Kaspersky Administration Kit created for remote control and maintenance of an anti-virus protection system built on Kaspersky Lab products. Namely:
- remote centralized installation and removal of Kaspersky Lab products or their components
- remote centralized configuration of settings for Kaspersky Lab products or their components
- centralized creation and remote launch of tasks
- license management
- automatic centralized updating of anti-virus databases and application modules
- centralized collection and registration of events
- centralized distribution of notifications.
The first step is to download Kaspersky Administration Kit 8.0.2177 rus,Kaspersky Administration Kiteng(This full versions, which include Kaspersky Administration Kit, Kaspersky Anti-Virus distribution kit for Windows Workstations / Servers, third-party components Microsoft SQL Express and Microsoft. NET Framework). The installation can be implemented on Windows OS, regardless of whether it is a server or a workstation; it is desirable that the computer operates 24 hours a day.
So, let's launch installation file, press "Further".
We indicate where we will install the program.
Reading license agreement and press« Yes »
Select Standard installation.
We indicate the number of computers on which Kaspersky will be installed.
If you are sure of all the previous steps, click"Further"
The installation process of all components is underway, at the end it is proposed to launch the console, click "Further"
Specify the Product Key or select the trial version. In the future, all servers and workstations will use this license.
Specify mail settings to receive notifications about work Kaspersky Administration Kit.
Functionality provided by the new console Kaspersky administration Administration Kit 8.0 is sufficient for effective management and deployment of anti-virus protection local network, allows the administrator to save his time.
The console is implemented as a separate application that connects to the management server. This implementation is more convenient than that of competing products; the console “responds” faster to the administrator’s actions, unlike, for example, the management console of some competitors, which is implemented in the form of a “slow” Java applet. The management console has a modern, user-friendly interface; fashionable graphs are included that reflect any statistics you want.
1.1. Installing anti-virus protection (order and complexity)
The deployment process is extremely simple; the Kaspersky Administration Kit distribution kit, as mentioned earlier, includes an administration agent, Kaspersky Anti-Virus for Windows Workstations, Kaspersky Anti-Virus for Windows Server s. When deploying protection (unlike competitors' products), an installation package is sent to clients, which already includes all the necessary updates - modules, AB-bases, etc.
Kaspersky Administration Kit supports various ways remote installation, including standard ones (RPC, LoginScript).
The administrator, when installing in large networks, can easily create a managed network structure based on existing domains and workgroups. It also supports the ability to create a structure based on information from a text file.
During installation, the product will offer to automatically create the necessary group policies and global tasks, the administrator can only edit the proposals for specific tasks.
If any errors occur during installation, the product will provide the administrator with a detailed report, based on which you can easily understand the reasons and eliminate the errors (when installing Endpoint protection from Symantec, for a long time we could not understand the reason for the deployment failure on some machines). Moreover, the administration agent is installed in most problematic cases; the administrator can only fix errors and deploy an antivirus.
Installing the server and console
The product does not require the installation of a server and console on one computer, which is a definite advantage this decision.
Figure 1: Console installation window. Remote Product Installation Wizard stage
Figure 2: Console installation window. Stage of installation options for Kaspersky Administration Kit
Figure 3: Console installation window. Destination folder selection options stage
Figure 4: Console installation window. Stage of selecting component options.
The next step asks you to select the size of the managed network. The choice determines which components of the administration console will be offered by the installer. This step is useful for organizations with a small network, as unused NAC/NAP elements will not be offered for installation.
Figure 5: Console installation window. Network size selection stage.
The step of choosing a database type is illustrated below.
Figure 6: Console installation window. Account selection stage.
Figure 7: Console installation window. Stage of setting parameters for connecting to MS SQL Server.
Figure 8: Console installation window. Stage of selecting the SQL authentication mode.
Figure 9: Console installation window. Folder creation stage public access.
Figure 10: Console installation window. The stage of setting connection parameters to the Administration Server.
Figure 11: Console installation window. Stage of setting up the Administration Server address.
Figure 12: Console installation window. The stage of setting up the Administration Server address for mobile devices.
1.2 Automatic removal of competitors' products
When deployed on a local network, the product will offer to uninstall competitors' products and incompatible security programs. In our case, when selecting this option, Symantec protection components were disabled but not removed. So this option, although useful, requires improvement.
Figure 13: Automatic uninstaller window for competitors' products.
1.3. Installing anti-virus software on workstations (installation methods)
The product offers several installation methods on workstations:
- using startup scripts (LoginScript),
- mailing via group policies Active Directory,
- using the administration agent
Figure 14: Remote Installation Wizard window. Installation package selection stage.
Figure 15: Remote Installation Wizard window. The stage of selecting computers for installation.
Figure 16: Remote Installation Wizard window. Installation method selection stage.
Figure 17: Remote Installation Wizard window. The stage of manually selecting computers for installation.
1.4. Possibilities for building a server hierarchy
This option is useful when used in large or distributed networks, when there are groups of servers. The product supports the creation of almost any hierarchy; it is possible to configure the inheritance of rules.
1.5. Working with the management console
The management console is a pleasure to use. A beautiful, clear, well-thought-out interface commands respect.
Create a group
The management console provides the ability to create any number of groups. An administrator can easily move computers from one group to another. You can set your own policies for each group.
Figure 18: Administration console group management window.
Detection of unprotected nodes
The product automatically searches for unassigned machines on the network. The search is carried out by polling Windows Network, Active Directory, IP subnets. Detected computers are displayed in a separate report.
An administrator can also easily detect compromised nodes - the selection is carried out according to a predefined criterion, and it is possible to create a selection independently.
Figure 19: Configuring parameters for selecting computers.
Figure 20: Setting up conditions for selecting computers by status.
Figure 21: Setting up conditions for selecting computers based on Anti-Virus protection parameters.
Figure 22: Setting up conditions for selecting computers based on network parameters.
Figure 23: Window for managing computer selections
The product also supports setting access levels for console users.
Centralized quarantine
Centralized quarantine, as understood by Kaspersky Lab, is one of the types of storage (other types are installation packages, updates, licenses, backup storage, file storage with deferred processing), and is an automatically generated list of files quarantined by the antivirus on workstations. Those. Unlike storage of installation packages, updates, licenses, files placed in quarantine (as well as files located in backup storage) are located on computers on the local network, stored on the server detailed description.
Figure 24: Installation package storage window
Figure 24-1: Update Storage Window
Figure 24-2: License Storage Window
Figure 24-3: Quarantine storage window
Figure 24-5: Backup Storage Window
Figure 24-6: Deferred File Storage Window
Possible tasks
The management console allows you to implement almost any task, even not related to antivirus protection(installation third party programs etc.). Through the management console, the administrator can obtain information about remote computers, installed applications. It is possible to conveniently call standard tools directly from the console - management remote computer, remote desktop, etc. The product implements the ability to turn on computers over a network (WAKE ON LAN), if this technology is supported at the hardware level.
Figure 25: New task wizard in the administration console
Upgrade options
The product supports many update settings. The composition of updates (bases, components), schedule, location (from local servers, from Kaspersky Lab servers) is configured. The ability to test updates is supported - checking for false positives of anti-virus signatures on a separate computer on the network. If such a response occurs, the update is not sent to other computers on the network.
A separation of the concepts of workstations and mobile clients based on availability to the management server. Mobile clients are workstations that, for some reason, can be removed from the network. For example, laptops that are used not only in the office. When such a workstation is removed from the network, special policies for mobile clients are activated - for example, updating not with local server, but via the Internet. Thus, users are under reliable protection outside the network perimeter.
Figure 26: General window of Group tasks – Updating workstations
Figure 27: General window of Group tasks – Update – servers
Figure 28: Setting up an update schedule for workstations.
Figure 29: Configuring notification settings for workstation update results.
Figure 30: Configuring the update source.
Monitoring task completion (incl. monitoring)
The administration console provides convenient monitoring of task execution - the administrator sees the progress of execution in real time, and detailed logging is carried out. A detailed description of the error is displayed if it occurs.
Figure 31: General Tasks window for a set of computers – Installing Network Agent.
2. Condition monitoring and reporting
In real time, the administrator can monitor the status of the protected network through the management console. Statistical data is implemented through all kinds of graphs, charts, tables, etc. The most necessary parameters for tracking are already preset, and it is also possible to create the necessary samples yourself.
Reports can be saved to XML formats, XTML, PDF. The necessary templates are already pre-installed; it is possible to create templates yourself. Exported reports are saved to local computer, where the management console is installed, it is possible to save to public folders.
Figure 32: Types of reports and notifications installed by default
Figure 33: Status window for computers in the selected group
2.1 Security Status Report
One of the preset reports. Allows you to quickly determine where and what problems exist. Contains information about the status of the anti-virus protection system on client computers. You can configure the detailed data output, sorting, and the group of computers to which this report is applicable. It is possible to add almost any information.
Figure 34: General window of Reports and notifications – Protection status.
Figure 35: General Reports and Notifications window – Deployment Status.
Figure 36: General window of Reports and notifications – Anti-Virus Statistics.
2.2 Graphic reports
All preset reports are duplicated in graphical form by default. The status and result are clearly demonstrated to the administrator. When creating new report templates, you can also use graphical reports.
Figure 37: General report window in Kaspersky Administration Kit
Figure 38: Error report window in Kaspersky Administration Kit
Figure 39: Window for reporting versions of Kaspersky Lab applications
Figure 40: Report window on used databases
Figure 41: Report window on used licenses in Kaspersky Administration Kit
Figure 42: Protection status report window in Kaspersky Administration Kit
Figure 43: Report window on security deployment in Kaspersky Administration Kit
Figure 44: Report window on users of infected computers
Figure 45: Incompatible applications report window in Kaspersky Administration Kit
Figure 46: Report window on the most infected computers in Kaspersky Administration Kit
Figure 47: Virus report window in Kaspersky Administration Kit
The product provides the ability to send reports by email, save them in a shared folder or on a local computer.
Figure 48: Wizard for creating a report distribution task. Selecting a report template.
Figure 49: Save Report Wizard. Selecting the report export format.
2.3. User and administrator notification settings
The product allows you to flexibly organize event notifications. The administrator can configure which events the user will see and in what form the notification will be.
The product can notify the administrator about events by sending a message to email, using NET SEND, launching an executable file, SNMP notification.
Figure 50: General notification window in Kaspersky Administration Kit
Figure 51: Master initial setup mail notification settings.
3. Possibility of eliminating epidemics (treating active infection)
To eliminate epidemics, the administrator can use a special tool - a policy that is applied automatically by the product if any conditions are met (mass infection of viruses, etc.). If the conditions occur, the product applies new specified (more stringent) policies, which provide for updating virus databases, running scans, access restrictions and other actions.
Figure 52: Window for selecting policies to be applied if a virus attack is detected.
Figure 53: Administration server event settings window.
4. System requirements of Kaspersky Administration Kit 8.0
- CPU Intel Pentium III 800 MHz or higher,
- 256 MB free random access memory,
- 1GB of free disk space.
Microsoft Windows 2000 SP4 and above; Microsoft Windows XP Professional SP2 and higher; Microsoft Windows XP Professional x64 and higher; Microsoft Windows Server 2003 and higher; Microsoft Windows Server 2003 x64 and higher; Microsoft Windows Vista SP1 and higher; Microsoft Windows Vista x64 SP1 (for Microsoft Windows Vista x64, Microsoft Windows Installer 4.5 must be installed); Microsoft Windows Server 2008; Microsoft Windows Server 2008 deployed in Server Core mode; Microsoft Windows Server 2008 x64 SP1 (for Microsoft Windows Server 2008 x64, Microsoft Windows Installer 4.5 must be installed); Microsoft Windows 7.
- Administration console (can be installed separately from the administration server, as well as installed on several computers on the network)
Hardware requirements:
- Intel Pentium III processor 800 MHz or higher,
- RAM capacity 256 MB,
- The amount of free disk space is 70 MB.
Software requirements:
Microsoft Windows 2000 SP4 and higher; Microsoft Windows XP Professional SP2 and higher; Microsoft Windows XP Home Edition SP2 and higher; Microsoft Windows XP Professional x64 and higher; Microsoft Windows Server 2003 and higher; Microsoft Windows Server 2003 x64 and higher; Microsoft Windows SP1 and higher; Microsoft Windows Vista x64 SP1 (for Microsoft Windows Vista x64, Microsoft Windows Installer 4.5 must be installed); Microsoft Windows Server 2008; Microsoft Windows Server 2008 x64 SP1 (for Microsoft Windows Server 2008 x64, Microsoft Windows Installer 4.5 must be installed); Microsoft Windows 7, Microsoft Management Console version 1.2 and higher.
When working with Microsoft Windows 2000, you must have the Microsoft browser Internet Explorer 6.0. When working with Microsoft Windows 7 E Edition and Microsoft Windows 7 N Edition, you must have installed browser Microsoft Internet Explorer 8.0 and higher.
Network Agent (installed on protected computers on the network)
Hardware requirements:
- free disk space 20 MB,
- Intel Pentium processor with a frequency of 233 MHz or higher,
- RAM capacity 32 MB,
- free disk space 32 MB,
- Intel Pentium 133 MHz processor or higher,
- 64 MB RAM,
- The amount of free disk space is 100 MB.
Software requirements:
For Windows:
Microsoft Windows 2000 SP4 and higher; Microsoft Windows XP Professional SP 2 and higher; Microsoft Windows XP Professional x64 and higher; Microsoft Windows Server 2003 and higher; Microsoft Windows Server 2003 x64 and higher; Microsoft Windows Vista SP1 and higher; Microsoft Windows Vista x64 SP1 (for Microsoft Windows Vista x64, Microsoft Windows Installer 4.5 must be installed); Microsoft Windows Server 2008; Microsoft Windows Server 2008 deployed in Server Core mode; Microsoft Windows Server 2008 x64 SP1 (for Microsoft Windows Server 2008 x64, Microsoft Windows Installer 4.5 must be installed); Microsoft Windows 7.
For Novell:
Novell NetWare 6 SP5 and higher; Novell NetWare 6.5 SP7 and higher.
4.1 Required additional services
When installing Kaspersky Administration Kit, you will need Microsoft Data Access Components (MDAC) version 2.8 and higher, MSDE 2000 with Service Pack 3 installed, Microsoft SQL Server 2000 with Service Pack 3 and higher installed, or MySQL Enterprise versions 5.0.32 or 5.0.70, or Microsoft SQL 2005 and higher; or Microsoft SQL Express 2005 and higher, or Microsoft SQL Express 2008, Microsoft SQL 2008.
If any of the required programs are missing on the computer on which Kaspersky Administration Kit is being installed, the installer will offer to install the necessary components - the developers have included everything necessary in the distribution, including the Administration Agent and Kaspersky Anti-Virus for Windows Workstations, Kaspersky Anti-Virus for Windows Servers, let and to the detriment of the distribution size (313.8 MB), although in the presence of a wide channel and in comparison with the size of competitor distributions, the size of the distribution no longer seems large. During installation you will also be prompted to install Microsoft .NET Framework 2.0.
Figure 54: Installing Kaspersky Administration Kit. Selecting a database type.
Figure 55: Installing Kaspersky Administration Kit. Installing the required components.
5. Conclusions
Testing on the analytical center network site showed the modernity, simplicity and reliability of the product set Kaspersky Administration Kit 8.0, Kaspersky Anti-Virus for Windows Workstations 6.0 (MP4) and Kaspersky Anti-Virus for Windows Servers 6.0 (MP4).
This set of products provides high level protection, flexible administration and high-quality control of the protection status, regardless of topology corporate network.
The relative disadvantages of the solution include only the fact that Kaspersky Anti-Virus for Windows Workstations 6.0 (MP4) has not yet received the full technological filling that has been successfully tested in personal versions of Kaspersky Lab starting from version 2009 and higher: HIPS, reputation services and etc.
In addition, due to the small product portfolio of this vendor, Kaspersky Administration Kit 8.0 is currently only capable of managing anti-virus protection. It does not allow you to manage the entire (or almost all) complex information security enterprise, which its competitors' counterparts are approaching.
Subjective rating (on a 10-point scale): 9
- Functionality: 9
- Reliability: 10
- Handling: 9
- Competitiveness: 9
- Support: 10
- Price: 10
Kaspersky Administration Kit is a convenient multifunctional tool for centralized deployment and management of an integrated enterprise security system built on the basis of Kaspersky Lab products. Kaspersky Administration Kit allows you to increase the level of protection and reduce the total cost of ownership of Kaspersky Lab products, implementing the principle of cost-effectiveness that underlies the company's solutions. Kaspersky Administration Kit is optimal solution for organizations of any size.
Advantages
- Rapid deployment of a security system
Kaspersky Administration Kit implements three different approaches to searching for computers on the network; customizable, automatically generated installation packages; the ability to install auxiliary servers, allowing you to build a protection system taking into account the characteristics of the corporate network. - Centralized security management
Kaspersky Administration Kit provides a complete set of administration tools and management tools for all applications of the protection system, allowing you to create policies, tasks and hierarchical groups computers, configure task scheduling, provide integration with Cisco NAC and Microsoft NAP solutions, manage mobile device security, and much more. - Uninterrupted operation and fault tolerance
Kaspersky Administration Kit regularly updates the applications and anti-virus databases included in the protection system, ensuring that the protection infrastructure is up to date. Before installation, updates are tested, and in emergency cases, remote diagnostic functions can be used, Reserve copy and data recovery. - Convenient reporting system
Kaspersky Administration Kit allows you to constantly monitor the security level of your corporate network using special dashboards, custom reports and logs of administrator actions. - Effective technical support
Do you need occasional assistance in solving specific issues or daily full-fledged support for the security system of your corporate network? Service technical support Kaspersky Lab is always happy to help you. In addition to standard 24/7 technical support, Kaspersky Lab offers to corporative clients additional types of support and services.
Loading...
