kaspersky administration kit 6.0 manual

AVP (SEA) SDN BHD

Red For Threats. Green For You. 1

KASPERSKY LAB

Kaspersky® Administration Kit

Version 6.0

Installing Microsoft Data Engine (MSDE 2000)

Installing Kaspersky Administration Kit

Configuring Kaspersky Administration Kit

Remote Installation

AVP (SEA) SDN BHD


Contents 1. INTRODUCTION.................................................................................................................... 3

1.1 Kaspersky Administration Kit and Microsoft Data Engine (MSDE 2000)…………………….. 3

1.2 Hardware and Software Requirements……………………………………………………………………… 3

1.3 Before Installing Kaspersky Administration Kit…………………………………………………………… 4

2. INSTALLING MICROSOFT DATA ENGINE (MSDE 2000)……………………………………….……………….……. 5

3. INSTALLING KASPERSKY ADMINISTRATION KIT……………………………………………………………………….. 11

4. CONFIGURING KASPERSKY ADMINISTRATION KIT…………………………………………………………………… 23

4.1 Importing Group Policy………………………………………………………………………………………………. 29

4.2 Importing Group Task…………………………………………………………………………………………………. 31

4.3 Global Task (Download Update Task) From Internet…………………………………………………. 33

5. PUSH INSTALL (REMOTE INSTALLATION)…………………………………………………………………………………. 38

5.1 Creating Workstation 6 Installation Package (to do remote install)……………………………. 38

5.2 Workstation and Network Agent Deployment…………………………………………………………... 45

AVP (SEA) SDN BHD


1. INTRODUCTION

1.1 Kaspersky Administration Kit and Microsoft Data Engine (MSDE 2000)

Kaspersky® Administration Kit is a dynamic and flexible tool for centralized management of

Kaspersky Lab applications on a corporate network. It gives you complete control over your

enterprise antivirus policy.

Kaspersky Administration Kit was expressly designed to meet the needs of networks of any size or

complexity. This tool enables central administration of dynamic networks that number tens of

thousands of nodes, extending to remote access and laptop users.

MSDE (Microsoft Data Engine), MySQL server or Microsoft SQL server is used to store the

Administration Server information. If no MSDE or SQL server is installed, you have to install one of

them before installing the Administration Server. In order to do it, you can use the distribution

packages you have.

1.2 Hardware and Software Requirements

Administration Server

• Software requirements:

• Microsoft Data Access Components (MDAC) version 2.8 and above

• MSDE 2000 SP 3 or MS SQL Server 2000 SP 31 or higher or MySQL version 5.0.32 or

MS SQL 2--5 or higher or MS SQL 2005 Express and higher;

• Microsoft Windows 2000 SP 1 or higher; Microsoft Windows XP Professional SP 1

or higher; Microsoft Windows XP Professional x64 and higher, Microsoft Windows

Server 2003 or higher; Microsoft Windows Server 2003x64 or higher Microsoft

Windows NT4 SP 6a or higher, Microsoft Windows Vista, Microsoft Windows Vista

x64.

• Hardware requirements:

• Intel Pentium III processor, 800 MHz or faster

• 128 MB RAM

• 400 MB available space on hard drive

Administration Console

• Software requirements:

• Microsoft Windows 2000 SP 1 or higher; Microsoft Windows NT4 SP 6a; Microsoft

Windows XP Professional SP 1 or higher; Microsoft Windows XP Home Edition SP1 or

higher; Microsoft Windows XP Professional x64 or higher. Microsoft Windows Server

AVP (SEA) SDN BHD


2003 or higher; Microsoft Windows Server 2003 x64 and above, Microsoft Windows

NT 4 SP 6a or higher, Microsoft Windows Vista, Microsoft Windows Vista x64;

• Microsoft Management Console version 1.2 or higher

• To work with Microsoft Windows NT4 you need Microsoft Internet Explorer 6.0

installed

• Hardware requirements:

• Intel Pentium II processor, 400 MHz or faster

• At least 64 MB RAM

• 10 MB of available hard drive space

1.3 Before Installing Kaspersky Administration Kit

Before starting the installation, make sure that the computer meets the software and hardware

requirements to the Administration Server:

Check IP address, manually assign IP address

All clients in your network can contact to this IP address

If have firewall in the network, open port UDP 13000, TCP 13000, TCP 14000, TCP 18000

Check disk space

Check internet connection

Username and password for administrator account (local/domain)

Meet minimum system requirement

SQL Server / MSDE 2000

Clear the temporary folder in user folder, click Start > Run > %temp% and delete all files

AVP (SEA) SDN BHD


2. INSTALLING MICROSOFT DATA ENGINE (MSDE 2000)

Double clicking the MSDE setup package to run the MSDE setup wizard.

Setup is preparing the installation.

AVP (SEA) SDN BHD


Click ‘Next’ to continue setup.

Select ‘Yes’ to agree the licensing terms.

AVP (SEA) SDN BHD


Enter the information and click ‘Next’ to continue.

Click ‘Next’ to continue.

AVP (SEA) SDN BHD


Enter an Instance Name and click ‘Next’ to continue.

Check the selected parameters and click ‘Next’ to continue.

AVP (SEA) SDN BHD


Shows the installation progress.

Click on ‘Finish’ to complete the Installation.

AVP (SEA) SDN BHD


You can see SQL Server service is running.

AVP (SEA) SDN BHD


3. INSTALLING KASPERSKY ADMINISTRATION KIT

Double click the Admin Kit setup package to run the setup wizard.

Setup is preparing the installation.

AVP (SEA) SDN BHD


Click ‘Next’ to continue setup.

Select ‘Yes’ to agree the licensing terms.

AVP (SEA) SDN BHD


Enter the information and click ‘Next’ to continue.


AVP (SEA) SDN BHD



Select Microsoft SQL Server (MSDE). Click ‘Next’ to continue.

AVP (SEA) SDN BHD



Choose Microsoft Windows Authentication Mode and click ‘Next’ to continue.

AVP (SEA) SDN BHD



Set the Administration Server Address (static IP address) and click ‘Next’ to continue.

AVP (SEA) SDN BHD



Choose to Create new certificate and save certificate’s backup copy. Click ‘Next’ to continue.

AVP (SEA) SDN BHD


Browse destination for backup folder.

Select destination for backup folder.

AVP (SEA) SDN BHD


Specify data encryption password and click ‘Next’ to continue.

Click ‘Next’ to begin copying files.

AVP (SEA) SDN BHD


Shows the installation progress.

Click on ‘Finish’ to complete the Installation.

AVP (SEA) SDN BHD


You can see Kaspersky Administration Server service is running.

AVP (SEA) SDN BHD


Go to Control Panel > Windows Firewall > Advanced tab > Settings. Under Services tab, you can see

port opened under Kasperksy Administration Kit service.

AVP (SEA) SDN BHD


4. CONFIGURING KASPERSKY ADMINISTRATION KIT

Click Start > All Programs > Kaspersky Administration Kit and launch the program.

Right click and select ‘Connect to Administration Server’

AVP (SEA) SDN BHD


Server address is: localhost

Click ‘Ok’

Upon launching for the first time, you will be prompt to Run Quick Start Wizard.

Click ‘Next’ to continue

AVP (SEA) SDN BHD


After the network scanning is complete, click ‘Next’

Click ‘Next’

AVP (SEA) SDN BHD


Click ‘Next’

Enter e-mail account and SMTP server address. Click ‘Next’ to continue

AVP (SEA) SDN BHD


Click Next to let Admin Kit to create default policy and task for Workstation Anti-Virus.

Select not to download the update and click ‘Next’.

AVP (SEA) SDN BHD


Untick Run the Deployment Wizard and click ‘Finish’.

AVP (SEA) SDN BHD


4.1 Importing Group Policy

Expand the tree view and click Groups > Policies and Delete the all the policies inside

Right click and select All Tasks > Import

AVP (SEA) SDN BHD


Import in all the policy one by one which is available inside Installation CD > Adminkit 6 > v6 Policies

After importing the entire task, you need to Activate the policy for each of the task one by one.

Network Agent Policy – Define the size event log and uninstall password protection.

v6 File Server Policy – Define setting/policy for Windows File Servers Anti-Virus.

v6 Workstation Policy – Define setting/policy for Windows Workstations Anti-Virus.

** Password to save settings and exit Kaspersky Anti-Virus is kavadmin

** Password to uninstall Kaspersky Anti-Virus is kavuninstall

AVP (SEA) SDN BHD


4.2 Importing Group Task

Delete all tasks inside Groups > Group Task

Right click and select All Tasks > Import

AVP (SEA) SDN BHD


Import in all the 8 task one by one which is available inside Installation CD > Adminkit 6 > v6 Tasks

v6 File Server Scan For Viruses Task – Every Saturday, 12.00am

v6 File Server Update Task – Every Two Hours

v6 Workstation Scan For Viruses Task – Every Friday, 12.45pm

v6 Workstation Update Task – Every Three Hours

AVP (SEA) SDN BHD


4.3 Global Task (Download Update Task) From Internet

Inside Global task, right click Download updates task and select Properties

Go to Settings tab and click Update List..

AVP (SEA) SDN BHD


Tick all update types except for last four below (Content Filtration Database) and click ‘Ok’

If your network using proxy server for Internet access, under Settings tab, click Properties

AVP (SEA) SDN BHD


Untick Not use proxy-server and click ‘Ok’

Click LAN Settings..

AVP (SEA) SDN BHD


Tick Use proxy server and fill proxy server information and click ‘Ok’

Go to General tab and click Apply. Click Start to download updates task

AVP (SEA) SDN BHD


Download updates task establish connection to Kaspersky Lab update server and downloading the

available updates. Wait till the download update task Completes 100 %.

AVP (SEA) SDN BHD


5. PUSH INSTALL (REMOTE INSTALLATION)

5.1 Creating Workstation 6 Installation Package (to do remote install)

Click Remote Install, you will be able to see that version 6 Kaspersky Network Agent package has

been created automatically. You have to create an installation package for workstation v6.

Right click anywhere near the remote install window and select New> Installation Package.

AVP (SEA) SDN BHD


Click ‘Next’.

Type in a name for the installation package and click ‘Next’.

AVP (SEA) SDN BHD


Click Browse.

Browse to the workstation 6 installation folder located and the CD and select kav6.kpd and Open.

AVP (SEA) SDN BHD


You will be able to see the version and the package that you are creating. Click ‘Next’.

Make sure the license key is loaded, if not you need to browse to open your license key. Click ‘Next’.

AVP (SEA) SDN BHD


Click ‘Next’.

Click ‘Finish’.

AVP (SEA) SDN BHD


The workstation 6 installation package has been created.

Right click and the workstation 6 package and click Properties.

AVP (SEA) SDN BHD


Click on Properties tab. Select All the task at the Task to be installed section. Also only select the

only required protection component to be installed in your corporate organization and click ‘OK’.

Click on Os Reboot tab and configure the action as shown in the above image. This would prompt a

message at the workstation when the deployment has completed. Click ‘OK’ to close the installation

package properties.

AVP (SEA) SDN BHD


5.2 Workstation and Network Agent Deployment

Click on Global Task, right click and select New > Task.

Give a name for the installation task and click ‘Next’.

AVP (SEA) SDN BHD


Application select Kaspersky Administration Kit.

Task type select Product Deployment task.

Click ‘Next’.

Select the workstation 6 installation package. Click ‘Next’.

AVP (SEA) SDN BHD


Select Push Install and click ‘Next’.

Click ‘Next’. If you are reinstalling workstation 6 package onto a workstation, you should deselect

the Do not install application if it is already installed.

AVP (SEA) SDN BHD


For the additional package to install, select the Network Agent v6 and click ‘Next’.

Click ‘Next’.

AVP (SEA) SDN BHD


Select the workstation(s) that you would want to deploy the workstation and network agent v6

package.

Select Specified account and specify user account. The user account must have Administrator

privilege. Click ‘Next’.

AVP (SEA) SDN BHD


Select Manually, and click ‘Next’.

Click ‘Finish’.

AVP (SEA) SDN BHD


Click Global Task > Right click the push install task and select Properties.

Click ‘Start’.

AVP (SEA) SDN BHD


Click ‘Result’ to shows push install status

To see more about the process, right click on the Running process and select Properties

AVP (SEA) SDN BHD


Here it shows the “Remote installation has successfully finished on host. Waiting for reboot”

Workstation(s) that you deploy will be prompted with this pop-up by the Kaspersky Administration Kit.

AVP (SEA) SDN BHD


After the deployment has been completed, you will be able to see the application status of the

workstation(s) in your network.

Please refer to Network Agent Manual to provide communication between Kaspersky Anti-Virus and

Kaspersky Administration Kit for centralize management purpose.

kaspersky administration kit 6.0 manual

Documents