Creating an application category that includes executable files from selected devices

Expand all | Collapse all

You can use executable files from selected devices as a template of executable files that you want to allow or block. Based on executable files from selected devices, you can create an application category and use it in the Application Control component configuration.

To create application category that includes executable files from selected devices:

1. In the main menu, go to 操作 → 第三方应用程序 → 应用程序类别.

   The page with a list of application categories is displayed.

2. Click the 添加 button.

   The New category wizard starts. Follow the steps of the wizard.

3. On the 选择策略创建方法 page of the wizard, specify the category name and select the 包含所选设备上可执行文件的类别。这些可执行文件被自动处理，它们的度量数据被添加到类别中 option.
4. Click 添加.
5. In the window that opens, select a device or devices whose executable files will be used to create the application category.
6. Specify the following settings:
   • Hash value computing algorithm

     Depending on the version of the security application installed on devices on your network, you should select an algorithm for hash value computing by Kaspersky Security Center Linux for files in this category. Information about computed hash values is stored in the Administration Server database. Storage of hash values does not increase the database size significantly.

     SHA-256 is a cryptographic hash function: no vulnerabilities have been found in its algorithm, and so it is considered the most reliable cryptographic function nowadays. Kaspersky Endpoint Security for Linux supports SHA-256 computing.

     Select either of the options of hash value computing by Kaspersky Security Center Linux for files in the category:

     • If all instances of security applications installed on your network are Kaspersky Endpoint Security for Linux, select the SHA-256 check box.

     Select the MD5 哈希 check box only if you use Kaspersky Endpoint Security for Windows. Kaspersky Endpoint Security for Linux does not support the MD5 hash function.

     The Calculate SHA-256 for files in this category (supported by Kaspersky Endpoint Security 10 Service Pack 2 for Windows and any later versions) check box is selected by default.

     The Calculate MD5 for files in this category (supported by versions earlier than Kaspersky Endpoint Security 10 Service Pack 2 for Windows) is cleared by default.

   • 与管理服务器存储库同步数据

     Select this option if you want that Administration Server periodically to check changes in the specified folder (or folders).

     By default, this option is disabled.

     If you enable this option, specify the period (in hours) to check changes in the specified folder (folders). By default, scan interval is 24 hours.

   • 文件类型

     In this section, you can specify file type that is used to create the application category.

     所有文件. All files are taken into consideration when creating the category. By default, this option is selected.

     仅应用程序类别之外的文件. Only files outside the application categories are taken into consideration when creating the category.

   • 文件夹

     In this section you can specify which folders from the selected device (devices) contain files that are used to create the application category.

     所有文件夹. All folders are taken into consideration for the creating category. By default, this option is selected.

     指定文件夹. Only specified folder is taken into consideration for the creating category. If you select this option you must specify path to the folder.

When the wizard finishes, the application category is created. It is displayed in the list of application categories. You can use the created application category when you configure Application Control.