I hope you are doing well . 

May i know if Kaspersky EDR can automatically block process / take response based on certain behavior? If so , What other automated responses can be achieved by Kaspersky EDR based on certain behavior?

Best Regards

we initially installed version 7.1 of the Central Node .

After entering the required values (450 GB for Events and 300 GB for Storage for an environment of around 500 workstations and 15 servers), we proceeded with the creation of the SSO account. The SSO account is now accessible and working properly.

However, for the ADMIN account, the same issue still persists during login with the following error message:
“Expected token not found”.

the screenshot attached.

Thank you for your help.

Best regards,

I hope you are doing well . What i understand that KATA comes with built-in NDR . 

So may i know the response options/tools for KATA ?

Best Regards

I currently have deployed on my company the "Kaspersky Next EDR Optimum" solution and we've been thinking of upgrading to XDR once the actual license expires in a few months.

From what i have seen online and heard from other IT specialists, XDR does not work like EDR Optimum/Foundations i.e. : it does not use Kaspersky Security Center but uses OSMP instead. I tried looking up online some migration guides and i found only this KB (Migration to Kaspersky Next XDR Expert) that explains how to go from KSC Win to KSC Linux in the Next XDR conetext, which has gotten me even more confused

Anyway, i would be extremely grateful if someone who has done this before could give me an idea about it.

Thanks

We are encountering an installation issue with Kaspersky Endpoint Security on our Oracle Linux 8.0 server. Below are the details of the environment and the issue for your reference.

System Information:

Operating System: Oracle Linux 8.0

Perl Version: 5.26.3 (already installed)

License Type: KEDR (Offline setup, no internet connectivity)

Issue Description:

We attempted to install the following package:
kesl-12.3.0-1162.x86_64.rpm

Permissions were set using:

chmod 777 kesl-12.3.0-1162.x86_64.rpm

The installation command used was:

sudo rpm -i kesl-12.3.0-1162.x86_64.rpm

However, the following error occurred during installation:

error: unpacking of archive failed on file /opt/kaspersky/klnagent64/bin/integrity_checker;6900b5ed: cpio: Digest mismatch
error: klnagent64-15.4.08952.x_86_64: install failed

We also attempted to install the Network Agent package using:

sudo rpm -ivh klnagent64-*.rpm

but encountered the same issue.

Please note that this server does not have internet connectivity, so online repository or activation is not possible.

Request:

Kindly provide the exact step-by-step offline installation procedure (including any prerequisites or verification commands) to correctly install both:

Kaspersky Endpoint Security for Linux (KESL 12.3)

Kaspersky Network Agent

Best Regards,
Ravindu

I would like to clarify the following scenario:

Is it possible to manage the on-premise EDR Expert component through the Kaspersky Security Center Cloud Console, while the on-premise web console is configured as a slave server to the Cloud Console?

The reason for this setup is that I currently do not have the resources to deploy KATA, but I still need to manage the EDR Expert components centrally from the cloud. For context, I installed EDR Expert via the MMC console and activated the EDR Expert component in the package.

Could you please confirm if this configuration is supported or provide guidance on the recommended approach?

Thank you in advance for your support.

I want to purchase the Kaspersky Anti Targeted Attack Platform official course . Can anyone advice how I can ourchase it 

The client has a Kaspersky Next EDR Expert License, and we have the following questions regarding the deployment of KATA 7.0 on the client environment for 3000 workstations that will be connected to KATAP as endpoints.

1. Is it possible to install KATA 7 on both physical servers and VMware Esxi ? What are the system requirements for each type of installation, and will deploying on VMware Esxi require additional resources? What kind of deployment do you guys think is best?

2. If we use VMware Esxi to deploy KATA 7.0, do we need to configure RAID 10?

3. How can we effectively deploy KATA? What steps would you advise taking to prepare before deploying it?

4. Share system requirements for KATAP's all-in-one deployment (processing, storage, and sensor) for both the physical and VMware Esxi deployments for three thousand workstations.

Regards

Ahnaf Tahmeed

Hello,

I have a central node fully configured with the sensor version 7.0.
However, the NDR status on the central node is showing "Operation disrupted."

Could you please assist me with this?

CPU : 32 cores @ 2.10GHz

RAM : 96GB

HDD : 2.2TB Single disk subsystem (RAID 1)

Can i somehow upgrade it to 5.00 , Please share complete guide how to upgrade it and what type of challenge i may face during up-gradation.

KATAP is deployed in Physical (Bare Metal)

I am currently evaluating your Endpoint Detection and Response (EDR) solutions and am particularly interested in understanding the differences between KATA EDR, KEDR Optimum, and KEDR Expert. Could you please provide a comprehensive comparison that includes the following aspects?

Core Features: What are the primary functionalities of each product? How do they differ in terms of threat detection, investigation, and response capabilities?
Deployment Options: Are there any differences in how these products can be deployed within an organization's infrastructure? Do they support cloud, on-premises, or hybrid models?
Integration Capabilities: Can these products integrate with other security tools such as SIEM, SOAR, or XDR platforms? If so, what are the specifics of their integration abilities?
Management and Usability: How do the management interfaces compare across these products? Is one more user-friendly or better suited for specific types of organizations (e.g., SMEs vs. large enterprises)?
Pricing and Licensing: Although detailed pricing might not be available publicly, could you give an overview of how licensing works for each solution? Any information regarding potential cost differences would be helpful.
Support and Services: What kind of customer support and additional services are provided with each product? Are there differences in SLAs or support packages offered?
Understanding these details will greatly assist me in making an informed decision about which product best fits our organization's needs.

Thank you in advance for your assistance.

— Useful tips & tricks
— Release info and support lifecycle updates
— Support website updates
— New articles
— And more

Stay informed. Stay secure.

Since I have no ability to get that much hardware to deploy KATAP in on-prem

Could you please assist me in resolving the following issue? All devices are encountering a connection problem with the central node during KSC events, despite being correctly connected to the central node on the dashboard without any issues.

Thank you for your attention to this matter.

Kind regards,

During installation or upgrade of CN from KATA 5.1 to 6.0. 

Does it require internet access for the address to registry.kata.avp.ru?

If required, how can I install/upgrade it from an environment with no internet access?

I am already using EDR Optimum for On-Prim Environment.

But I and seeking to use EDR Expert.

Is it possible to use the EDR Expert license for On-Prim Environment or I must have a Cloud Console Environment ?

an error message was prompted.

Anyone could help. Thanks!

I just have been confused!!

my license is Kaspersky endpoint detection and response Expert but I can add this into KATA platform(KEDR section).

KATA platform is OK. In Endpoint Agent part of product I can not use it to activate KATA component in KES.

It only activate Kaspersky Endpoint Detection and Response Expert but I can see this client in KATA platform!

Can you help me??