Kaspersky EDR Optimum

Hello, Can I add my linux servers to monitor in my Kaspersky Next EDR Optimum ? I only see agents for windows and Mac Thank you

Does Kaspersky EDR Optimum provide any feature to monitor or investigate the websites accessed by a specific user? I need to confirm whether Kaspersky EDR Optimum includes functionality to investigate web browsing activity or identify the websites being accessed by a particular user in my environment

Dear Kaspersky Community , I hope you are well. I would like to inquire about the Kaspersky NEXT EDR Optimum solution and its capabilities. Could you please help me with clarification on the following points? Does the solution allow for a hybrid deployment, enabling part of the endpoints to be managed via a local console and the other part through the cloud console? If so, is it possible to manage both from a single unified console? Are the stored logs encrypted or stored in plain text? Is it possible to manage Windows system updates with this solution as a replacement for WSUS for both cases (local and cloud)? Could you also provide the techn…

Good morning, Kaspersky team, I hope this message finds you well. I would like to address a concern regarding the Kaspersky Next EDR Optimum Latin America Edition service we are currently using. Our company operates with different security profiles tailored to specific business needs, including a dedicated security profile for servers. The issue we are facing relates to the configuration of the schedule for database updates and antimalware scans. We noticed that the dashboard allows us to set a schedule for these tasks; however, this configuration seems to apply globally to all profiles, which negatively impacts the server profile. Due to the critical natur…

Hello everyone, I deployed recently the EDR Optimum solution for my company. I am currently looking for where can I found recent databases of .ioc files to add them in my IOC Scan task. I've found few resources on GitHub but they were either too old or in another format. I thought about an Misp or OpenCTI Instance to but I'm not sure if I can export .ioc files from them. Finally I found AlienVault OTX but when I try to add the .ioc file in my task it doesn't work. If you have any ideas I'd love to hear from you. Thanks in advance !

Hi Everyone, Does Kaspersky EDR Optimum only have a Remote Wipe function? I'm looking for a solution that allows me to either lock or wipe a laptop remotely. I don’t want a wipe-only function. Could someone please advise if EDR Optimum offers this capability or suggest an alternative solution I could consider? Thanks in advance for your help! Kind Regards,

I wanna enabe EDR for Windows and Linux endpoints via KSC web console, but I doesn't find Adaptive Anomaly Control to enable it. And when I enable EDR and save it, this below popup appears. How can I fix it?

My client uses ksc.kaspersky.com. He needs a distribution point with an internet connection, as well as the ability to manage some workstations (by installing keswin, net agent, and setting policies) that are not connected to the internet but are connected to the DP via WLan. So, how do I add workstations to the cloud console via the distribution point and manage them? Please offer appropriate guidelines. What are the requirements for setup how to configure networking between DP and Workstations, and which programs should I download before starting a remote session? I'm using the trial version of cloud advance on the ksc console. I'd like to deploy this in our test e…

Hello every one, I am working with a customer who needs to install EDR Component for almost 6000 machines, we have installed EDR component for as much as we could we need to export a report where EDR component is not installed (note the status of not installed edr component which ksc displays is "not supported by license), this makes confusion to us, as we are not able to get the right number of devices where EDR is not installed

I was researching Kaspersky EDR Optimum as I was interested in the plans. Additionally, he would like the use of the cloud resource. But I heard that to use the cloud I need 300 licenses. Is this true? I would like to know if there is a minimum and maximum license limit to use in the cloud as I didn't find any information on the internet, much less in the datasheet.

We recently encountered an issue regarding the identification of Exploit.Win32.Generic on Office files. This file is important and related to the administrative section. Despite having Optimum EDR, there is no capability to examine the exploit method and address the issue.

Hi friends: I have read the following online help about indicators of compromise: https://support.kaspersky.com/KESWin/11.7.0/en-US/213408.htm Hi Kaspersky: We have Kaspersky EDR optimum which let us add IoC from security center. I have questions: 1. If KES can detect and block a certain malicious code or activity. Do we need to add it to IoC? 2. What's the difference between KES block and IoC block? In my opinion, if a certain malicious code is found by our team but KES has not detect it, we should add IoC in our organization so it will b…

Hello, good afternoon, I am using the web version 15 LINUX but from what I have seen I cannot find the ALERTS section of the EDR module in the console, does anyone know how to activate its display again? If I go to the reports there I do see the EDR module but it is difficult for me to see the reports to interact with the EDR module

I did the EDRO deployment on several devices, some have "FAILURE" in component change. Checking they have the correct license but they show "INCOMPATIBILITY WITH THE LICENSE" and in events it shows that the endpoint is being updated, when it is not (IT WAS VERIFIED). When removing and installing the endpoint again, it works normally again. How to fix this problem?

I see Kaspersky Endpoint Security for Business ADVANCED contains EDRO. And I activated Kaspersky Endpoint Security 12.1.0.506 by KSC 13.2. It shows EDRO not covered by license on Kaspersky Endpoint Security. WHY ?

I need to know how I can carry out the usb blocking policy but for a specific device. It doesn't work for groups or do it per user

Hi, I created an IOC task in the KasperskySecurity Center web console and ran the Scan IOC task. When the scan finished, it turned out that Google Chrome and Notepad were removed from the computer. I would like to know if there is a solution to this problem.

I am installing Kaspersky EDR. I installed Central Storage 1, then I installed Central Process 1. The problem appeared when I installed Process 2 after that. The error message "during node authorization kaspersky" appears. How can I fix this error. I use Cluster for my model

Hi, i can't find out how to enable EDR optimum on installed kasperky for Windows Server. I followed this video for the client, but it seems doesn't work for server.

I have some problems, i have EDR in my organization. I made some tests using a EICAR and i could see the "incident card", but now when i try open this doesn't happen. Anyone now how can i fix this?

Hi, All is in the title : How to know that EDR is deployed on client side ? Thank !