How to add domain\site name in exclusions of KSWS Traffic Security component [Kaspersky Security for Windows Server]

[Antipova Anna]

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials.

Sometimes you may need to add a particular site\domain to an exclusions list of Traffic Security.

Unfortunately, at current moment KSWS console allows us to make exclusions ONLY for Ports, IP-addresses, and Processes:

 

 

But we have ability to make site and domain exclusions for Traffic Security via registry workaround.

To implement workaround, we need to create and fill following REG_MULTI_SZ key:

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KasperskyLab\WSEE\11.0\Environment\ICAP\IgnoreDomains]

To make changes in this hive, you can add necessary permissions to your account OR you can run regedit in SYSTEM context (psexec -s -i regedit.exe).

 

Important

Besides required domain names, we recommend to add the following default list of names to avoid breaking of Windows Updates and KSWS activation functionality:

*.data.microsoft.com
*.update.microsoft.com
*.kaspersky.com
*.rds.amazonaws.com
*.s3.amazonaws.com
*.blob.core.windows.net
*.database.windows.net