Kaspersky Security for Internet Gateway

Dear Kaspersky Support Team, We have received a suspicious phishing email targeting our users through our mail system. We are currently using Kaspersky Gateway Security with a valid license and would like your assistance in investigating this incident and applying a permanent protection solution. The suspicious email details are: Sender: *****@*****.tld Subject: Leave/Vacation schedules are ready for qualified staff We request the following: Full analysis of the email headers and source. Verification whether the sender address is spoofed. Identification of the originating IP address and mail route. Recommendations to permanentl…

it is a fresh installation. debian. with kapseprsky web traffic sequrity gettting Database update Failure how to fix?

I want to deploy and configure KWTS without AD , Is it possible in any way

Hello , Can you help me recover my forgotten password for Administrator web password for kaspersky mail gateway I have only access to the Hypervisor with SSH Thanks

Hi, I need to know if exist a MIB objects for Kaspersky Web Traffic Security that support monitoring interface traffic For example: Bandwidth % used in the intefaces. Bandwidth used for the clients. # of clients connected in each node. Thanks in advanced!

Hi all, Would some of you have examples of rules creation within KSIG ? My goal would be not the scan ISO images bigger than 100MB. I came with this although was wonder if the mime type isn't perhaps to "broad" so to speak: Bypass Rule Traffic filter HTTP Content-Length, KB greater than or equal to 100240 KB --- AND --- MIME type of HTTP message application/octet-stream It works as intended although if anyone might have better or sharper, it's welcome. Let me know, Kind regards, M.

What should we do to have sites get categorized/classified ? Isn't it an automatic action based on some KWTS database ?

EICAR.COM test file from "https://www.eicar.org/download-anti-malware-testfile/" is detected and blocked, BUT! EICAR_COM.ZIP is detected and ALLOWED to be downloaded. Is it OK ? It seems not...

We have key-file with suitable licence number. How to import it ?

How to get trial license ?

Hi, i got a new licence and Activation Code for Web Traffic Sec on my Squid proxy. In the Settings at the web-gui there is a "licence" subject, but it only allows to *delete* the active key. Not to add / update one. Do i have to delete the key first, before updating the new one? Will Kaspersky halt if i delte the existing key and kill all my users connections? I am afraid, i need some help here. The docs are not usefull on that... regards Sachbearbeiter

Hi all, A possible way of serving a "proxy.pac" file from your KWTS "all in one" appliance (.ISO based setup) --> please note that this might not be officially supported Obviously, you need SSH access to your KWTS appliance. ----> edit /etc/nginx/mime.types and add the following line where it alphabetically belongs, respecting the identation: [root@kwts ~]# vim /etc/nginx/mime.type types { ~ application/x-ns-proxy-autoconfig pac; ~ } ----> create a folder which will be hosting our .pac file: [root@kwts ~]# mkdir /usr/share/nginx/pac ----> create /etc/nginx/conf.d/pacserver.conf (you need to edit the lines below according to your wanted sche…

Hi all, Continuing my testings, like it more and more ? I actually found out that the integrated squid proxy would send out the VIA & X-FORWARDED-FOR HEADERS if not specifically disabled. Here is what I've done in order to disengage these settings (caution: this might not be supported at all): ---> Edit the squid.conf.template file + addons = last tree lines of the snipet below: [root@kwts ~]# vim /opt/kaspersky/kwts-appliance-addon/share/templates/squid.conf.template {#-* This is a template for generating a configuration file *-#} ################################################################################ # This file was generated automatica…

Hi there KTeam, I'm currently testing KWTS and honestly I'm very pleased with the appliance, stunning stuff!! I've been a bit astonished that multi-homing or multiple Ethernet interfaces doesn't seems to be endorsed by default, simple stuff like "trusted/untrusted" interface was my goal. Nevertheless, I found ways to enable KWTS in the layout I've wanted (perhaps not supported) and let me share that with you: ----> You need a public/private key pair in order to be able to access the KWTS Technical Support Mode (SSH): ----> creating the key pair: ssh-keygen -o ----> You then need to upload the public key on KWTS Web Admin for being able to connect o…