Kaspersky Administration Kit 8.0 can't connect to client

Posted on 2010-09-02
Last Modified: 2013-11-22
I am able to see the workstation on the network.  Push the network agent and the antivirus application.  However the license and updates did not push with the application.  After that, when I added the workstation to the "client computer" it won't connect with the administration console.  When I try to push the application to the local server all settings and updates is correct.  Any ideas?
Question by:autocrib
  • 3
  • 2
LVL 11

Accepted Solution

ProfessorBindokas earned 500 total points
ID: 33609409
Hi, had similar issue - here's an extract from Kaspersky's documentation:

Possible signs of a connection loss between Network Agent and Administration Server:

- policies do not apply to client computers;

- manual synchronization with a client computer fails;

- pale computer icon(s) in the Administration Console;

- the field Connecting to Server does not contain the current date and time (plus/minus 15-30 minutes) (for a running workstation, of course).

Use the utility klnagchk.exe to find out why a connection fails. This utility has been developed to analyze connections between Network Agent and Administration Server.

The utility should be run on problematic computers from the Network Agent setup directory (C:\Program Files\Kaspersky Lab\NetworkAgent 8) under a local administrator account. It is recommended to output its results into a log file.

A connection may fail due to one of the following reasons:

There is no Network Agent installed on the client computer.

Incorrect Administration Server address or port specified during local installation of Network Agent on the client computer.

Kaspersky Network Agent service is not running on the client computer.

Kaspersky Administration Server service is not running on the Administration Server.

There are several workstations under the same name in the network and a wrong workstation has been dragged into the group (by mistake). Use the Search command in the Server context menu. Select Find client computers and try to find computers with the same name – enter the PC name with *. For example, COMPUTER*.

This client computer is already connected to another Administration Server within the same Windows network.

Client computer is currently switched off.

The Administration Server computer is inaccessible from the client computer.

Use ping command on the client computer to verify it.

TCP 13000 and/or 14000 aports re blocked on the Administration Server computer.
You can check if the ports are open using one of the following utilities:

Run it on the computer <Administration_Server_name>, to make sure the Administration Server really opens the port 13000/14000 (Administration Server process is named klserver).

netstat, if the fport utility failed to display the list of open ports (e.g. it does not support Microsoft Windows 2003 Server):
netstat -a

telnet (to be run on the problematic computer)
telnet <Administration_Server_name> 13000


telnet <Administration_Server_name> 14000

If the telnet command displays an error message it means the ports are closed (due to firewall protection, etc).

UDP 15000 port is blocked on the client computer.
Incorrect Administration Server name or IP address on the client computer: i.e. Server name and IP address mismatch.

Open Network Agnet policy on the tab Network and configure connection to the Admninistration Server and Connection profiles (if any).

Author Comment

ID: 33620128
Wow its that quirky?  Is ESET more straightforward?  I figured if I got the initial push and install to go through, then the majority of the networking issues would have been ok.  How is their tech support if we decide to purchase now?  Thanks
LVL 11

Expert Comment

ID: 33624313
Tech support is OK, no real complaints.  Got it for the first year, haven't had to use it though.  Haven't had too many problems with Kaspersky, other than one or two small install issues, so are pretty satisfied with it overall - a far cry better than Symantec, which was used in the past.  

Looked at ESET's antivirus offerings, the most attractive thing about them was that they are somewhat lighter on system resources than Kaspersky, otherwise performance is about the same in terms of security provided.  Chose Kaspersky simply because got a better deal on price (quite a few workstations, so cost was a deciding factor), but don't regret the decision.

Author Comment

ID: 33631420
Is there a quick way I can generate a installation file with all the administration and update information preconfiigured as I did with the SEPM?  Also is there a xml file replacement type of thing to get the standalone installs to connect and report to the admin server, also like in Symantec Endpoint Manager?  Thanks
LVL 11

Expert Comment

ID: 33634011
The interface is easier (in my opinion) than Symantec's, since there is no real reason to generate login scripts for installation.  This is, however, possible under the Tasks for Specific Computers->Create->Task wizard->Login Script, but only really needed if you have systems using old versions of Windows, like 98.  Just follow the steps in the wizard, easy enough.

However, it's best to use the Push Install Wizard.  Starts the same way, but select push install as the option.  Push install configuration took all of five minutes using the wizard and worked fine first time.

For standalones, there is also a wizard for creation of  a standalone installation pack, go through Repositories->Installation Packages.  The packs can include the network agent, which allows connection to the admin server.  It's selectable on the wizard.  SEM was a lot more labour intensive to manage and resource intensive to use - Kaspersky is pretty much all wizard based.

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

As more computers now shipped with 64-bit version of Windows, more users are now using this Operating System.  So it's important to be aware how some 32-bit diagnostic tool works on these systems, so we know what to expect when analyzing the logs an…
OVERVIEW This guide provides information on the process performed when the Symantec Endpoint Protection (SEP) client checks in with the Symantec Endpoint Protection Manager (SEPM). AUDIENCE Information Technology personnel responsible for suppo…
This video discusses moving either the default database or any database to a new volume.
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now