Solved

Installating Kaspersky Endpoint from Security Center

Posted on 2014-02-28
8
4,252 Views
Last Modified: 2014-03-12
Hi Experts,

I can install the agent and Endpoint antivirus on the client computers but only agent appears as installed. On the client computers side, a prompt message ask to restart the computer as usual. When the computer is restarted, a yello triangle appears and the updates don't works. The policy don't apply, the user can set all the settings. In the update settings, we can't choose any download location, nothing appears.

I tried to deploy software in the classic way and with GPO, the second way works better but it is the same result again and again.
I have an automatic installation task that is blocked. Impossible to stop it to delete it.

It worked fine on only one client computer, which is the same than the others (WIM image applied with imagex).

Any idea ?

Thank you in advance for your help, best regards,
0
Comment
Question by:jet-info
  • 4
  • 4
8 Comments
 
LVL 61

Expert Comment

by:btan
ID: 39896575
When running a remote installation task on a client computer without the Network Agent installed, it is necessary to have ports TCP 139 and 445, UDP 137 and 138 open on such a client computer. These ports are open by default on all domain client computers. You can open these ports automatically using the RipRep.exe utility (located in the Administration Server installation folder).

https://support.kaspersky.com/7001

Something to note include
http://support.kaspersky.com/learning/courses/kl_102.98/chapter1.3/section6

For Kaspersky Endpoint Security to be able to work right after the installation, its installation package includes anti-virus databases. They are not updated automatically in the package and quickly become obsolete. This is not actually a problem, because right after the protection tool is installed, the update task starts and downloads the new databases. But if the databases in the package are old enough, the computer may need to be restarted to be able to use the new databases.

To avoid this, you can update the databases in the package properties before the installation. Since this update is aimed at avoiding an unnecessary restart, the Update databases button adds to the package a subset of databases that may require a restart. The databases are copied from the server repository.

Kaspersky Endpoint Security does not work without a license. If an interactive installation takes place, the license can be specified in the setup wizard. Remote installation implies several ways for providing a license for the installed product. One of them is to specify the key file in the installation package properties.

This is a reliable, although not the most convenient way for license distribution
0
 

Author Comment

by:jet-info
ID: 39900180
Sorry, I didn't specified that it was KES 9..

Could you provide a good Installation Package Creation tutorial or manual with the possibility of including the license key and the Administration agent please ?

Another strange thing is that the new 8.1.0.1042 KEP is not available in the  Actual versions of Applocations under Packages. Ther is only the old 8.0.0.559... How to update it please ?

Under http://products.kaspersky-labs.com/products/english/file_servers/kavwinserverenterprise8.0/ there is only this old version.
I tried on this Kaspersky URL http://products.kaspersky-labs.com/products/english/endpoints/kes8windows/ but when I create a Package, there is no possibility to add the license or choose which part to install or not (firewall for example).

Where can I download the correct source to create a valid Installation Package for KEP 8.1.0.1042 ?

Thank you for your help, best regards,
0
 
LVL 61

Expert Comment

by:btan
ID: 39900456
pse see below if they helps, actually they are all from knowledge base for KES 9 may help. Below are just some key ones to ease the finding.

How to update modules included into a Kaspersky Security Center 9 installation package
https://support.kaspersky.com/7508

How to download updates for several programs using Kaspersky Updater for Windows and distribute them further via Kaspersky Security Center 9
https://support.kaspersky.com/9024

Riprep. A utility for preparing client PCs for deployment
https://support.kaspersky.com/7434

The latest Versions/Patches/Modules as below
https://support.kaspersky.com/ksc9/new

Also before adding a license key file, ensure the time and date settings are correct on client computer(s). Pse see further below

How to activate Kaspersky Endpoint Security 8 for Windows via Kaspersky Security Center 9
https://support.kaspersky.com/7325

There are several ways of activating Kaspersky Endpoint Security 8 for Windows:
Adding a key file to the repository
Using a key file distribution task
Adding a key file to the installation package

How to add a license key file on a client computer
https://support.kaspersky.com/8533

In case the installation package has already been used with a remote installation task, you should restart the task with the new key file.

Also do check out the new licensing scheme: Kaspersky Endpoint Security for Business license with Kaspersky Security Center 9 as there are specific versions of Kaspersky Anti-Virus on managed computers support activation with the new type keys
https://support.kaspersky.com/10569#versions

There are troubleshooting tips in kb e.g. Why a host may have an “Incompatible software installed” status, although all third-party applications have been removed from it
https://support.kaspersky.com/8577
0
 

Author Comment

by:jet-info
ID: 39916974
Nothing is working as it have to do, we are loosing our time for no result. The solution must be easy but we can't find it... We want to install it from scratch, or...
Could we upgrade to KES 10 with our valid KES9 licence which is still active for 350 days? If so, does it interferes with Kaspersky Anti-spam 8.0 for Exchange?

Thank you for your help, best regards,
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 61

Expert Comment

by:btan
ID: 39917302
you can please see this step by step to go direct changes. Old Licenses will still work
and activate all KES 10 features except Data Encryption.

http://www.computerlinks.co.uk/FMS/24642.kaspersky_migration_guide_sec_ctr_9_to_sec_ctr_10.pdf

In summary, to make the upgrade from 9.0 to Kaspersky Security Center 10.0:
1. For Kaspersky Security Center 9.0, create a backup copy of the Administration Server data using the klbackup utility. This utility is included in the application distribution kit, being located in the root of the Kaspersky Security Center installation folder.
2. Install Administration Server and Administration Console (version 10.0).
You can install Administration Server on a computer where a previous version of Administration Server is installed. When you upgrade Administration Server to version 10.0, all data and settings from the previous version of the application are saved.
If you install Administration Server on another computer, you can restore the settings of the previous version using the backup and data recovery utility (klbackup).
3. Perform the initial configuration of Administration Server if the settings have not been inherited from the previous version of Administration Server.
4. Create the structure of administration groups.
5. Select client computers to which the new version of Administration Server and new versions of Kaspersky Lab applications should be installed.
6. For the selected computers, create a remote installation task for the new version of Network Agent and the new versions of the required applications. To perform remote installation of applications, you can use installation packages created automatically during the installation of Kaspersky Security Center 10.0.
7. Run the created task.
As a result, the new version of Network Agent and the new versions of Kaspersky Lab applications will be installed to the selected client computers.
8. Add the client computers that have been upgraded to the new versions of the applications, to the hierarchy of administration groups.
As a result, the protection system built on earlier versions of the applications will be managed by Kaspersky Security Center 10.0.

As for the compatibility, I did not see any direct implication on the anti-spam but pls get KES tech support to confirm.
0
 

Author Comment

by:jet-info
ID: 39917729
I don't know if I really want to make a backup of a non working server. It fails completely...
If there is a problem, I think it is better to install it from scratch.
What do you think about it ?
Is there any risk for the Anti-Spam installation ?
0
 
LVL 61

Accepted Solution

by:
btan earned 500 total points
ID: 39917772
Since there are so many uncertainties and there is no layest backup as well as the pressing timeline, seek your user and superior understanding to move ahead for fresh build on new hardware or new hdd. Retain the old and revisit again if viable. This alresdy comes to a point where no further risk but to rebuild the policy and configuration. Pls have the Symantec tech support on standby and contractor to facilitate all works. The anti spam is least of concern here with refresh install.
0
 

Author Closing Comment

by:jet-info
ID: 39925654
OK, I upgraded to KES10 and now it is working normally.

Thank you !
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Suggested Solutions

It’s a strangely common occurrence that when you send someone their login details for a system, they can’t get in. This article will help you understand why it happens, and what you can do about it.
By this time the large percentage of day-to-day transactions have shifted to mobile banking; here are some overriding areas QAs must investigate while testing mobile banking apps.  
Viewers will learn how to use the Hootsuite Dashboard.
The viewer will learn how to successfully download and install the SARDU utility on Windows 8, without downloading adware.

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now