KASPERSKY LAB Kaspersky® Administration Kit 6.
KASPERSKY® ADMINISTRATION KIT 6.0 Deployment Guide Kaspersky Lab Ltd. Visit our website: http://www.kaspersky.com/ Revision date: February 2007.
Contents CHAPTER 1. KASPERSKY® ADMINISTRATION KIT .................................................. 5 1.1. Purpose, structure and main functions ................................................................. 5 1.2. Software and Hardware Requirements ................................................................ 7 1.3. Distribution kit ........................................................................................................ 9 1.4. Help desk for registered users ..........................
Kaspersky® Administration Kit 4.1.7. Creating a remote installation task............................................................... 53 4.1.8. Configuring the deployment task.................................................................. 66 4.1.9. Deploying application to slave administration servers................................. 68 4.1.10. Remote software removal .......................................................................... 70 4.2. Deployment wizard................................
CHAPTER 1. KASPERSKY® ADMINISTRATION KIT 1.1. Purpose, structure and main functions Kaspersky® Administration Kit is an application that is designed to provide a centralized solution for most important administration tasks associated with managing the corporate network anti-virus security system based on Kaspersky Lab’s applications included into Kaspersky Anti-Virus Business Optimal and Kaspersky Corporate Suite. Kaspersky Administration Kit supports all network configurations that use TCP/IP protocol.
Kaspersky® Administration Kit • create individual patterns for the application's operation by creating and running tasks for a set of computers from different administration groups. • Automatically update the anti-virus database and application modules on computers. This feature allows centralized updating of the anti-virus database for all installed Kaspersky Lab's applications without accessing the Kaspersky Lab's internet updates server for each individual update.
Kaspersky® Administration Kit 7 Kaspersky Corporate Suites. Separate versions of Administration Agent exist for Kaspersky Lab Novell and UNIX applications. • Administration Console provides a user interface to the administration services of the Administration Server and Network Agent. The management module is implemented as the extension of the Microsoft Management Console (MMC). 1.2.
Kaspersky® Administration Kit • • Software requirements: • Microsoft Windows 2000 SP 1 or higher; Microsoft Windows XP Professional SP 1 or higher; Microsoft Windows XP Professional x64 and higher, Microsoft Windows Server 2003 or higher; Microsoft Windows Server 2003x64 or higher Microsoft Windows NT4 SP 6a or higher, Microsoft Windows Vista, Microsoft Windows Vista x64; • Microsoft Management Console version 1.
Kaspersky® Administration Kit o 9 32 MB free (available) space on hard drive 1.3. Distribution kit This software product is supplied free-of-charge with any Kaspersky Lab's application included into the package of Kaspersky Anti-Virus Business Optimal and Kaspersky Corporate Suite (retail box version) and also available for download from Kaspersky Lab's corporate website at www.kaspersky.com. 1.4.
Kaspersky® Administration Kit actions when using the application is provided in the Kaspersky Administration Kit Reference Book. In order to review questions that our users often ask Kaspersky Lab's support specialists visit our website and follow the Services ÆKnowledge base link. This section contains information about installation, configuration and functioning of Kaspersky Lab's applications and about removal of most commonly spread viruses and disinfection of infected files. 1.6.
CHAPTER 2. TYPICAL SCHEMES OF DEPLOYMENT OF ANTI-VIRUS PROTECTION 2.1. Schemes of deployment of antivirus protection on the computers within the logical network There are two common scenarios that show how you can deploy reliable antivirus protection using Kaspersky Administration Kit: • You can remotely install applications on client computers across the logical network from a single workstation.
Kaspersky® Administration Kit 2.2. Building a centralized anti-virus protection administration system The first step to building a system of centralized management over an enterprise network through Kaspersky Administration Kit is to design a logical network. At this stage, you should make the following decisions: 1. Select isolated sections within the network and determine the number of Administration servers that must be installed.
Typical Schemes of Deployment of anti-virus protection 13 After this, it is required to create a hierarchy of the Administration servers and for each Server create a logical network structure as follows: create a hierarchy of the administration groups and distribute computers among the corresponding groups.
CHAPTER 3. INSTALLING KASPERSKY ADMINISTRATION KIT Before starting the installation, make sure that the computer meets the software and hardware requirements to the Administration Server and the Administrator's workstation (see section 1.3 on page 9). MSDE (Microsoft Data Engine), MySQL server or Microsoft SQL server is used to store the Administration Server information. If no MSDE or SQL server is installed, you have to install one of them before installing the Administration Server.
Installing Kaspersky Administration Kit Port Number 14000 18000 Protocol TCP HTTP Description Used: • to receive data from clients; • to connect to update agents; • to connect to slave Administration Servers. Used by Administration Server to download data from a Cisco NAC authentication server. Host Designated as Update Server 13000 TCP Used by clients to connect. 13001 TCP Use by client computers to connect if a host with Administration Server is designated as update agent.
Kaspersky® Administration Kit To install MSDE: 1. Run the executable file in the MSDE2KSP3 directory on the Kaspersky Administration Kit 5.0 installation CD. The installation wizard will then suggest that you configure settings and run the application. Follow the setup wizard’s instructions. 2.
Installing Kaspersky Administration Kit 17 Figure 1. Selecting the server name 3.2. Installing the Administration Server and Administration Console on Local Host This section describes a local installation of Administration Server and/or Console. If there is even a single Administration Server running on a network, additional servers may be installed using forced installation under the remote installation task.
Kaspersky® Administration Kit 3. Then define the folder to be used to install the components. The default folder is:
Installing Kaspersky Administration Kit 19 A server version of the Network Agent will be installed with the Administration Server. Their joint installation is impossible using a regular version of the Network Agent. If this component is already installed on your computer, remove it and reinstall the Administration Server.
Kaspersky® Administration Kit • Domain User account - the Administration Server will be started under the user account included into the domain. In this case the Administration Server will initiate all operations using the rights of this account and during the next stage you will be offered to specify the user whose account will be used.
Installing Kaspersky Administration Kit Figure 4. Selecting user If you selected a user who does not have the domain administrator's rights, the Administration Server will be launched under his account, however the functionality of Kaspersky Administration Kit will be somewhat restricted. For example, it may not have the rights required to execute a deployment task using a launch scenario (see section 0 on page 53) and polling some domains of the Windows network.
Kaspersky® Administration Kit Figure 5. Message about rights granted to the user. 7. During the next stage you will be offered to define resourse Microsoft SQL server (MSDE) or MySQL (see Figure 6), that will be used to store the Administration Server information database. Figure 6. Selecting the database 8.
Installing Kaspersky Administration Kit 23 Value (local) will be automatically assigned to the Server name field if an SQL server is detected on the computer from which Kaspersky Administration Kist is being installed. To display the list of all Microsoft SQL servers installed in the network, press the Browse… button. If the Administration Server will be started under the local administrator's account or under the system account, the Browse button will not be available. Figure 7.
Kaspersky® Administration Kit Figure 8. Selecting MySQL server If there are no SQL servers in the network and you cannot use them, you have to install one (see section 3.1 on page 15). If you wish to install an SQL server on the computer from which you are installing Kaspersky Administration Kit, you have to abort the installation and restart it after you have installed the SQL server.
Installing Kaspersky Administration Kit 25 If Administration Server Database is on another computer, you need to choose SQL server authentication mode when installing or updating an Administration Server. Figure 9. SQL server authentication mode For MySQL server indicate the account and the password (see Figure 10). Figure 10.
Kaspersky® Administration Kit 10. After this (see Figure 11), specify the location to store the shared folder that will be used: • to store files required for remote installation of applications (files will be copied to the Administration Servers when installation packages are created); • to store the updates copied from the updates source to the Administration server. This resource will be public to all users for reading only. Figure 11.
Installing Kaspersky Administration Kit 27 By default a local folder KLShare will be created in the folder specified for installation of the Kaspersky Administration Kit application components. 11. Use the next wizard dialog to specify Administration Server address (cf. Figure 13) by setting: • DNS name. This option is used when there is a DNS server on the network which clients can use to obtain Administration Server address. • NetBIOS name.
Kaspersky® Administration Kit • port number that will be used to connect to the Administration Server. By default port 14000 will be used. If it has been assigned, you can change it. • SSL port number that will be used for secure connection to the Administration Server u sing SSL protocol. By default port 13000 port is used. If the Administration Server is running Microsoft Windows XP SP 2, then the in-built firewall will block TCP port under numbers 13000 and 14000.
Installing Kaspersky Administration Kit 29 Server. In order to do it, check the Create a backup copy of the certificate box. • Restore certificate - select this option if you are restoring the Administration server with no backup copy available. In this case you can restore the data and the structure of the logical network of the previous Administration Server. Figure 14. Selecting the method to be used to receive the Administration Server certificate 14.
Kaspersky® Administration Kit Figure 15. Selecting folder for saving the backup copy of the certificate If during the previous stage you select the option of restoring the Server's certificate from a backup copy, specify the following in the corresponding window (see Figure 16): • folder in which the backup copy of the certificate file is saved; • password that was used for encryption when creating a backup copy of the certificate.
Installing Kaspersky Administration Kit Figure 16. Selecting the folder for storing the backup copy of the certificate. After you have finished configuring the Kaspersky Administration Kit installation settings, you can review them and start the installation. After the installation of the Administration Console an icon will appear in menu Start → Programs→Kaspersky Administration Kit of your computer. This icon can be used to start the Console.
Kaspersky® Administration Kit Property Administration Server Kaspersky Lab PVS for Cisco NAC Administration Agent klnacserver.exe klnagent.exe Process Name in Windows Task Manager klserver.exe Startup Type Automatically, at operating system boot. User Name Local Service or user specified. A server version of the Network Agent will be installed on the computer together with the Administration Server.
Installing Kaspersky Administration Kit 33 3.3. Removing Kaspersky Administration Kit components You can uninstall Kaspersky Administration Kit using both the Uninstall Kaspersky Administration Kit option under Start → Programs → Kaspersky Administration Kit and the standard Windows Add / Remove Programs facility. This will start a wizard that will uninstall all application components (including plugins) from the computer.
Kaspersky® Administration Kit the Administration Server is supported. The new version of Administration Server is backward compatible with the previous version. 3. In order to upgrade the Network Agent installed on the network computers, create a group or a global task for installation of a newer version of the component. Run the task manually or according to the schedule. After this task is successfully completed, the newer version of the Network Agent will be upgraded.
CHAPTER 4. INSTALLATION AND REMOVAL OF SOFTWARE ON THE COMPUTERS Before you start the installation, you must make sure that the software and hardware of the computers meet the corresponding requirements (see section 1.3 on page 9) Kaspersky Administration Kit allows installation and removal of Kaspersky Lab's applications using the following methods: • remotely in a centralized way, via the Administration Console; • locally, individually on each computer.
Kaspersky® Administration Kit Under the current version of Kaspersky Administration Kit the following Kaspersky Lab applications may be managed remotely: • • Workstation and file server protection: • Kaspersky Antivirus 5.0 for Windows File Servers; • Kaspersky Antivirus 6.0 for Windows Servers; • Kaspersky Antivirus 5.0 for Windows Workstations; • Kaspersky Antivirus 6.0 for Windows Workstations; • Kaspersky Antivirus 5.0 Second Opinion Solution; • Kaspersky Antivirus 5.
Installation and Removal of Software on the Computers 37 Installation package contains file setup.exe using which the local installation of the application in non-interactive mode is performed. 2. Create remote installation task (see section 0 on page 53). In order to install the application on all computers in the logical network or several administration groups or on specific computers from various groups, you must create a global deployment (remote installation) task.
Kaspersky® Administration Kit 2. Select in the console tree the Remote installation node, open the shortcut menu and select command Create → Installation Package or use the analogous item in the Action menu. This will start the wizard. Follow its instructions. 3. You will be offered to specify the name of the installation package and during the next step - to specify the application to be installed (see Figure 17).
Installation and Removal of Software on the Computers 39 If you create an installation package to install other applications (see Figure 18): • select Create installation package for application specified by the user from the drop-down list; • indicate the path to the application distribution package using the Browse button; • install the Copy entire folder into the installation package box, if the package must contain the entire content of the folder in which the distribution file is located; • sp
Kaspersky® Administration Kit A license key is not required as the installation package for Administration Server and Agent is being generated. Figure 19. Creating an installation package. Selecting the license key 5.
Installation and Removal of Software on the Computers 41 in the console tree, expand the Remote Installation node, select the required installation package in the results pane and use the Properties command from the shortcut menu or the analogous command from the Action menu. This will open window Properties see Figure 20) that consists of tabs General, Settings, Licenses and OS reboot.
Kaspersky® Administration Kit Figure 20.
Installation and Removal of Software on the Computers 43 Figure 21. Installation package properties review window The Settings tab The License tab (see Figure 22) contains general information about the license for the application for which installation the package is created. The License tab is not available in the properties of the Network Agent or the Administration Server installation package properties.
Kaspersky® Administration Kit Figure 22. Installation package properties review window The License tab On the OS reboot tab (see Figure 23) you can determine actions to be performed if the computer must be restarted after the installation of the application. You can select one of the following options: • Do not restart the operating system • If required, restart the operating system automatically – this will reboot the operating system only as needed.
Installation and Removal of Software on the Computers o 45 specify automatic restart of the computer's operating system if it is not performed by the user within the specified time interval starting with the moment the application has been installed. In order to do it, check the Force the restart in (min.) box and specify the time interval. If a locked computer needs to be rebooted, check Close Running Applications Automatically. By default this option is unchecked. Figure 23.
Kaspersky® Administration Kit If the package for the remote installation of the Network Agent has been deleted, then in order to create it again, select file klnagent.kpd located in the NetAgent folder of the Kaspersky Administration Kit distribution package to be used as the file that contains the description The settings of the Network Agent installation contain a minimum set of settings required to ensure the functioning of the component immediately following its installation.
Installation and Removal of Software on the Computers 47 box. After this press the Settings button and in the window that will open enter the proxy server address, user name and the password. • Opening UDP Port 137 used to obtain Administration Server IP address in Kaspersky Antivirus 6.0 Anti-Hacker. Check Enable NetBIOS in Kaspersky Antivirus 6.0 Anti-Hacker. • Adding a UDP port required by the Administration Agent to the Microsoft Windows firewall exceptions list.
Kaspersky® Administration Kit Figure 24. Administration Agent Installation Package Properties Windows. Administration Group Tab The Network Agent is installed on the computer as a service with the following set of attributes: • service name KLNagent; • displayed name Kaspersky Network Agent; • automatic start at the operating system startup; • with the Local system account.
Installation and Removal of Software on the Computers 49 4.1.4. Creating and Configuring Administration Server Installation Package When creating an Administration Server installation package as a file with description, select file ak6.kpd, located in the root directory of the Kaspersky Administration Kit distribution. The properties of the Administration Server installation package are shown on two tabs: General (cf. Figure Figure 20) and Reboot OS (cf. Figure Figure 23).
Kaspersky® Administration Kit Figure 25. Creating a set of installation packages Specify the required value in the The maximum number of simultaneous downloads:. 5. In the next wizard window (see Figure 26) check boxes next to the names of the slave Administration Servers to which the installation packages must be distributed.
Installation and Removal of Software on the Computers 51 Figure 26. Selecting slave Administration Servers 6. In the next wizard window specify the task launch schedule (details see section 0 on page 53). 7. To exit the wizard when it is completed, press the Finish button. 4.1.6. Distribution of the installation packages within a group using network agents In order to distribute installation packages within a group, you can use updating agents.
Kaspersky® Administration Kit In order to create the list of the updating agents and configure them to distribute installation packages to computers within a group, 1. Connect to the required Administration Server. 2. Select the required group in the console tree, open the shortcut menu and select the Properties command or use the analogous item in the Actions menu. 3.
Installation and Removal of Software on the Computers 53 • specify the number of the port used by the client computer to securely connect to the updating agent using SSL protocol. The default port number is 13001; • check box Use multiaddress IP delivery and fill in fields Multicast IP Address and Multicast IP Port Number. 5. Press the Apply or the ОК button. Figure 28.
Kaspersky® Administration Kit Microsoft Windows NT/2000/2003/XP that support such ability or onto computers running Microsoft Windows 98/Me on which the Network Agent is installed. If the connection between the Administration Server and the client computer is established via Internet or is protected by a firewall, shared folders cannot be used to transfer data. In this case the files required to install the application to the client computer can be delivered by the Network Agent.
Installation and Removal of Software on the Computers 55 Figure 29. Specifying the task type 5. After this, specify the installation package that will be installed during the execution of this task (see Figure 30). Select the required package from the packages created for the particular Administration Server or create a new package using the New… button. Some applications that support administration via Kaspersky Administration Kit can be installed on the computers only locally.
Kaspersky® Administration Kit Figure 30. Selecting the installation package for installation 6. During this stage select the Push install option (see Figure 31) Figure 31.
Installation and Removal of Software on the Computers 7. 57 In this wizard window (see Figure 32) you will be offered to determine additional installation settings. • Whether the application must be reinstalled if it has already been installed on the computer. Check the Do not install application if it is already installed box in order to prevent repeated installation (by default the box is checked).
Kaspersky® Administration Kit Figure 32. Additional installation settings 8. During this step (see Figure 33) you will be offered to install the Network Agent together with the application. We recommend that you use the joint installation in order to reduce load on the Administration Server. In order to do it check the Install along with Administration Agent box and check box next to the name of the required installation package. If required, create a new installation package using the Create button.
Installation and Removal of Software on the Computers 59 Figure 33. Selecting joint installation with the Network Agent 9. Determine the method to select the computers on which the task will be created (see Figure 34): • Based on data obtained in a Windows network poll. In this case computers for installation will be selected based on the data received by the Administration Server based on the corporate Windows network polling. • Based on manually entered host addresses.
Kaspersky® Administration Kit Figure 34. Selecting the method to be used to select the client computers If computers are selected based on the data received as the result of the Windows network polling, the list will be created in the wizard window (see Figure 35) and will be performed in the same way as when adding computers to the logical network (details see Reference Book for Kaspersky Administration Kit).
Installation and Removal of Software on the Computers 61 Figure 35. Creating the list of computers for installation based on the Windows network data If you select computers manually, then the list is created by entering NETBIOS or DNS names, IP addresses (or a range of IP addresses) of the computers or by importing the list from a txt file in which each address must be entered in a new line (see Figure 36). Figure 36.
Kaspersky® Administration Kit 10. In the next wizard window specify under which account the deployment task will be launched on the computers (see Figure 37). The account must have the administrator's rights for all computers on which you plan to perform remote software installation. When installing the software on the computers included in various domains, between such domains and the domain in which the Administration Server is working trusted relationship must exist.
Installation and Removal of Software on the Computers 63 Figure 37. Selecting the account 11. Then create the schedule to launch the task (see Figure 38). • Select the required task launch mode from the Scheduled launch drop-down list: o Manually o Every N hour(s) o Daily o Weekly o Monthly o Once (in this case the deployment task will only run once on the computer irrespective of the result of its execution). o Now (immediately following the creation of task and completion of the wizard).
Kaspersky® Administration Kit • Configure the schedule settings in the group of fields based on the selected mode (details see Reference Guide for Kaspersky Administration Kit). Figure 38. Daily task launch In order to create a global deployment task using the startup scenario: 1. Connect to the required Administration Server. 2. Select the Global tasks node in the console tree, open the shortcut menu and select the New / Task command or use the analogous item in the Action menu.
Installation and Removal of Software on the Computers 65 7. In the next wizard window (see Figure 36) select accounts of users for which the startup scenario must be changed. When the installation task is started, Kaspersky Administration Kit checks whether a startup script is specified for any other users in addition to those selected. If that is the case, installation will not proceed. Appropriate error information will be written out to the log file. Figure 39. Selecting accounts 8.
Kaspersky® Administration Kit In order to do it, select the Groups node in the console tree, open the shortcut menu and select the Install command or use the analogous command from the Action menu. This will launch the group deployment task creation wizard described above, however, this wizard will not include the task type and computer group selection steps. Follow its instructions. 4.1.7.
Installation and Removal of Software on the Computers 67 Figure 40. Configuring a deployment task Push installation method When configuring a deployment task using a startup scenario, you can us the Settings tab to change the list of accounts of users for who the startup scenario will be modified (see Figure 41). To edit the list use the Add and the Remove buttons.
Kaspersky® Administration Kit Figure 41. Configuring a deployment task using the startup scenario. 4.1.8. Deploying application to slave administration servers This task enables you to install and update software on slave servers Before creating the task make sure that an installation package is on all the servers. Use Package retranslation task to send the package to server (see section 4.1.5). To create application deployment to slave servers task: 1. Connect to the required Administration Server.
Installation and Removal of Software on the Computers 69 4. When selecting the application and the task type (see Figure 29), specify values Kaspersky Administration Kit and Deploy application to slave administration servers. 5. Specify the installation package that will be installed during the execution of this task 6. Check the Do not install application if it is already installed box in order to prevent repeated installation (by default the box is checked). 7.
Kaspersky® Administration Kit Figure 43. Application Deployment to slave administration servers task. Settings tab. 4.1.9. Remote software removal In order to remotely remove the software: Create a task similarly to creation of a deployment task (see section 0 on page 53); select Remote application removal as the task type and select the required Kaspersky Lab's application from the Application to be removed drop-down list in the Application window (see Figure 44).
Installation and Removal of Software on the Computers 71 Figure 44. Selecting an application to be removed The task you created will be run according to the schedule. 4.2. Deployment wizard You can use deployment wizard to install Kaspersky Lab's applications. This wizard allows performing application deployment using the forced installation method using installation packaged created or directly from the distribution package.
Kaspersky® Administration Kit In order to install application using the deployment wizard: 1. Connect to the required Administration Server. 2. In the console tree of the main Kaspersky Administration Kit application window select the node corresponding to the required Administration Server, open the shortcut menu and select the Deployment wizard command or use the analogous command in the Action menu. This will run the wizard. Follow its instructions. 3.
Installation and Removal of Software on the Computers 73 • Install the application onto selected computers, if you select this option, then after the wizard is complete a global application deployment task will be created. • Install application onto computers in the administration group - as the result of the wizard's work, a group task will be created. Figure 46. Selecting a task type 6.
Kaspersky® Administration Kit Figure 47. Selecting a group 7. Then determine under which account the deployment task will be run on the computers (details see section 0 on page 53). Figure 48.
Installation and Removal of Software on the Computers 75 8. After this a window will open that will display the process of distribution and execution of the deployment task on the computers of the selected group (see Figure 49). You can switch to the final window of the wizard without waiting for the process to be completed. In order to do it, press the Next button. You can view detailed information about the results of the task execution on each computer using the History button. Figure 49.
Kaspersky® Administration Kit • install the required applications on the computer that will be included into the anti-virus protection system according to the description in the corresponding Guides; • install the administration plugin for each of the installed Kaspersky Lab's applications into the administrator's workstation (see section 4.3.2 on page 81).
Installation and Removal of Software on the Computers 77 • the port number using which the Network Agent will connect to the Administration Server. By default port 14000 will be used. If it has been assigned, you can change it. Only decimal representation is allowed. • port number that will be used for secure connection to the Administration Server using SSL protocol. By default port 13000 port is used. If it has been assigned, you can change it. Only decimal representation is allowed.
Kaspersky® Administration Kit Figure 51. Configuring the connection settings via a proxy server 6. After this, determine which folder of the Network group the computer must be added to after it is detected by the Administration Server during the Windows network polling. Select one of the following options: (see Figure 52): • Default group name - the computer will be added to the folder that corresponds to its position in the Windows network: domain or the workgroup (this is the default option).
Installation and Removal of Software on the Computers 79 Figure 52. Selecting the group in the Network folder to store the computers 7. During the next stage (see Figure 53) you have to specify the method you would like to use to receive the certificate of the Administration Server's to which the Network Agent will connect.
Kaspersky® Administration Kit Figure 53. Selecting the method to be used to receive the Administration Server's certificate 8. In the final wizard window (see Figure 54) you will be offered to run the Network Agent immediately after the wizard is complete. If you would like to run it later, uncheck the Launch Network Agent box checked by default.
Installation and Removal of Software on the Computers 81 Figure 54. Configuring the launch of the Network Agent After the wizard is complete, the Network Agent will be installed on your computer. You can review the properties of the Kaspersky Network Agent service, start, stop or monitor it using the standard Windows administration tools - Computer Management → Services.
Kaspersky® Administration Kit The file of the administration plugin for the Network Agent klcfginst.exe is located in the NetAgent folder of the distribution package of Kaspersky Administration Kit 4.3.3. Installing applications in noninteractive mode In order to install an application in non-interactive mode: 1. Create the required installation package (see section4.1.1xx) if the installation package for the application you would like to install has not been created.
Installation and Removal of Software on the Computers 83 To generate a Kaspersky Administration Kit answer file: 1. Use the command line to go to the folder containing a Kaspersky Administration Kit distribution and run the executable with switches /r and /f1"\setup.iss"2 (for example, setup.exe /r /f1"C:\setup.iss"). • 2. This will start the application installation wizard on the host computer. Follow the prompts offered by the wizard to configure application installation settings.
APPENDIX A. GLOSSARY This Guide uses some specific terms related to anti-virus protection. Glossary is a list of definitions of these terms. The glossary entries are arranged in alphabetical order to facilitate using the glossary. A Available updates – Service Packs that contain urgent updates accumulated over time and latest changes in the application architecture. Administration group – Computers grouped in accordance with their functional and installed Kaspersky Lab applications.
Appendix A 85 Administration Server. It is located in the Cert folder of the installation folder. B Block object – Prevent external applications from accessing an object. The blocked object cannot be read, executed, modified, or deleted. Backing up – copying data of the Administration server for storage and subsequent restoration performed by the backup utility.
Kaspersky® Administration Kit the first action after detection of a suspicious object, the program creates a backup of this file. If some data are lost during disinfection, you can use the backup to recover this object. Deleting an object – A method of handling an object. To delete an object is to remove it physically from a computer. This method is recommended for treating infected objects.
Appendix A 87 IStreams technology – A technology that excludes the files stored on NTFS-formatted disks that remained unmodified since the last scan. The IStreams technology was implemented by using a method of storing file checksums in the additional NTFS streams. Infected object – An object containing a virus. We recommend that you abandon working on these objects because they can infect your computer.
Kaspersky® Administration Kit license period defined by the license key is one year from the date of purchase. After your license expires, the application will operate but you will not be able to update the anti-virus database. Local network administrator – A user who installs, configures, and maintains Kaspersky Administration Kit and remotely manages Kaspersky Lab applications installed on the logical network computers.
Appendix A Quarantine – A special storage that isolates infected and suspicious objects. R Real-time protection – A scanning mode in which an anti-virus application is memory resident. In the real-time protection mode, the application scans all objects when you open them for reading, writing, or executing.
Kaspersky® Administration Kit Startup objects – A set of programs that are necessary for launching and smooth operation of the operating system and other software installed on your computer. Your operating system launches these objects during each startup. Some viruses attempt to infect the startup objects and can cause a startup failure. Suspicious object – An object that contains either a modified code of a well-known virus or a code reminiscent of a virus yet unknown to Kaspersky Lab specialists.
APPENDIX B. KASPERSKY LAB Founded in 1997, Kaspersky Lab has become a recognized leader in information security technologies. It produces a wide range of data security software and delivers high-performance, comprehensive solutions to protect computers and networks against all types of malicious programs, unsolicited and unwanted email messages, and hacker attacks. Kaspersky Lab is an international company.
® Kaspersky Administration Kit 92 B.1. Other Kaspersky Lab Products Kaspersky Lab News Agent The News Agent is intended for timely delivery of news published by Kaspersky Lab, for notifications about the current status of virus activity and fresh news. The program reads the list of available news channels and their content from news server of Kaspersky Lab with specified frequency. The product performs the following functions: • It visualizes in the system tray the current status of virus activity.
Appendix B • Select standard/extended anti-virus databases for scanning. • Save a report on the scanning results in txt or html formats. Kaspersky Anti-Virus® 6.0 Kaspersky Anti-Virus 6.0 is designed to safeguard personal computers against malicious software as an optimal combination of conventional methods of antivirus protection and new proactive technologies.
® Kaspersky Administration Kit 94 The anti-virus protection feature includes: • Anti-virus scanning of e-mail traffic on the level of data transmission protocol (POP3, IMAP and NNTP for incoming mail and SMTP for outgoing messages) irrespectively of the mail client being used. The program includes plug-ins for popular e-mail clients (Microsoft Office Outlook, Microsoft Outlook Express and The Bat!) and supports disinfection of their e-mail databases.
Appendix B Kaspersky® Security for PDA Kaspersky® Security for PDA provides reliable anti-virus protection for data saved on various types of hand-held computers and smartphones.
® Kaspersky Administration Kit 96 Kaspersky Anti-Virus® Business Optimal guarantees full-scale anti-virus protection3 for: • Workstations running Microsoft Windows 98/ME, Microsoft Windows NT/2000/XP Workstation and Linux. • File servers running Microsoft Windows NT 4.
Appendix B • E-mail systems, including Microsoft Exchange Server 2000/2003, Lotus Notes/Domino, sendmail, postfix , exim, and qmail mail systems • Internet gateways: CheckPoint Firewall –1; Microsoft ISA Server 2000 Enterprise Edition, Microsoft ISA Server 2004 Enterprise Edition • Hand-held computers (PDAs), running Symbian OS, Microsoft Windows CE and Palm OS, and also smartphones running Microsoft Windows Mobile 2003 for Smartphone and Microsoft Smartphone 2002.
® Kaspersky Administration Kit 98 Kaspersky® Mail Gateway Kaspersky Mail Gateway is a comprehensive solution that provides complete protection for users of mail systems. This application installed between the corporate network and the Internet scans all components of e-mail messages for the presence of viruses and other malware (Spyware, Adware, etc.) and performs centralized anti-spam filtration of e-mail stream.
APPENDIX C. LICENSE AGREEMENT NOTICE TO ALL USERS: CAREFULLY READ THE FOLLOWING LEGAL AGREEMENT (“AGREEMENT”) FOR THE LICENSE OF SPECIFIED SOFTWARE (“SOFTWARE”) PRODUCED BY KASPERSKY LAB. (“KASPERSKY LAB”). IF YOU HAVE PURCHASED THIS SOFTWARE VIA INTERNET BY CLICKING THE ACCEPT BUTTON, YOU (EITHER AN INDIVIDUAL OR A SINGLE LEGAL ENTITY) CONSENT TO BE BOUND BY AND BECOME A PARTY TO THIS AGREEMENT.
® Kaspersky Administration Kit Software was designed (each, a “Client Device”). If the Software is licensed as a suite or bundle with more than one specified Software product, this license applies to all such specified Software applications, subject to any restrictions or usage terms specified on the applicable price list or application packaging that apply to any such Software applications individually. 1.1 Use.
Appendix C 101 packaging for the Software. A separate license is required for each Client Device or “seat” that may connect to the Server at any time, regardless of whether such licensed Client Devices or seats are concurrently connected to or actually accessing or using the Software. Use of software or hardware that reduces the number of Client Devices or seats directly accessing or utilizing the Software (e.g.
® Kaspersky Administration Kit 102 website, which will require you to produce the Key Identification File which will have been provided to you by Kaspersky Lab with this Agreement. It shall be at the absolute discretion of Kaspersky Lab whether or not you have satisfied this condition for the provision of Support Services.
Appendix C 103 (ii) You accept all responsibility for the selection of this Software to meet your requirements.
® Kaspersky Administration Kit 104 (c) Loss of the use of money; (d) Loss of anticipated savings; (e) Loss of business; (f) Loss of opportunity; (g) Loss of goodwill; (h) Loss of reputation; (i) Loss of, damage to or corruption of data, or; (j) Any indirect or consequential loss or damage howsoever caused (including, for the avoidance of doubt, where such loss or damage is of the type specified in paragraph (ii), (a) to (ii), (i).
