Everything posted by kashif
Thanks for your prompt response. You mentioned that Event information is delivered to Administration Server immediately after the event has occurred. What if when the event occurs but the endpoint is not connected to the admin server, will this endpoint forward this event when it connects back to the server in a later time? Thanks again for your help.
We have a SIEM deployment and our requirement is to make sure we get all endpoints logs. However, I want to confirm that if a client computer is not on our corporate network and registers some events like USB scan, will this forward these events to the Kaspersky Security Center Server as soon as they become connected to our corporate network? Your urgent response will be highly appreciated.