Summary of the content on the page No. 1
KASPERSKY LAB
®
Kaspersky Administration Kit 6.0
Deployment Guide
Summary of the content on the page No. 2
® KASPERSKY ADMINISTRATION KIT 6.0 Deployment Guide Kaspersky Lab Ltd. Visit our website: http://www.kaspersky.com/ Revision date: February 2007.
Summary of the content on the page No. 3
Contents ® CHAPTER 1. KASPERSKY ADMINISTRATION KIT .................................................. 5 1.1. Purpose, structure and main functions................................................................. 5 1.2. Software and Hardware Requirements ................................................................ 7 1.3. Distribution kit ........................................................................................................ 9 1.4. Help desk for registered users .........
Summary of the content on the page No. 4
® 4 Kaspersky Administration Kit 4.1.7. Creating a remote installation task............................................................... 53 4.1.8. Configuring the deployment task.................................................................. 66 4.1.9. Deploying application to slave administration servers................................. 68 4.1.10. Remote software removal .......................................................................... 70 4.2. Deployment wizard................
Summary of the content on the page No. 5
® CHAPTER 1. KASPERSKY ADMINISTRATION KIT 1.1. Purpose, structure and main functions ® Kaspersky Administration Kit is an application that is designed to provide a centralized solution for most important administration tasks associated with managing the corporate network anti-virus security system based on Kaspersky Lab’s applications included into Kaspersky Anti-Virus Business Optimal and Kaspersky Corporate Suite. Kaspersky Administration Kit supports all network configurations that
Summary of the content on the page No. 6
® 6 Kaspersky Administration Kit • create individual patterns for the application's operation by creating and running tasks for a set of computers from different administration groups. • Automatically update the anti-virus database and application modules on computers. This feature allows centralized updating of the anti-virus data- base for all installed Kaspersky Lab's applications without accessing the Kaspersky Lab's internet updates server for each individual update. The updating can
Summary of the content on the page No. 7
® Kaspersky Administration Kit 7 Kaspersky Corporate Suites. Separate versions of Administration Agent exist for Kaspersky Lab Novell and UNIX applications. • Administration Console provides a user interface to the administration services of the Administration Server and Network Agent. The manage- ment module is implemented as the extension of the Microsoft Manage- ment Console (MMC). 1.2. Software and Hardware Requirements Administration Server • Software requirements • Microsoft Data
Summary of the content on the page No. 8
® 8 Kaspersky Administration Kit • Software requirements: • Microsoft Windows 2000 SP 1 or higher; Microsoft Windows XP Professional SP 1 or higher; Microsoft Windows XP Profes- sional x64 and higher, Microsoft Windows Server 2003 or higher; Microsoft Windows Server 2003x64 or higher Microsoft Windows NT4 SP 6a or higher, Microsoft Windows Vista, Mi- crosoft Windows Vista x64; • Microsoft Management Console version 1.2 or higher • When running under Microsoft Windows NT4 you need Micro- s
Summary of the content on the page No. 9
® Kaspersky Administration Kit 9 o 32 MB free (available) space on hard drive 1.3. Distribution kit This software product is supplied free-of-charge with any Kaspersky Lab's application included into the package of Kaspersky Anti-Virus Business Optimal and Kaspersky Corporate Suite (retail box version) and also available for download from Kaspersky Lab's corporate website at www.kaspersky.com. 1.4. Help desk for registered users Kaspersky Lab offers a large service package, enabling its
Summary of the content on the page No. 10
® 10 Kaspersky Administration Kit actions when using the application is provided in the Kaspersky Administration Kit Reference Book. In order to review questions that our users often ask Kaspersky Lab's support specialists visit our website and follow the Services Knowledge base link. This section contains information about installation, configuration and functioning of Kaspersky Lab's applications and about removal of most commonly spread viruses and disinfection of infected files. 1.
Summary of the content on the page No. 11
CHAPTER 2. TYPICAL SCHEMES OF DEPLOYMENT OF ANTI-VIRUS PROTECTION 2.1. Schemes of deployment of anti- virus protection on the computers within the logical network There are two common scenarios that show how you can deploy reliable anti- virus protection using Kaspersky Administration Kit: • You can remotely install applications on client computers across the logi- cal network from a single workstation. The installation and connection to the remote management system proceed automatic
Summary of the content on the page No. 12
® 12 Kaspersky Administration Kit 2.2. Building a centralized anti-virus protection administration system The first step to building a system of centralized management over an enterprise network through Kaspersky Administration Kit is to design a logical network. At this stage, you should make the following decisions: 1. Select isolated sections within the network and determine the number of Administration servers that must be installed. The use of hierarchy of administration servers wi
Summary of the content on the page No. 13
Typical Schemes of Deployment of anti-virus protection 13 After this, it is required to create a hierarchy of the Administration servers and for each Server create a logical network structure as follows: create a hierarchy of the administration groups and distribute computers among the corresponding groups. During the next stage, you should install the Network Agent and selected Kaspersky Lab applications on client computers and install the corresponding administration plugins on the admi
Summary of the content on the page No. 14
CHAPTER 3. INSTALLING KASPERSKY ADMINISTRATION KIT Before starting the installation, make sure that the computer meets the software and hardware requirements to the Administration Server and the Administrator's workstation (see section 1.3 on page 9). MSDE (Microsoft Data Engine), MySQL server or Microsoft SQL server is used to store the Administration Server information. If no MSDE or SQL server is installed, you have to install one of them before installing the Administration Server
Summary of the content on the page No. 15
Installing Kaspersky Administration Kit 15 Port Num- Protocol Description ber 14000 TCP Used: • to receive data from clients; • to connect to update agents; • to connect to slave Administration Servers. 18000 HTTP Used by Administration Server to download data from a Cisco NAC authentication server. Host Designated as Update Server 13000 TCP Used by clients to connect. 13001 TCP Use by client computers to connect if a host with Administration Server is designated as update agent. 1
Summary of the content on the page No. 16
® 16 Kaspersky Administration Kit To install MSDE: 1. Run the executable file in the MSDE2KSP3 directory on the Kaspersky Administration Kit 5.0 installation CD. The installation wizard will then suggest that you configure settings and run the application. Follow the setup wizard’s instructions. 2. First steps are common and include unpacking required files from the distribution package and copying them to the hard drive of your computer, verification of the required software, accepting
Summary of the content on the page No. 17
Installing Kaspersky Administration Kit 17 Figure 1. Selecting the server name 3.2. Installing the Administration Server and Administration Console on Local Host This section describes a local installation of Administration Server and/or Console. If there is even a single Administration Server running on a network, additional servers may be installed using forced installation under the remote installation task. When creating the task, use an Administration Server installation package
Summary of the content on the page No. 18
® 18 Kaspersky Administration Kit 3. Then define the folder to be used to install the components. The default folder is:
Summary of the content on the page No. 19
Installing Kaspersky Administration Kit 19 A server version of the Network Agent will be installed with the Administration Server. Their joint installation is impossible using a regular version of the Network Agent. If this component is already installed on your computer, remove it and reinstall the Administration Server. Pay attention to the information displayed in the wizard window: • in the Description field in right section - about the component selected; • in the bottom section - a
Summary of the content on the page No. 20
® 20 Kaspersky Administration Kit • Domain User account - the Administration Server will be started under the user account included into the domain. In this case the Administration Server will initiate all operations using the rights of this account and during the next stage you will be offered to specify the user whose account will be used. If a Windows domains structure has been created within the corporate network we recommend selecting the domain administrator's account in order to s
