonstrates the correct way to connect the device to a Wi-Fi network, as well as what behavior is expected. Setting up the target Wi-Fi network in the Kaspersky Endpoint Secu…

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. There are 2 methods of installing iOS MDM on the user's device: Via AppStore (iTunes Store); Via Manifest URL (with manual placement of the package). How to install via AppStore Installation via AppStore involves a special key named App ID. This process is fully automatic and requires no actions from the KSC administrator. In KSC, you need to specify the application name (this name will be used in KSC event log) and the application ID. The application ID can be learned from its URL. Disregard the letters id. Example: Gmail has t…

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Step-by-step guide You need a Mac device to collect iOS device log via Apple Configurator. Download Apple configurator via App Store. Run Apple Configurator. Connect your iOS device. Unlock the device and tap Trust. Open the iOS device → Console. Reproduce the issue. Save the log in Apple configurator. Try to save the log as soon as possible after you reproduce the issue, because the log is constantly being overwritten. Send the collected log file to Kaspersky support for further analysis.

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Problem KSC and KS4Android are implemented but KSC is offline and could not access Internet. KUU can be used for updating KS for Android and distribute the update databases. But after running KUU (Kaspersky Update Utility), you cannot find actual KES for Android versions. Solution AV bases for new KESM versions will appear in KUU UI after running KUU with empty application list. The KUU settings should look like the following (in order to update the list of supported applications, you need first to press 'Start' with a blank application list as follows):

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. The KESMac 12 and the KESMac 11.3 patch C allows adding particular processes into the trusted section named Trusted Applications. The both filesystem and network activity of which can be ignored by the product increasing performance. Please, however, note that this could be potentially risky. https://support.kaspersky.com/KESMac/11.3_adminguide/en-US/194142.htm Problem This article will describe a few ways to configure KES for Mac to exclude some of the software from the scope of the product. Solution Trusted applications In order to have an ability…

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials. Problem In some cases KESMac is not able to start protection components: Or, the status "Allow encrypted traffic to be inspected" is not changing: Solution 1) Please get acquainted with the article https://support.kaspersky.com/kis20mac/error/15031#block1; 2) If the article above did not help, try to remove the FireFox user's profiles directory via Terminal: rm -rf ~/Library/Application\ Support/Firefox/Profiles Re…