Kaspersky EDR Expert vs Kaspersky KATA platform with just KEDR license

[Abbas]

Hi every one,

I just have been confused!!

my license is Kaspersky endpoint detection and response Expert but I can add this into KATA platform(KEDR section).

KATA platform is OK. In Endpoint Agent part of product I can not use it to activate KATA component in KES.

It only activate Kaspersky Endpoint Detection and Response Expert but I can see this client in KATA platform!

Can you help me?🙏

[ElvinE5]

This license is not compatible with KATA it is a separate solution (cloud console)

https://support.kaspersky.ru/help/KEDR_Expert/en-US/220114.htm

 

For its operation, you must use the Cloud Console

https://ksc.kaspersky.com

and enable the client to install the appropriate components, and configure them.

Спойлер

 

At the same time, it should be taken into account that the KATA component and KERD-Expert do not work together ... you need to choose one thing.

 

[Abbas]

thank you dear.

yes that's right. but my question is why I can add this license into KATA Platform exactly in KEDR part??

I can use this license in client as EDR Expert license(your screen shot) and what I said later!!!! ???

It only works with Endpoint Agent, not EDR Expert component in KES (11.7 or later).

[ElvinE5]

The Endpoint Agent does not seem to have a mechanism for checking such a license and treats it as a simple EDR, the same with the KATA platform, which is why you can see them in your control panel.

However, I can not say how correctly this option will work.

I think for detailed explanations it is better to contact your partner at Kaspersky Lab, or through the technical support portal.

https://companyaccount.kaspersky.com/account/login

[Abbas]

Thanks.

 

[Arian.Mohammad]

You can use KEDR Expert on KATAP ( Kaspersky targeted attack platform) as an on-perm solution, that's why KATAP has two license sections, if you don't like to use the cloud solution for any reason, you can use KATAP as an on-perm solution. the difference is without a KATA(NDR) license, Network sources like SPAN, ICAP, Mail, etc...  would not function, and only endpoints telemetry, and objects would be analyzed. 

[Arian.Mohammad]

in fact, EDR Standard and Advanced morphed into EDR Expert.