Jump to content

rmilman

Members
  • Content Count

    5
  • Joined

  • Last visited

About rmilman

  • Rank
    Candidate
  1. Thank you for the quick reply MikroTik, I understand your answer. Do you know of a 'Best Practice" document for setting up KES. We do not have the System Watcher protection enabled, simply because we were not sure of impact to system performance. Regards, Rob
  2. Hi Dmitry, Please clarify what you mean by KES build. Do you mean version number? We are running Version 10.1.249 of Kaspersky Security Center. 10.1.249 of Network Agent and 10.2.1.23 of Protection version. Thanks, Rob
  3. We have KES 10 running in our environment. Today a .zip file was sent to my boss via e-mail. He wasn't expecting it, so he alerted me to investigate. I received a copy of the .zip file and manually scanned it. Kaspersky detected that it was infected with Trojan-Downloader.Win32.Upatre.apjz. We have mail-antivirus turned on and configured to scan archives with medium heuristics. I sent a copy of the .zip file to myself and Kaspersky did not detect it. I turned up the heuristics to deep scan and enabled the Outlook plug-in and e-mail the .zip file again. Kaspersky still does not detect it. Mail Anti-Virus setting are as follows: Scope: Incoming and outgoing messages Connectivity: POP3/SMTP/NNTP/IMAP traffic Additional: MS Outlook plug-in Scan of compound file: Scan attached archives Attachment filter: Rename specified attachment types; .bat, .com, .exe, ,js, .jse, .msi, .scr, vbe, .vbs Additional: Heuristic Analysis: deep scan Can any of you help me to understand why Kaspersky will not detect this virus in the e-mail? Thanks, Rob
  4. How do I refresh the Vulnerabilities Report? Right now it's reporting on over 1000 computers, yet we have less than 400. I've refreshed it, cleared my event logs, changed the setting to show only critical vulnerabilities. Yet I get the exact same report every time. This has given us very little confidence in the vulnerability reporting capabilities of Kaspersky. Running: KSC 10.1.249 with KES 10.2.23 and KSCNA 10.1.249 Thanks, Rob
×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.