?
Solved

Kaspersky Anti-Virus Server

Posted on 2009-04-29
21
Medium Priority
?
2,718 Views
Last Modified: 2013-11-22
Hello,

I have purchased Kaspersky license for workstations and server, i want to make Kaspersky Server, so that all my client computer get their updates from the server, rather than updating themselves individually through internet, that will eat a lot of bandwidth if 500 computers check for update.

How should i make Kaspersky server? and on client computers, what should i install so that they get the update from the server? does it need to be a normal KAV workstation installation? or something else is needed to be installed?

thanks,
0
Comment
Question by:helpdesk93
  • 12
  • 9
21 Comments
 
LVL 16

Expert Comment

by:warturtle
ID: 24258522
The below link with documentation might be useful:

http://www.kaspersky.com/docs?chapter=207716310

0
 

Author Comment

by:helpdesk93
ID: 24260242
i have installed the SQL required for KAV server, and i also installed the admin kit.

now what do i need to do next? how will in install the KAV on workstatations and have them get the update from the server?

also do i need to install KAV on the Anti-virus server? or that admin kit will protect the server for virus?
0
 
LVL 16

Accepted Solution

by:
warturtle earned 1500 total points
ID: 24262086
Sorry for my delayed response. I was away from my PC for sometime.

1. You'll have to install the Kaspersky AntiVirus for Windows Servers from the CD  on the Windows 2000 or 2003 server. The administration kit is for managing the whole product whether it be a server or a workstation. The exact PDF detailing the process is here: http://www.kaspersky.com/docs?chapter=207716310&downlink=206908181

2. After you've installed and configured the Administration kit with the instructions based at: http://www.kaspersky.com/docs?chapter=207716310&downlink=206908188, you can use it to install Kaspersky Network Agent on workstations and then install Kaspersky anti-virus for workstations using the same method.

3. Now, that all the anti-virus installations are done, you can use the same guide mentioned in point no 2 to select how to distribute updates. You'll have to create a scheduled task to download updates from either of  the following places (copied from the Kaspersky official document mentioned in point 2 pages 12 & 13):

" From the shared folder on Administration Server;
" From the shared folder on the main Administration Server (if Server
hierarchy is used).
" From the Kaspersky Lab's updates servers.
" Using an FTP or an HTTP-server;

I hope that helps.
0
Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

 

Author Comment

by:helpdesk93
ID: 24268282
Thanks, warturtie,

i read the manuals you gave me still i have some questions want to confirm.

I did install the SQL, and Amin kit on the Windows 2000 that i want to make the KAV server, i also installed the Anti-virus for windows servers in it.
during installation of the Admin kit, i specified a share folder in C:
I runed the Admin kit and it scanned all my computers, it shows them under the group and by the domain name.

Now, what are the next necessary steps that take?
Shall i manually install the KAV for workstations and then on the update settings direct them to the Administration kit server? or i should deploy the KAV for workstations in each of the computers?

Do i have to install the agent for the workstations so they can communicate with Admin kit server? again shall i manually do it or should deploy it?

i have around 300 client computers to install the KAV on them and get them connect to Admin kit server to get thier updates, which way do you suggest best is to install them? and if i do it manually or deply what about the license key? also if i do it manually then i will have to manually direct the clients to the admin kit for getting thier updates?  can i creat a file setting in one of the workstations and then just import that setting on all other machines, that should contain directing to the admin kit, update setting, scan schedules etc.....?

Thanks,

0
 

Author Comment

by:helpdesk93
ID: 24268558
sorry for lots of questions, one last question.......when i  right click on any computer that is in the group of the admin kit, there i only see that i can deploy the Network agent 5.0 and 6.0, i do not see the KAV for workstation to deply, how can i get that?

and the admin kit i have installed is 6.0, do i have to install KAV 6.0 for my clients or 5.0? or both can work?

thanks,
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24272366
Good, so you've installed the antivirus on the server and the administration kit. Now, use the administration kit to install Network Agent on the workstations and following that you can deploy/install (they've used deploy sometimes and install sometimes, but its the same thing really) the KAV 6.0 (that is the latest one).

Network Agent is required so that the networked client computers can talk to the administration kit server. You will have to do Remote Install for KAV 6.0 - start with creating an installer using the .kpd file and the license keys (exact instructions are in the PDF), then use the same method that you used to install/deploy Network Agent to install Kaspersky Anti Virus 6.0. You don't have to individually do it, you can do a remote install on all the PC's that came up in the list when you scanned using the Administration kit.

Copied from the Guide:

To remotely deploy Kaspersky Anti-Virus for Windows Workstations onnetworked computers,
1. Create a package for Kaspersky Anti-Virus for Workstations 5 using awizard. The wizard is started using the Remote Install node in theshortcut menu.The .kpd file required to create the installation package is located in theroot of the Kaspersky Anti-Virus for Workstations distribution file. Thelicense key file for Kaspersky Anti-Virus for Workstations is also located inthis root directory. Specify the license key file used for the operation ofKaspersky Anti-Virus Windows Workstations.
If needed, configure the installation package settings. It is recommended,
for example, that you enable automatic restart for client computers.
2. Run the Application Deployment Wizard from the Administration Server
shortcut menu.
3. Install Kaspersky Anti-Virus for Workstations from the installation
package, in the same manner as for the Network Agent (see section 2.5on page 10). You can also install the Network Agent together withKaspersky Anti-Virus for Windows Workstation.

You can use the Administration kit to set scheduled scans, updates, etc for all the networked clients.

To verify that client computers retrieve correctly the updates,

1. Run the update task on the Administration Server from the Task node in
the upper level of the console tree. This task is automatically created by
the Quick Start Wizard. The application will download updates from
Kaspersky Labs update servers and save them to the shared folder
specified during Administration Server installation. Wait until the task is
complete.

Click the History button to view the tasks outcome.

For a list of the updates downloaded, click on the Updates node in the
console tree.

Details on the updating procedure are available on Kaspersky Labs
website (http://www.kaspersky.ru/avupdates).

2. Run the group update task on client computers. This task is created by
the Quick Start Wizard and is stored in the Group tasks folder of the
Group node. Wait until the task is complete.

Click the History button to view the tasks outcome.

Task, created by the Quick Start Wizard, updates client computers using the
connection between Network Agent and Administration Server.

To copy the latest updates from the shared folder, the client computers must
have read permission for this folder.

Hope it helps
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24272720
Just to add - we specify the license key during the creation of the installer, so that the license key file becomes a part of the installer and we don't need to type it for all 300 machines. It installs without asking for any information at all.
0
 

Author Comment

by:helpdesk93
ID: 24276687
as i said in the Remote install i only have the Remote Agent, how can i added the KAV for workstation 6.0 there? so that i can deploy it ?

0
 
LVL 16

Expert Comment

by:warturtle
ID: 24281731
Sorry for my late reply, I am recovering from a normal flu infection which I got before 2 days.

The reason why that is happening is that there is only 1 installer file present, which is of Network Agent. You have an installer present in the KAV for Workstations 6.0 CD which you need to use here and create a new global deployment task for remote installation.

Read section 4.1 for exact instructions on this, the guide is here: http://www.kaspersky.com/docs?chapter=207716310&downlink=206908195
0
 

Author Comment

by:helpdesk93
ID: 24288755
i read the manual, in the manual in page 39, after we select new installation package.......as per the manual it says to browse for the .kpd file.....i have the .kpd file for the network agent but i do not have it for the KAV 6.0 for wokstations. where should i get it from? in the CD that came from Kaspersky it only contains the .kpd for network agent.

so i skiped the page 39, and instead i took the second option "make installation package fro specific executable file" and then from brwose i seleted the setup of the KAV 6.0 and next and the installation package was created.

i deployed through this package to one of my computers, it works........BUT on the remote computer that i deploy from server, i have to manually click next next........and do the settings, enter the license key. which i think is just like i go to every machine and install it locally.

how can i enter the settings, license key, update options etc on the installation package? when i right click and go to properties of this remote install package that i created, i don't see any option to enter the license key or settings.

maybe i shouldn't have taken the second option, but i had no choice, i don't have the .kpd file for KAV
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24289418
.kpd file is located in the root of the Kaspersky Anti-Virus for Workstations 6 distribution file. You need to unpack the installer file and obtain it from there. It looks like a log file, an example is below for KAV 5:

[Product]
Name=Workstation
LocalizedName=Kaspersky Anti-Virus for Windows Workstations
RegKey=Workstation

[Version]
VerMajor=5
VerMinor=0
VerBuild=0
VerPatch=0
PluginVersion=5.0.676
DisplayVersion=5.0.676

Let me know, if you need anymore information on this.
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24289421
It might be present in the 1 system that you installed the KAV6 already (locally). Its location would normally be c:\program files\kaspersky folder.
0
 

Author Comment

by:helpdesk93
ID: 24293014
All right i found out the .Kpd file and added the new package, i tested the deployment and installed the software through deployment in one of my computer with serial key. and it worked. so thanks to that.

i have two questions now,

1. how can i put the settings in the deploymnent, or install package so that the update settings are directed to administration server?

2. i installed the Admin kit 6.0 and when i go to the update sectio and say download updates, after a while it gives me an error and the updates are not downloaded. what should i do?

3. how should i test if a computer gets the updates from the server?

thanks,
Razbaan
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24294367
Thats good! Updates are controlled from the administration kit. You can set a global rule for all updates that will instruct all clients to download updates from the shared folder on that server. Network Agent will help the clients contact the server to request updates (from the shared folder). Easiest way would be to read the chapter 4 which contains step-by-step instructions on setting updates for the server (by connecting to Kaspersky internet server) and then server pushing the updates on its clients ( also called slave servers). The guide is here, page 144. I can probably write the same thing here, but that would be repeating the same information again.

http://www.kaspersky.com/docs?chapter=207716310&downlink=206908185
0
 

Author Comment

by:helpdesk93
ID: 24301647
yes, i will read the chaper, but why the Administration kit update doesn't work? when i click download updates.....it takes some time and then fails.
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24304113
Could be network access issue, have you checked to make sure that network access is not the problem here?
0
 

Author Comment

by:helpdesk93
ID: 24311273
no there is no network access problem at all,

i can get to internet from that server easily, but the update doesn't work

it is worth mentioning that when i also install the KAV 6.0.x the latest workstation, and when i try to download updates there, it gives error. i think there is a problem with the latest verstion........but if i install the 5.0 or earlier versions on clients or the administration kit.....i can easily update them.

if the update doesn't work, then i will go back to 5.0 admin kit and install that, i hope there won't be any problems.
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24312693
Is the network agent working properly?? I mean can the client computers connect to the shared drive on the server? I am kind of confused as well to understand how 6.0 is not working and 5.0 is, maybe you can install 5.0 on computers and then try to upgrade to 6.0 on a single PC and see if it still works.
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24312769
0
 

Author Comment

by:helpdesk93
ID: 24333448
how do i test if a computer gets its updates from the administration server? where can i look at the admin kit if a client gets his update or not, ??? or how shall i test it in client machine if the clien is communicating with server?

please write me the steps here, not in manual.......:)
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24334319
Run the Update task on adminstration server (the server with administration kit), let the task complete (it will contact Kaspersky's internet servers and download the latest updates). Then, click on History to see if the update was successful. This is for confirming if the server was able to get the update successfully.

Secondly, now run the group update task by going to Group->Group Tasks->Update. Wait for it to complete and then look at History again to make sure that clients were able to get their updates successfully.
0

Featured Post

SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PREFACE The purpose of this guide is to explain how to manually move a SEP client to a different client group by performing steps on the client-side. These steps may prove particularly useful because they allow the client to move after it has alrea…
Have you ever tried to find someone you know on Facebook and searched to find more than one result with the same picture? Perhaps someone you know has told you that they have a 'facebook stalker' or someone who is 'posing as them' online and ta…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question