KAPERSKY ADMINISTRATION KIT 6.0 User manual

KASPERSKY LAB

Kaspersky®Administration Kit

version 6.0

Getting started

KASPERSKY®ADMINISTRATION KIT

VERSION 6.0

Getting started

©Kaspersky Lab

http://www.kaspersky.com/

Revision date: February, 2007

Contents

CHAPTER 1. INTRODUCTION ...................................................................................... 4

CHAPTER 2. GETTING STARTED................................................................................ 6

2.1. Installing MSDE 2000............................................................................................ 7

2.2. Installing Kaspersky Administration Kit Components........................................... 7

2.3. Quick Start Wizard................................................................................................. 8

2.4. Creating an administration group........................................................................ 10

2.5. Remote installation of the Network Agent .......................................................... 10

2.6. Kaspersky Anti-Virus application deployment .................................................... 11

2.7. Checking the operation of the update task......................................................... 12

2.8. Configuring notifications ...................................................................................... 13

2.9. Testing the notification system and on-demand scan task................................ 14

2.10. Generating reports............................................................................................. 14

CHAPTER 3. UPGRADING FROM KASPERSKY ADMINISTRATION KIT 5.X

AND 6.0 TO VERSION 6.0 (MAINTENANCE PACK 1)........................................... 16

CHAPTER 4. CONCLUSION ........................................................................................ 18

APPENDIX A. KASPERSKY LAB................................................................................. 19

A.1. Other Kaspersky Lab Products .......................................................................... 20

A.2. Contact Us........................................................................................................... 30

APPENDIX B. LICENSE AGREEMENT....................................................................... 31

CHAPTER 1. INTRODUCTION

This document outlines the main steps a network security administrator must

take to quickly and efficiently install an anti-virus protection system, based on

Kaspersky Lab’s applications, across a corporate network using Kaspersky

Administration Kit.

This document examines a simple scenario in which anti-virus protection is

installed on several computers running a Microsoft Windows operating system

without using the hierarchy of the Administration Servers. For successful

installation, the computers must run any of the following operating systems:

Microsoft Windows 98; Microsoft Windows ME; Microsoft Windows 2000 with

Service Pack 1 or better; Microsoft Windows NT4 with Service Pack 6a or better;

Microsoft Windows XP Professional with Service Pack 1 or better; Microsoft

Windows XP Professional x64 or better; Microsoft Windows Server 2003 or

better; Microsoft Windows Server 2003 x64 or better; Microsoft Windows Vista,

Microsoft Windows Vista x64.

This document also describes the process of upgrading Kaspersky Lab’s

applications from versions 5.x to version 6.x.

For detailed information on Kaspersky Administration Kit refer to the

Implementation Guide, Administrator’s Guide, and Reference Guide.

Kaspersky Administration Kit 5 is designed for managing the anti-virus protection

system within a corporate network. The application enables the administrator to

do the following:

• Create a logical network that ensures anti-virus protection of the

corporate network.

• Deploy and uninstall enterprise anti-virus applications across a network.

• Remotely manage the anti-virus protection system from a single location.

• Receive notifications across the network about virus protection-related

events.

• Accumulate statistics and reports from all installations.

• Manage licenses for all installed anti-virus applications

• Perform centralized management of objects placed in quarantine or

backup storage by anti-virus applications.

Kaspersky Administration Kit consists of the following components:

• Administration Server stores information on Kaspersky Lab applications

installed on an enterprise network and manages such applications in a

centralized manner. The Administration Server stores all the data about

the corporate anti-virus protection system in an MSDE 2000 database

Introduction 5

with Service Pack 3 or higher, Microsoft SQL Server 2000 with Service

Pack 3 or higher, MySQL 5.0.32, Microsoft SQL 2005 or higher or

Microsoft SQL 2005 Express or higher. Databases must be working in the

corporate network before the installation and operation of the

Administration server begin. MSDE 2000 with Service Pack 3 can be

installed using the Kaspersky Administration Kit 6.0. In order to do it, you

computer must have Microsoft Data Access Components (MDAC) 2.8 or

higher installed on your computer.

• Administration Agent interfaces with the Administration Server and

Kaspersky Lab applications installed on a network host (workstation or

server). This component is common to all Kaspersky Anti-Virus Business

Optimal or Kaspersky Corporate Suite Windows products. Separate

versions of Administration Agent exist for Kaspersky Lab Novell and UNIX

applications.

• Administration Console provides a user interface for Server and Agent

administration services. Administration Console is implemented as a

Microsoft Management Console (MMC) plugin.

CHAPTER 2. GETTING STARTED

To build an effective protection system around your corporate network, follow

these steps:

1. Install Microsoft Data Access Components (MDAC) 2.8 or higher. This is

not required if this component is already installed in your corporate

network.

2. Install MSDE 2000 SP 3 (see section 2.1 on page 7), Microsoft SQL 2000

SP 3 or better, MySQL 5.0.32, Microsoft SQL 2005 or better, or Microsoft

SQL Express or better. Skip this step if your network already has either of

these database servers installed.

3. Install the Administration Server and Administration Console (see

section 2.2 on page 7).

4. Configure the initial settings of the anti-virus protection system using the

Quick Start Wizard (see section 2.3 on page 8).

5. Create administration groups (see section 2.4 on page 10) if such groups

have not been created using the Quick Start Wizard. Administration

groups allow to manage groups of client computers as a single entity by

applying policies and group tasks.

6. Remotely install the Network Agent on client computers to allow their anti-

virus application to interact with the Administration Server (see section 2.5

on page 10).

7. Remotely install on selected client computers Kaspersky Lab's application

that ensure anti-virus protection of the corporate network and support

administration via Kaspersky Administration Kit (see section 2.6 on

page 11). If these application are already installed, this step is not

required.

8. Configure the downloading of anti-virus database updates from the

Internet by the Administration Server, and verify that the operation is

successful. Verify that the databases are being updated on client

computers (see section 2.7 on page 12).

9. Configure options for notifying the administrator of virus-related events on

client computers (see section 2.8 on page 13).

10. Run an on-demand scan on client computers and check the notification

task performed on client computers (see section 2.9 on page 13).

11. View a report on the anti-virus protection of client computers and the

number of viruses detected by Kaspersky Lab’s applications (see

section 2.10 on page 14).

If the steps above have been successfully completed, you have built a reliable

anti-virus protection system for your corporate network.

Getting started 7

The following sections describe these steps in more detail.

2.1. Installing MSDE 2000

Skip this step if MSDE 2000 SP 3, Microsoft SQL Server 2000 SP 3, MySQL

5.0.32, Microsoft SQL 2005 or higher, or Microsoft SQL 2005 Express or higher

are already installed on the corporate network.

Before installing MSDE you must install Microsoft Data Access Components

(MDAC) 2.8 or higher (the distribution package is available Microsoft website).

To install MSDE 2000 from the package included in Kaspersky Administration

Kit,

1. Select a computer on which to install the Administration Server

database. This is typically the same computer on which Administration

Server will be installed.

2. Run locally the setup.exe file in the MSDE2KSP3 directory on the

Kaspersky Administration Kit installation CD.

3. Follow the setup wizard’s instructions.

After you have performed all the installation steps, the MSDE 2000 SP 3

application will be installed on the selected computer. MSDE 2000 SP 3 requires

no administration.

The Administration Server uses MSDE 2000 SP 3 or SQL Server 2000 SP 3 to

store anti-virus protection data in a central database.

Administration Server data may be backed up using klbackup utility bundled

with Kaspersky Administration Kit or using the Administration Server Backup

global task. Please refer to the Administrator’s Guide for details.

2.2. Installing Kaspersky

Administration Kit Components

In the course of an installation, desired components may be selected:

Administration Server, Kaspersky Lab Posture Validation Server for Cisco

NAC, Administration Agent, and Administration Console. Administration

Agent and Console are not optional; they are always installed. Kaspersky Lab

Posture Validation Server for Cisco NAC is a standard Kaspersky Lab

component for integration with Cisco Network Admission Control and is not

considered in this guide. By default, all components are installed.

If necessary, the Administration Console can be installed on another computer,

and manage the Administration Server via the network.

8Kaspersky Administration Kit 6.0

To install the Administration Server and / or the Administration Console,

1. Select a computer on which to install the components. If there is a

Windows domain structure on your network, it is recommended that you

install the Administration Server on a member of the domain.

Kaspersky Administration Kit 6.0 (Maintenance Pack 1) Administration

Server and/or Console may be installed on the same host running

Administration Server and/or Console Versions 5.x, or 6.0.

You are advised to possess domain administrator rights when installing

the product. This will allow to automatically create KLAdmins and

KLOperators groups and to provide necessary credentials to account,

under which Administration server will operate.

2. Run the setup.exe file from the Kaspersky Administration Kit installation

CD.

3. Follow the wizard’s instructions.

Select the domain administrator account as the service account under

which the Administration Server will start on this computer.

2.3. Quick Start Wizard

To perform initial configuration of anti-virus protection settings,

1. Run the Administration Console by clicking Start ÆPrograms Æ

Kaspersky Administration Kit ÆKaspersky Administration Kit.

2. Connect to the Administration Server by clicking the Administration Server

node in the console tree. Accept the server certificate.

3. Open the shortcut menu and select Quick Start Wizard.

4. Wait until the Administration Server finishes searching your network and

detects all computers on the network.

5. Create administration groups by one of the following methods:

• If you are only dealing with several test computers, select the

Manual option to manually add test client computers to the

group.

• If products are being rolled out to all hosts in an enterprise

network, administration groups can be created automatically.

Select the option to Create Logical Network Based on

Windows Network. This will create a logical network based on

Microsoft Windows domains and work groups (administration

groups will match Microsoft Windows domains and work

groups).

Getting started 9

6. Specify options for sending email and NET SEND notifications generated

by Kaspersky Lab’s applications. These settings can be edited as part of

the Administration Server properties. For more information, refer to the

Administrator’s Guide.

7. Run a process that creates policies for anti-virus applications and multiple

tasks that would configure correct operation of the anti-virus protection

system in the corporate network. Kaspersky Administration Kit 5 uses

group policies to apply settings uniformly to all computers in a group.

Tasks are actions performed by the anti-virus software on all computers in

a group.

The following objects will be created:

• Higher-level policies for Kaspersky Anti-Virus for Windows

Workstations 5.0 and 6.0 with default settings. Later you will be

able to view and modify the policy settings. In order to apply

changes that you have made in the policy to the client

computers and to prevent the user from altering these settings,

use the symbol.

• A global task for updating the Administration Server from the

Internet.

The application will download updates, to both the anti-virus

database and to program modules, from Kaspersky Lab’s

update servers, and save them to the shared folder specified

during the installation of Administration Server. Client

computers will retrieve the updates from this shared folder.

Later, in order to achieve more flexibility when the client

computers retrieve the updates, distribution of updates to the

slave Administration servers and Updating Agents can be used

(details see the Administrator's Guide). To configure updating

the settings for retrieving updates from the Kaspersky Lab's

updates servers click the Updater Settings button.

• An upper-level group task to update anti-viruses databases on

client computers will be created with default settings (for

Kaspersky Anti-Virus 5.0 and 6.0 for Windows Workstations).

The client computers will be configured to retrieve updates from

the shared folder.

• An on-demand scan task for client computers will be created

with default settings (for Kaspersky Anti-Virus 5.0 and 6.0 for

Windows Workstations).

8. Indicate whether the task for receiving updates by the Administration

server should be launched immediately or according to the schedule.

10 Kaspersky Administration Kit 6.0

9. In the final window, indicate whether the deployment wizard should be

launched immediately after the completion of the Quick Start Wizard.

2.4. Creating an administration

group

To add a new group to the logical network,

1. In the console tree or the Groups folder in the details pane, select a

group to which you want to add a new group. Open the shortcut menu

and click New ÆGroup. Enter a name for the new group and click OK.

2. Move the selected client computers from the Network group to the new

group using cut-and-paste or drag-and-drop or by selecting New→Host

from the pop-up menu and following the prompts provided by the resulting

wizard.

In order to create a set of computer for moving to the administration

group based on some criteria, use the shortcut menu command Find

computer (or the analogous command in the Action menu). Details

see the Administrator's Guide.

For more detail on updating Kaspersky Administration Kit 5.хand 6.0 to

Version 6.0 (Maintenance Pack 1) see Chapter 3, p. 16.

2.5. Remote installation of the

Network Agent

Administration Agent may be deployed both by itself and in collocation with a

desired application. This section describes only the installation of Administration

Agent. This is convenient in situations when the desired version of an anti-virus

application is already installed on the client.

To deploy (remotely install) the Network Agent from a remote location,

1. Run the Application Deployment Wizard from the Administration Console

shortcut menu in the Administration Console.

2. Select the Network Agent installation package created by the Quick Start

Wizard. This package is created during the installation of the

Administration Server and contains settings that are used by the Network

Agent to connect to the Administration Server.

3. Select the computers of the administration group containing the target

computers on which Network Agent is to be installed.

4. Configure the remote installation settings.

Other manuals for ADMINISTRATION KIT 6.0

Table of contents

Other KAPERSKY Software manuals

KAPERSKY

KAPERSKY ANTI-VIRUS 5.7 - FOR NOVELL NETWARE Service manual

KAPERSKY

KAPERSKY ANTI-VIRUS 5.6 - FOR NOVELL NETWARE Service manual

KAPERSKY

KAPERSKY ANTI-VIRUS 5.0 - FOR SAMBA SERVERS Use and care manual

KAPERSKY

KAPERSKY ANTI-VIRUS 5.5 - FOR LINUX-FREEBSD MAIL... Use and care manual

KAPERSKY

KAPERSKY ANTI-VIRUS 5.5 - FOR LINUX-FREEBSD MAIL... Service manual

KAPERSKY

KAPERSKY ANTI-SPAM 3.0 - Service manual

KAPERSKY

KAPERSKY ANTI-VIRUS 5.7 - FOR LINUX FILE SERVER Service manual

KAPERSKY

KAPERSKY ANTI-VIRUS 5.0 - FOR NOVELL NETWARE User manual

KAPERSKY

KAPERSKY CORPORATE SUITE User manual

KAPERSKY

KAPERSKY ANTI-VIRUS BUSINESS OPTIMAL User manual

KAPERSKY

KAPERSKY ANTI-VIRUS 4.5 - FOR MICROSOFT EXCHANGE... User manual

KAPERSKY

KAPERSKY ANTI-VIRUS 5.5 - FOR LOTUS NOTES-DOMINO User manual

KAPERSKY

KAPERSKY ANTI-VIRUS 4.5 - FOR MICROSOFT EXCHANGE... User manual

KAPERSKY

KAPERSKY ANTI-VIRUS - FOR FREEBSD-OPENBSD-BSDI FILE... User manual

KAPERSKY

KAPERSKY ANTI-VIRUS 5.5 - FOR NOVELL NETWARE Service manual

KAPERSKY

KAPERSKY MAIL GATEWAY 5.5 - Service manual

KAPERSKY

KAPERSKY ANTI-VIRUS 5.0 - FOR SAMBA SERVERS Service manual

KAPERSKY

KAPERSKY ANTI-VIRUS 5.0 - FOR LOTUS NOTES-DOMINO User manual

KAPERSKY

KAPERSKY ANTI-VIRUS - FOR FREEBSD-OPENBSD-BSDI MAIL... User manual

KAPERSKY

KAPERSKY ANTI-VIRUS 7.0 User manual

KAPERSKY

KAPERSKY ANTI-VIRUS 5.0 - FOR SAMBA SERVERS Service manual

KAPERSKY

KAPERSKY ANTI-VIRUS - FOR SUN SOLARIS MAIL SERVER User manual

KAPERSKY

KAPERSKY SECURITY - FOR PDA 5.0 User manual

KAPERSKY

KAPERSKY ANTI-VIRUS 6.0 User manual

Popular Software manuals by other brands

COMPRO

COMPRO COMPROFM manual

Muratec

Muratec OFFICEBRIDGE ONLINE user guide

Oracle

Oracle Contact Center Anywhere 8.1 installation guide

Adobe

Adobe 65007312 - Photoshop Lightroom Programmer's guide

Avaya

Avaya NULL One-X for RIM Blackberry user guide

HP ProLiant BL420c user guide

PS Audio

PS Audio PowerPlay Programming manual

Brady

Brady LOCKOUT PRO 3.0 Administrator's guide

Avaya

Avaya Interaction Center user guide

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Guide book

Novell

Novell GROUPWISE 8 - INTERNET AGENT manual

Oracle

Oracle Application 9i Configuration guide

Acer

Acer RDM user guide

Canon

Canon Vixia HF21 instruction manual

Canon

Canon ZR950 instruction manual

Samsung

Samsung Auto Backup user manual

Polycom

Polycom Vortex EF2201 Application note

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c user manual