Advice Request Kaspersky Internet Security 2020 - Extreme Configuration

[ForgottenSeer 77207]

Hello friends,

I'm sharing my configuration for Kaspersky Internet Security. I have tried to make the system as secure as possible. Please share your feedback on my configuration.

1. General Settings:
   
   It will perform all the actions automatically without disturbing/user interactions. Password protected to ensure nobody makes modifications to the configuration.
   
   
   
2. Protection Settings:
   
   I have enabled all modules except Anti-Banner and Safe Money. I have not posted screenshots of all the settings as some are self-explanatory and some do not require any fine-tuning. I have covered all the important settings.
   • File Antivirus Settings:
     
     
     
     
     
     
     
     
     
     
     
     
     
   • Web Antivirus Settings:
     
     
     
     
     
     
     
     
     
     
     
     
     
   • Application Control Settings:
     
     
     
     
     
   • Firewall Settings:
     
     I do not allow trusted application group to access web cam & sound recording devices due to fear of RAT/privacy. They also cannot shut down my system. None of the applications have access to Network by default. I individually select the applications which can access internet. This setting may not go well with most users and will require manual actions every now and then. I am fine with it as I do not install any new applications on regular basis. Recommended only for power users.
     
     
     
     
     
     
     
     
     
     
     
     
     
     
     
     
     
   • Private Browsing Settings:
     
     
     
     
     
   • System Watcher Settings:
     
     
     
3. Performance Settings:
   
   My performance configuration may not go well with Laptop users, slow devices or Gamers. Please select as per your device and usage.
   
   
   
   
   
4. Scan Settings:
   
   Configured to disinfect or delete. All devices will be scanned. Scope of all the scans extended.
   
   
   
   • Full Scan Settings:
     
     
     
     
     
     
     
     
     
     
     
     
     
   • Quick Scan Settings:
     
     
     
     
     
     
     
     
     
     
     
     
     
   • Selective Scan Settings:
     
     
     
     
     
     
     
     
     
   • Additional Settings:
     
     KSN is very important right now. We have to keep the privacy concern aside and make use of the application reputation built from the data of so many Kaspersky users. The self-Defense module will try to block malware from terminating Kaspersky.
     
     
     
     
     
     
     
     
     
     
     
     
     
   • Trusted Application Mode:
     
     I am using the Trusted Application Mode (TAM) to prevent non-trusted applications from running in the system. It makes your PC very secure from the threats. I have heard TAM will be dropped in the next version of Kaspersky. No worries. I have fine-tuned the Application Control in Kaspersky which is as good as running without TAM.
     
     
     

 

[ForgottenSeer 77207]

I am very impressed by Kaspersky. It is my 4th year with Kaspersky Internet Security. Latest version with the above settings uses less than 100 MB with 1% CPU usage when idle or browsing. Memory usages goes to around 250MB with 20% CPU usage when doing full scan. I do have a fast system though. i7 with hyper threading+virtualization enabled. 16 GB RAM with SSD.

I am also using Kaspersky Security Cloud Free with 2 other Windows System. It performs well there too.

 

[harlan4096]

I share many of Your tweaks, but here are some of my suggestions:

* In FileAV, I would keep still Light in Heuristic Analysis (default), since Deep Scan will slowdown the system, and also the Scan Mode -> On Access and Modification ( -> Smart Mode)

* The same goes to WebAV -> Security Level to High will slowdown surfing probably in medium or complex sites.

* Performance I would disable Scan Idle Scans...

* In Quick Scan -> Advanced Settings: I would tick: Scan Archives + Installation Packages. I never perform Full Scans, only shcduled Quick Scan adding some specific risky system folders in the Scope.

* TAM has been removed in upcoming K2021... so go saying goodbye

It's interesting Your approach in Auto Mode + FireWall settings (Default Deny), not so common indeed but I use Interactive Mode (I like warnings) + similar tweaks in Application Control + Protected Folders (implemented via Application Folder -> Manage Resources).

Soon I will post a new guide with a different approach modifying default rules of Low Restriction group to harden it, and other additional tweaks.

 

[ForgottenSeer 77207]

I share many of Your tweaks, but here are some of my suggestions:

* In FileAV, I would keep still Light in Heuristic Analysis (default), since Deep Scan will slowdown the system, and also the Scan Mode -> On Access and Modification ( -> Smart Mode)

* The same goes to WebAV -> Security Level to High will slowdown surfing probably in medium or complex sites.

* Performance I would disable Scan Idle Scans...

* In Quick Scan -> Advanced Settings: I would tick: Scan Archives + Installation Packages. I never perform Full Scans, only shcduled Quick Scan adding some specific risky system folders in the Scope.

* TAM has been removed in upcoming K2021... so go saying goodbye

It's interesting Your approach in Auto Mode + FireWall settings (Default Deny), not so common indeed but I use Interactive Mode (I like warnings) + similar tweaks in Application Control + Protected Folders (implemented via Application Folder -> Manage Resources).

Soon I will post a new guide with a different approach modifying default rules of Low Restriction group to harden it, and other additional tweaks.

I will look into your suggestions and implement it. Thank you! Can you tell me what folders should be protected through Manage Resources? + which system folders should I add in the Quick Scan Scope?

 

[harlan4096]

First of all, You should kindly edit Your previous post and use forum spoilers for a better reading, also You may also use thumbnails instead of insert the full picture...

About Your questions:

* In Quick Scan, my scope:



* About Protected Folders, since You are not In Interactive, You should set/change Your own rights because Prompts rights are ignored in Auto Mode:



You can use You own folders there, I use that where I have my User data profile folders...

 

[Aggravatorx]

Just wanted to say thanks since i have been home for two weeks i tried a few and found major problems with trend micro and gdata so went back to kaspersky
and must say very happy for now but i must say the support i got from them is the best. thank you for your time and explaining how to to all of you on this subject

 

[RoboMan]

Nice guide! But I guess... RIP performance?

 

[ForgottenSeer 77207]

First of all, You should kindly edit Your previous post and use forum spoilers for a better reading, also You may also use thumbnails instead of insert the full picture...

About Your questions:

* In Quick Scan, my scope:

View attachment 236288

* About Protected Folders, since You are not In Interactive, You should set/change Your own rights because Prompts rights are ignored in Auto Mode:

View attachment 236289

You can use You own folders there, I use that where I have my User data profile folders...

Thank you. I have made the necessary modifications as per your suggestions. I am not able to edit the first post to simplify and structure it. Can you help me edit the first post? If possible remove all the images in the first post and replace with one single link. Notion – The all-in-one workspace for your notes, tasks, wikis, and databases.

I have added all the settings in Notion for reference. Check it out.

 

[ForgottenSeer 77207]

Nice guide! But I guess... RIP performance?

Haven't noticed any slow down with the current setup on the contrary. Will trim down & report back here in case of any slow down. Been monitoring the system constantly. Didn't noticed any spike in CPU usage or memory usage while idle / browsing with many tabs open. Computer only spike when scan is running but that is manageable too. It return backs to normal once the KIS scan is over.

 

[harlan4096]

@geekwithlens: I have no full rights in this forum section to modify/edit posts, so You better ask @Jack to do so, sorry for the inconveniences...

 

[ForgottenSeer 77207]

There is one last thing I need help with. I have enabled Windows Sandbox feature. After enabling it I am getting an error message that hardware virtualization feature of Kaspersky is incompatible. For what Kaspersky uses hardware virtualization?

I do not use the Safe Money and Protected Browser feature of Kaspersky. If that's all it is being used for then I can disable it.

 

[harlan4096]

Yes, this is usual, because Windows Sandbox (need to turn on Microsoft HyperV) and Kaspersky also uses its own hypervisor, those 2 hypervisors can't run at the same time in the system...

About protection through hardware virtualization in Kaspersky applications

Overview of settings and features available in a Kaspersky application and guides on how to use them.

support.kaspersky.com

Check section: Possible reasons why the protection through hardware virtualization does not work

 

[ForgottenSeer 77207]

Thanks! Is Kaspersky hypervisor only used for Safe Money and Protected Browser? If that's the case then I will disable it. Let me know.

 

[harlan4096]

Kaspersky documentation is very sparing, but probably it is also used for additional security features, such as Secure Data Input, Virtual Keyboard and others...

 

[HarborFront]

Yes, this is usual, because Windows Sandbox (need to turn on Microsoft HyperV) and Kaspersky also uses its own hypervisor, those 2 hypervisors can't run at the same time in the system...

About protection through hardware virtualization in Kaspersky applications

Overview of settings and features available in a Kaspersky application and guides on how to use them.

support.kaspersky.com

Check section: Possible reasons why the protection through hardware virtualization does not work

Hyper-V in Win 10 Pro is disabled by default. Must I disable Kaspersky's hardware virtualization too in order to run VirtualBox?

 

[SeriousHoax]

Hyper-V in Windows 10 Pro is disabled by default. Must I disable Kaspersky's hardware virtualization too in order to run VirtualBox?

You don't have to. VirtualBox runs fine with it.

 

[harlan4096]

Hyper-V in Windows 10 Pro is disabled by default. Must I disable Kaspersky's hardware virtualization too in order to run VirtualBox?

No, the issues with Kaspersky is with all those Windows settings/features which need turning on HyperV...

 

[Paul.R]

@harlan4096 my friend update your security config...I need to spy on you

 

[harlan4096]

Ok, soon I'll try to create my 2020 config, probably not so different than I posted in 2018

 

[Paul.R]

Export your Kaspersky Configuration otherwise I will talk with russian hackers and your computer will be junk in a minute