Да. Именно так и настроена политика. Тоесть, чтобы такие задачи были видны на клиентской версии ПО нужно разрешить использование локальных задач, я правильно понял ?

Hello， 您当前系统内还有没有其它流量过滤产品，反广告软件或者加速器产品？全部移除它们。

操作系统： 版本 Windows 11 专业工作站版 版本号 25H2 安装日期 ‎2025/‎9/‎2 操作系统版本 26220.6982 体验 Windows 功能体验包 1000.26100.266.0 卡巴斯基版本：卡巴斯基反病毒软件21.3.10.391(M) 问题：与Adguard驱动不兼容，导致多次蓝屏。Adguard版本为7.22.0(5225)。 Dump文件分析：103125-18875-01.dmp

День добрый. Все зависит от типа задачи. Посмотрите настройки в политике здесь. (при такой настройке на клиенте видны будут только групповые задачи)

У нас стоит корпоративный Windows 10 LTSC и Kaspersky Endpoints Security. На сервере настроили доступ к usb-flash накопитель для всех пользователей. Потом было необходимо откатиться на точку восстановления. После этого доступ к флеш-носителю пропал. Порекомендуйте, пожалуйста, как вернуть доступ.

Hello @voseco Welcome back! KIS is Kaspersky's *old* software, it's been replaced by Kaspersky STANDARD, Kaspersky are offering a *free* upgrade, *read*, Kaspersky: Basic, Standard, Plus, Premium - info & FAQ, by Kaspersky - Danila T. The Kaspersky Standard download link is: https://www.kaspersky.com/downloads#update-product. Intrusion Prevention and Network Attack Blocker, are 2 different modules. KIS doesn't have Intrusion Prevention, in KIS the same module is called Application control -> *which* Kaspersky software is *actually* installed: on Windows Task-manager *Hidden-icons*, rightclick the Kaspersky icon, select About, post back the About information please? IF / when network attacks are active - they'll be logged in the Network Attack Blocker Report - *read* -> Network Attack Blocker Report. *Read*: Reports window IF / When there's an attack there may be events logged similar to: "DoS.Generic.Flood.TCPSYN, the same minute as one of the Scan.Generic.PortScan.TCP notifications." *IF (your) report window shows *no* events it may mean there are no events OR possibly, the 'Save in Local Report' option has been unchecked - check in configure Notifications: Understanding the Notifications Scan.Generic.PortScan.TCP: This notification indicates that Kaspersky detected what it interprets as a port scan. Port scans are commonly used to check which ports are open and listening for incoming connections on a device. This action in itself is not necessarily malicious, as some network processes (especially legitimate ones within your own network) might trigger this alert. DoS.Generic.Flood.TCPSYN: A DoS (Denial of Service) flood attack notification means that Kaspersky detected a surge in SYN (synchronization) packets. A SYN flood attack typically involves an attacker trying to overwhelm a device by sending a high volume of connection requests. Reset the router to factory defaults, update passwords & monitor for this notification, if it appears contact KCS - see the last dot-point. Router Scanning Internal Network: Some routers have built-in features to scan internal networks for active devices and may periodically query connected devices, which can trigger port scanning alerts. These scans are usually benign. Network Monitoring Services: Certain services on the router may actively monitor the network, especially if you have advanced settings enabled, which could trigger TCP scans. Some routers may do this to detect devices on the network or check connectivity and traffic flow. False Positives: It’s possible that Kaspersky is misinterpreting regular network behavior as a port scan. Many antivirus and security software suites may flag standard network activities as potentially suspicious, especially on a local network where a device (in this case, the router) frequently communicates with multiple devices. Steps to Address the Issue Check Router Logs: Access your router’s admin interface and look at the log settings to see if there are any scans or active network monitoring events that might correspond with the timestamps of the notifications. Disable Unnecessary Router Features: If your router has network management or scanning features, try disabling them temporarily to see if the notifications stop. Look for settings related to Network Discovery, Diagnostics, or Intrusion Detection. Adjust Kaspersky’s Network Settings: In Kaspersky Premium, you can customize the settings for Network Attack Blocker. Adding your router to a trusted devices list or lowering the sensitivity of attack detection for the local network could reduce these alerts if they are indeed false positives. With Kaspersky Standard this isn't possible. Run a Manual Security Scan: If you haven’t already, run a full security scan on all devices connected to the network to ensure there aren’t any infected devices that could be inadvertently sending out suspicious packets. Observe and Monitor: Reset and update passwords, keep an eye on the notifications. If the frequency decreases or the alerts stop altogether, it’s likely that these were routine scans or a temporary anomaly. When to Take Additional Action If these notifications continue and you notice any unusual network behavior—such as significantly reduced performance, new unknown devices appearing on your network, or more attack alerts targeting different MAC addresses—then it might be worth deeper investigation by Kaspersky Customer Service, Kaspersky Support: https://support.kaspersky.com/b2c#contacts. Thank you🙏 Flood🐳+🐋

In the logs of the anti-intrusion module, there is nothing but service started/stopped, service started/stopped, ... the logs do not have any mention of a prevented intrusion or network attack does this mean nothing was ever blocked or are attacks not logged?

Hello @K0908 & @Just me, Welcome back & welcome! Please zip the file causing the alert, protect the zip-archive with a password, use either MALWARE or INFECTED, log a case directly with Kaspersky Customer Service: https://support.kaspersky.com/b2c#contacts-> request they send the case to: Kaspersky Virus Lab to analyse the issue, always provide a *detailed-history* = full device OS & build, software version, problem start date, new problem, ongoing problem, actions taken to remediate, etc, fill in the template as shown below & *read*: False detections by Kaspersky applications. What to do? Please share the outcome with the Community, when it's available? Thank you🙏 Flood🐳+🐋