Known issues

Kaspersky Security Center Web Console has a number of limitations that are not critical to operation of the application:

• If you change the time or time zone on your device, you must restart the Kaspersky Security Center Web Console service.
• If a proxy is used on the device, and the proxy environment variables are set, the Kaspersky Security Center Web Console installer may freeze.
• If you update the plug-in for Kaspersky Endpoint Detection and Response Optimum and then reissue the certificate for Kaspersky Security Center Web Console, the plug-in for Kaspersky Endpoint Detection and Response Optimum is automatically reverted to the version that was included in the distribution kit.
• When you import the Download updates to the repositories of distribution points or Update verification task, the Select devices to which the task will be assigned option is enabled. These tasks cannot be assigned to a device selection or specific devices. If you assign the Download updates to the repositories of distribution points or Update verification task to specific devices, the task will be imported incorrectly.
• If you perform Active Directory polling by using a Linux distribution point with Network Agent version 15 installed, you can poll only Active Directory domains for which you specify the address and user credentials. Polling of the current Active Directory domain and the Active Directory domain forest is not available.
• If an Application Control rule is based on an application category that includes applications detected on Linux devices, the rule does not work. When you select applications from the applications registry to add them to an application category, make sure that you select the applications detected on Windows devices.
• If an application from the Applications registry section was detected on a Linux device, the application properties do not contain information about related executable files.
• If you install Network Agent on a device running the ALT Linux operating system through a remote installation task and you run this task under an account with non-root privileges, the task fails. Run the remote installation task under the root account, or create and use a stand-alone installation package of Network Agent to install the application locally.
• If a list contains more than 20 items that are displayed on several pages and you click the Select all check box, Web Console selects only those items that are displayed on the current page. Note that this does not apply to the lists in the Managed devices, Device selections, and Tasks sections, where you can select all items from the list.
• After a local task IOC Scan is complete, the task status is displayed as Scheduled.
• Client devices might not be found after running Windows network polling.
• In the Kaspersky Endpoint Security for Windows policy, when you select and apply an application category while configuring the Application Control feature, the category is applied, but it is not displayed as a selected one after you save and reopen the policy.
• After disabling the KSN Proxy service, the devices in the Managed devices group change their status to Critical, but the devices in subgroups are displayed with status OK.
• If case sensitive collation is set for the database that you use for Kaspersky Security Center, keep case when you specify a device DNS name in the device moving rules and auto-tagging rules. Otherwise, the rules will not work.
• In the Add secondary Administration Server wizard, if you specify an account with enabled two-step verification for authentication on the future secondary Server, the wizard finishes with an error. To resolve this issue, specify an account for which two-step verification is disabled or create the hierarchy from the future secondary Server.
• While signing in to Kaspersky Security Center Web Console, if you use domain authentication and specify a virtual Administration Server to connect to, then you sign out, and then try to sign in to the primary Administration Server, Kaspersky Security Center Web Console connects to the virtual Administration Server. To connect to the primary Administration Server, reopen the browser.
• An incorrect status of a local task may be displayed in the task list in the device properties.
• The Quick/Full Windows network polling returns an empty result.
• If you install Kaspersky Security Center Web Console with Identity and Access Manager, and then change the Administration Server for Kaspersky Security Center Web Console, Identity and Access Manager does not get the information about the new Administration Server.
• If you open Kaspersky Security Center Web Console in different browsers and download the Administration Server certificate file in the Administration Server properties window, the downloaded files have different names.
• An error occurs when you try to restore an object from the Backup repository (Operations → Repositories → Backup) or send the object to Kaspersky.
• A managed device that has more than one network adapter sends Administration Server information about the MAC address of the network adapter that is not the one that is used to connect to Administration Server.
• If you install Kaspersky Security Center Web Console with Identity and Access Manager, and then change the Administration Server for Kaspersky Security Center Web Console, Identity and Access Manager does not get the information about the new Administration Server.
• If you start an Execute scripts remotely task for a specified account and change an account it is assigned for in the task settings, the changes will not be saved. To change the account the task is assigned to, stop the task in the task settings and restart it.