Can someone please explain what is happening here? Why is KES reporting this? Is KES trying to connect to the mailserver and reporting itself to be suspuscious?
Event: Suspicious network activity detected
Application name: Kaspersky Endpoint Security
Application path: C:\Program Files (x86)\Kaspersky Lab\KES.12.2.0
User name: <Domain\user>
User type: Active user
Component: Protection
Event date: Today, 23-11-2023 08:39:37
Target server: <mailserver>
Account name: <Domain\user>
Number of attempts: 30
Interval (minutes): 2
Previous attempt: Today, 23-11-2023 08:24:37
Current attempt: Today, 23-11-2023 08:39:37
suspicious network activity reported by KES
in Kaspersky Endpoint Security for Business
Posted
Hi there,
Can someone please explain what is happening here? Why is KES reporting this? Is KES trying to connect to the mailserver and reporting itself to be suspuscious?
Event: Suspicious network activity detected
Application name: Kaspersky Endpoint Security
Application path: C:\Program Files (x86)\Kaspersky Lab\KES.12.2.0
User name: <Domain\user>
User type: Active user
Component: Protection
Event date: Today, 23-11-2023 08:39:37
Target server: <mailserver>
Account name: <Domain\user>
Number of attempts: 30
Interval (minutes): 2
Previous attempt: Today, 23-11-2023 08:24:37
Current attempt: Today, 23-11-2023 08:39:37