Link to home
Start Free TrialLog in
Avatar of helpdesk93
helpdesk93

asked on

Kaspersky Anti-Virus Server

Hello,

I have purchased Kaspersky license for workstations and server, i want to make Kaspersky Server, so that all my client computer get their updates from the server, rather than updating themselves individually through internet, that will eat a lot of bandwidth if 500 computers check for update.

How should i make Kaspersky server? and on client computers, what should i install so that they get the update from the server? does it need to be a normal KAV workstation installation? or something else is needed to be installed?

thanks,
Avatar of warturtle
warturtle
Flag of United Kingdom of Great Britain and Northern Ireland image

The below link with documentation might be useful:

http://www.kaspersky.com/docs?chapter=207716310

Avatar of helpdesk93
helpdesk93

ASKER

i have installed the SQL required for KAV server, and i also installed the admin kit.

now what do i need to do next? how will in install the KAV on workstatations and have them get the update from the server?

also do i need to install KAV on the Anti-virus server? or that admin kit will protect the server for virus?
ASKER CERTIFIED SOLUTION
Avatar of warturtle
warturtle
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks, warturtie,

i read the manuals you gave me still i have some questions want to confirm.

I did install the SQL, and Amin kit on the Windows 2000 that i want to make the KAV server, i also installed the Anti-virus for windows servers in it.
during installation of the Admin kit, i specified a share folder in C:
I runed the Admin kit and it scanned all my computers, it shows them under the group and by the domain name.

Now, what are the next necessary steps that take?
Shall i manually install the KAV for workstations and then on the update settings direct them to the Administration kit server? or i should deploy the KAV for workstations in each of the computers?

Do i have to install the agent for the workstations so they can communicate with Admin kit server? again shall i manually do it or should deploy it?

i have around 300 client computers to install the KAV on them and get them connect to Admin kit server to get thier updates, which way do you suggest best is to install them? and if i do it manually or deply what about the license key? also if i do it manually then i will have to manually direct the clients to the admin kit for getting thier updates?  can i creat a file setting in one of the workstations and then just import that setting on all other machines, that should contain directing to the admin kit, update setting, scan schedules etc.....?

Thanks,

sorry for lots of questions, one last question.......when i  right click on any computer that is in the group of the admin kit, there i only see that i can deploy the Network agent 5.0 and 6.0, i do not see the KAV for workstation to deply, how can i get that?

and the admin kit i have installed is 6.0, do i have to install KAV 6.0 for my clients or 5.0? or both can work?

thanks,
Good, so you've installed the antivirus on the server and the administration kit. Now, use the administration kit to install Network Agent on the workstations and following that you can deploy/install (they've used deploy sometimes and install sometimes, but its the same thing really) the KAV 6.0 (that is the latest one).

Network Agent is required so that the networked client computers can talk to the administration kit server. You will have to do Remote Install for KAV 6.0 - start with creating an installer using the .kpd file and the license keys (exact instructions are in the PDF), then use the same method that you used to install/deploy Network Agent to install Kaspersky Anti Virus 6.0. You don't have to individually do it, you can do a remote install on all the PC's that came up in the list when you scanned using the Administration kit.

Copied from the Guide:

To remotely deploy Kaspersky Anti-Virus for Windows Workstations onnetworked computers,
1. Create a package for Kaspersky Anti-Virus for Workstations 5 using awizard. The wizard is started using the Remote Install node in theshortcut menu.The .kpd file required to create the installation package is located in theroot of the Kaspersky Anti-Virus for Workstations distribution file. Thelicense key file for Kaspersky Anti-Virus for Workstations is also located inthis root directory. Specify the license key file used for the operation ofKaspersky Anti-Virus Windows Workstations.
If needed, configure the installation package settings. It is recommended,
for example, that you enable automatic restart for client computers.
2. Run the Application Deployment Wizard from the Administration Server
shortcut menu.
3. Install Kaspersky Anti-Virus for Workstations from the installation
package, in the same manner as for the Network Agent (see section 2.5on page 10). You can also install the Network Agent together withKaspersky Anti-Virus for Windows Workstation.

You can use the Administration kit to set scheduled scans, updates, etc for all the networked clients.

To verify that client computers retrieve correctly the updates,

1. Run the update task on the Administration Server from the Task node in
the upper level of the console tree. This task is automatically created by
the Quick Start Wizard. The application will download updates from
Kaspersky Labs update servers and save them to the shared folder
specified during Administration Server installation. Wait until the task is
complete.

Click the History button to view the tasks outcome.

For a list of the updates downloaded, click on the Updates node in the
console tree.

Details on the updating procedure are available on Kaspersky Labs
website (http://www.kaspersky.ru/avupdates).

2. Run the group update task on client computers. This task is created by
the Quick Start Wizard and is stored in the Group tasks folder of the
Group node. Wait until the task is complete.

Click the History button to view the tasks outcome.

Task, created by the Quick Start Wizard, updates client computers using the
connection between Network Agent and Administration Server.

To copy the latest updates from the shared folder, the client computers must
have read permission for this folder.

Hope it helps
Just to add - we specify the license key during the creation of the installer, so that the license key file becomes a part of the installer and we don't need to type it for all 300 machines. It installs without asking for any information at all.
as i said in the Remote install i only have the Remote Agent, how can i added the KAV for workstation 6.0 there? so that i can deploy it ?

Sorry for my late reply, I am recovering from a normal flu infection which I got before 2 days.

The reason why that is happening is that there is only 1 installer file present, which is of Network Agent. You have an installer present in the KAV for Workstations 6.0 CD which you need to use here and create a new global deployment task for remote installation.

Read section 4.1 for exact instructions on this, the guide is here: http://www.kaspersky.com/docs?chapter=207716310&downlink=206908195
i read the manual, in the manual in page 39, after we select new installation package.......as per the manual it says to browse for the .kpd file.....i have the .kpd file for the network agent but i do not have it for the KAV 6.0 for wokstations. where should i get it from? in the CD that came from Kaspersky it only contains the .kpd for network agent.

so i skiped the page 39, and instead i took the second option "make installation package fro specific executable file" and then from brwose i seleted the setup of the KAV 6.0 and next and the installation package was created.

i deployed through this package to one of my computers, it works........BUT on the remote computer that i deploy from server, i have to manually click next next........and do the settings, enter the license key. which i think is just like i go to every machine and install it locally.

how can i enter the settings, license key, update options etc on the installation package? when i right click and go to properties of this remote install package that i created, i don't see any option to enter the license key or settings.

maybe i shouldn't have taken the second option, but i had no choice, i don't have the .kpd file for KAV
.kpd file is located in the root of the Kaspersky Anti-Virus for Workstations 6 distribution file. You need to unpack the installer file and obtain it from there. It looks like a log file, an example is below for KAV 5:

[Product]
Name=Workstation
LocalizedName=Kaspersky Anti-Virus for Windows Workstations
RegKey=Workstation

[Version]
VerMajor=5
VerMinor=0
VerBuild=0
VerPatch=0
PluginVersion=5.0.676
DisplayVersion=5.0.676

Let me know, if you need anymore information on this.
It might be present in the 1 system that you installed the KAV6 already (locally). Its location would normally be c:\program files\kaspersky folder.
All right i found out the .Kpd file and added the new package, i tested the deployment and installed the software through deployment in one of my computer with serial key. and it worked. so thanks to that.

i have two questions now,

1. how can i put the settings in the deploymnent, or install package so that the update settings are directed to administration server?

2. i installed the Admin kit 6.0 and when i go to the update sectio and say download updates, after a while it gives me an error and the updates are not downloaded. what should i do?

3. how should i test if a computer gets the updates from the server?

thanks,
Razbaan
Thats good! Updates are controlled from the administration kit. You can set a global rule for all updates that will instruct all clients to download updates from the shared folder on that server. Network Agent will help the clients contact the server to request updates (from the shared folder). Easiest way would be to read the chapter 4 which contains step-by-step instructions on setting updates for the server (by connecting to Kaspersky internet server) and then server pushing the updates on its clients ( also called slave servers). The guide is here, page 144. I can probably write the same thing here, but that would be repeating the same information again.

http://www.kaspersky.com/docs?chapter=207716310&downlink=206908185
yes, i will read the chaper, but why the Administration kit update doesn't work? when i click download updates.....it takes some time and then fails.
Could be network access issue, have you checked to make sure that network access is not the problem here?
no there is no network access problem at all,

i can get to internet from that server easily, but the update doesn't work

it is worth mentioning that when i also install the KAV 6.0.x the latest workstation, and when i try to download updates there, it gives error. i think there is a problem with the latest verstion........but if i install the 5.0 or earlier versions on clients or the administration kit.....i can easily update them.

if the update doesn't work, then i will go back to 5.0 admin kit and install that, i hope there won't be any problems.
Is the network agent working properly?? I mean can the client computers connect to the shared drive on the server? I am kind of confused as well to understand how 6.0 is not working and 5.0 is, maybe you can install 5.0 on computers and then try to upgrade to 6.0 on a single PC and see if it still works.
how do i test if a computer gets its updates from the administration server? where can i look at the admin kit if a client gets his update or not, ??? or how shall i test it in client machine if the clien is communicating with server?

please write me the steps here, not in manual.......:)
Run the Update task on adminstration server (the server with administration kit), let the task complete (it will contact Kaspersky's internet servers and download the latest updates). Then, click on History to see if the update was successful. This is for confirming if the server was able to get the update successfully.

Secondly, now run the group update task by going to Group->Group Tasks->Update. Wait for it to complete and then look at History again to make sure that clients were able to get their updates successfully.