
For more information about port numbers, protocols, and their functions, see this article. To use the full functionality of Kaspersky Security Center, you must manually set rules to allow ports.
Predefined rules for the Windows Firewall Management policy provide fulfillment for the basic interaction between local computers and Kaspersky Security Center Administration Server. On the Firewall Management task launch the following rules types are automatically erased from the Windows Firewall rules list:. When the Firewall rule scope consists of one IP-address only, the IPv6 format support is unavailable. The Device Control task blocks any connections with MTP devices when in Active mode. The Log Inspection task detects potential Kerberos (MS14-068) attack patterns only on computers running Windows Server 2008 and higher in the role of a domain controller with installed updates. In case of problems while using DEP mitigation technique for protection of processes, contact Technical Support. Simultaneous usage of DEP mitigation technique with switched-off system DEP may lead to operation errors of the protected processes and the operating system as a whole. The Exploit Prevention component does not protect applications installed through the Microsoft Store on Windows Server 2012 and Windows Server 2012 R2. iSwift technology is not applied when scanning in Windows Server 2016 containers. Exclusions from the Trusted Zone are not applied when scanning in Windows Server 2016 containers. It is still possible to scan SFX archives without scanning all other archives.
When archive scanning mode in the Kaspersky Security for Windows Server security settings, the application automatically scans both objects in archives as well as objects in SFX archives. Scanning of archive objects is not available without scanning SFX archives.Upon connection, anti-virus scanning of MTP devices is unavailable.
On-Demand Scan, File Protection, Anti-Cryptor, Exploit Prevention If the component was installed and the Traffic Security task was started before installation of Agent, restart the Traffic Security task. The Administration Server Agent detects the Traffic Security component when attempting to connect to the Administration Server, which is why we do not recommend that you install Network Agent before deploying the Traffic Security component.
The application only works with TCP traffic.The Traffic Security component is available only on Microsoft Windows Server 2008 R2 and newer.The Opera Presto Engine web browser reports an attempt to connect using an untrusted certificate if Kaspersky Security for Windows Server is used to protect HTTPS traffic.Protecting the VPN traffic is not recommended (port 1723).