How to use wildcard in KSWS/KESS exclusions [Kaspersky Security for Windows Server]

[Antipova Anna]

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials.

KSWS/KESS use * as a wildcard character. There are multiple ways to use it.

Examples

Masks without paths

1. *.exe - all files with extension *.exe
2. test - all files with name test

Masks with absolute paths

1. C:\dir\*.* - all files in folder C:\dir\ and its subfolders
2. C:\dir\*.exe - all files with mask *.exe in folder C:\dir\ and its subfolders
3. C:\dir\test - all files named test in folder C:\dir\ and its subfolders
4. C:\dir\ - all files in folder C:\dir\ and its subfolders

Masks with relative paths

1. dir\*.* - all files in all folders named dir and their subfolders
2. dir\*.exe - all files with mask *.exe in all folders named dir and their subfolders
3. dir\test - all files named test in all folders named dir and their subfolders
4. dir\test*.* - all files which name begins with test and has extention in all folders named dir and their subfolders (for example, C:temp\dir\sub\test2.exe will be excluded )
5. dir\ - all files in all folders named dir and their subfolders

Masks with absolute and relative paths will be applied to subfolders only in case if in TZ rule settings option «Use in subfolders» was enabled. Otherwise rule will be applied to the specified folder only. 

 

dir\ and dir\* have the same result.

 

Combinations such as dir\*\ can be used. "*" will be interpreted by the product as any number of folders with any names. For example below paths will be excluded:

c:\abc\dir\cde\fgh\file.exe

c:\abc\dir\cde\fgh\file2.exe

etc

 

Combinations such as dir\*\dir1\*\dir2\ can also be used. Usage example:

c:\abc\dir\cde\dir1\fgh\ijk\dir2\file.exe

 

Subfolders in above mentioned examples will also be excluded in case if «Use in subfolders» option was enabled.

 

Masks acceptable while adding trusted processes:

c:\dir1\dir2\fil?.exe

c:\dir1\dir?\fil?.exe

c:\dir1\dir2\*.exe

c:\dir1\*\some_file.exe