Jump to content

jjb2

Members
  • Posts

    5
  • Joined

  • Last visited

    Never

Posts posted by jjb2

  1. Hi, I just managed to fix the problem. The package downloaded from the distro center in the cloud does not contain the BAD USB component enabled by default. These are precompiled settings by Kaspersky Lab so it is not possible to modify this package on my Windows machines. My and my IT team decided that we will move away from the policy management directly from the cloud portal and we've deployed Kaspersky Security Center v.11 on one of our spare servers. Keep in mind that the standard package available in the deployment sub-menu does NOT contain BadUSB prevention enabled by default. However, this is a single click intervention and then !TADA! the bad usb protection is there and it is working quite well There is only one drawback of the entire situation - we must remove "old packages" from quite a few PC's and then install the KES again - but this is minor a minor problem because it will take about few hours to complete (as compared to potential security threats which are emerging).
  2. Hi, Yes - these are corporate laptops in corporate network. So we have a set of GPO's in our network (for example mass-storage devices are also locked using the GPO). All the devices are associated with specific profile in the Kaspersky Security Cloud (like content filtering, protection levels, ... ) and this functionality seems to work. All I want now is to enable the badusb attack prevention. Kind regards, Jacek
  3. Hi I did a check on my lab pc. The BadUsb prevention is not available in the GUI and this functionality is not visible in the Security Cloud Panel either. I bought 35 licenses for Endpoint protection but this particular feature seems disabled (no BAD USB protection in the basic threat detection). It is also not possible to modify app settings - the modify and "repair" features are disabled. Finally - I bought myself a USB stick to emulate the "badusb" behavior. Windows successfully installed that USB and there was no action from KASPERSKY (it was not blocked - whilst it should be). Please help to fix. Kind regards, Jacek
  4. Hello, I have the Kaspersky Security Cloud (KES 11) deployed in our organization. I want to enable the BadUsb protection on all devices and I want to do it automatically on all devices. I was trying to login to some test machines remotely to enable this feature (modify the software settings using the control panel) however all our KES installations are running under "profile security" and thus "modify software" in control panel is disabled. Is there any way to enable this feature remotely by using some administrative templates like GPO's ? We've recently seen some BadUsb attacks therefore the case is urgent and any help will be greatly appreciated. Kind regards, Jacek
×
×
  • Create New...