Upload
kakashi309
View
3.713
Download
4
Embed Size (px)
Citation preview
AVP (SEA) SDN BHD
Red For Threats. Green For You. 1
KASPERSKY LAB
Kaspersky® Administration Kit
Version 6.0
Installing Microsoft Data Engine (MSDE 2000)
Installing Kaspersky Administration Kit
Configuring Kaspersky Administration Kit
Remote Installation
AVP (SEA) SDN BHD
Red For Threats. Green For You. 2
Contents 1. INTRODUCTION.................................................................................................................... 3
1.1 Kaspersky Administration Kit and Microsoft Data Engine (MSDE 2000)…………………….. 3
1.2 Hardware and Software Requirements……………………………………………………………………… 3
1.3 Before Installing Kaspersky Administration Kit…………………………………………………………… 4
2. INSTALLING MICROSOFT DATA ENGINE (MSDE 2000)……………………………………….……………….……. 5
3. INSTALLING KASPERSKY ADMINISTRATION KIT……………………………………………………………………….. 11
4. CONFIGURING KASPERSKY ADMINISTRATION KIT…………………………………………………………………… 23
4.1 Importing Group Policy………………………………………………………………………………………………. 29
4.2 Importing Group Task…………………………………………………………………………………………………. 31
4.3 Global Task (Download Update Task) From Internet…………………………………………………. 33
5. PUSH INSTALL (REMOTE INSTALLATION)…………………………………………………………………………………. 38
5.1 Creating Workstation 6 Installation Package (to do remote install)……………………………. 38
5.2 Workstation and Network Agent Deployment…………………………………………………………... 45
AVP (SEA) SDN BHD
Red For Threats. Green For You. 3
1. INTRODUCTION
1.1 Kaspersky Administration Kit and Microsoft Data Engine (MSDE 2000)
Kaspersky® Administration Kit is a dynamic and flexible tool for centralized management of
Kaspersky Lab applications on a corporate network. It gives you complete control over your
enterprise antivirus policy.
Kaspersky Administration Kit was expressly designed to meet the needs of networks of any size or
complexity. This tool enables central administration of dynamic networks that number tens of
thousands of nodes, extending to remote access and laptop users.
MSDE (Microsoft Data Engine), MySQL server or Microsoft SQL server is used to store the
Administration Server information. If no MSDE or SQL server is installed, you have to install one of
them before installing the Administration Server. In order to do it, you can use the distribution
packages you have.
1.2 Hardware and Software Requirements
Administration Server
• Software requirements:
• Microsoft Data Access Components (MDAC) version 2.8 and above
• MSDE 2000 SP 3 or MS SQL Server 2000 SP 31 or higher or MySQL version 5.0.32 or
MS SQL 2--5 or higher or MS SQL 2005 Express and higher;
• Microsoft Windows 2000 SP 1 or higher; Microsoft Windows XP Professional SP 1
or higher; Microsoft Windows XP Professional x64 and higher, Microsoft Windows
Server 2003 or higher; Microsoft Windows Server 2003x64 or higher Microsoft
Windows NT4 SP 6a or higher, Microsoft Windows Vista, Microsoft Windows Vista
x64.
• Hardware requirements:
• Intel Pentium III processor, 800 MHz or faster
• 128 MB RAM
• 400 MB available space on hard drive
Administration Console
• Software requirements:
• Microsoft Windows 2000 SP 1 or higher; Microsoft Windows NT4 SP 6a; Microsoft
Windows XP Professional SP 1 or higher; Microsoft Windows XP Home Edition SP1 or
higher; Microsoft Windows XP Professional x64 or higher. Microsoft Windows Server
AVP (SEA) SDN BHD
Red For Threats. Green For You. 4
2003 or higher; Microsoft Windows Server 2003 x64 and above, Microsoft Windows
NT 4 SP 6a or higher, Microsoft Windows Vista, Microsoft Windows Vista x64;
• Microsoft Management Console version 1.2 or higher
• To work with Microsoft Windows NT4 you need Microsoft Internet Explorer 6.0
installed
• Hardware requirements:
• Intel Pentium II processor, 400 MHz or faster
• At least 64 MB RAM
• 10 MB of available hard drive space
1.3 Before Installing Kaspersky Administration Kit
Before starting the installation, make sure that the computer meets the software and hardware
requirements to the Administration Server:
Check IP address, manually assign IP address
All clients in your network can contact to this IP address
If have firewall in the network, open port UDP 13000, TCP 13000, TCP 14000, TCP 18000
Check disk space
Check internet connection
Username and password for administrator account (local/domain)
Meet minimum system requirement
SQL Server / MSDE 2000
Clear the temporary folder in user folder, click Start > Run > %temp% and delete all files
AVP (SEA) SDN BHD
Red For Threats. Green For You. 5
2. INSTALLING MICROSOFT DATA ENGINE (MSDE 2000)
Double clicking the MSDE setup package to run the MSDE setup wizard.
Setup is preparing the installation.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 6
Click ‘Next’ to continue setup.
Select ‘Yes’ to agree the licensing terms.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 7
Enter the information and click ‘Next’ to continue.
Click ‘Next’ to continue.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 8
Enter an Instance Name and click ‘Next’ to continue.
Check the selected parameters and click ‘Next’ to continue.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 9
Shows the installation progress.
Click on ‘Finish’ to complete the Installation.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 10
You can see SQL Server service is running.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 11
3. INSTALLING KASPERSKY ADMINISTRATION KIT
Double click the Admin Kit setup package to run the setup wizard.
Setup is preparing the installation.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 12
Click ‘Next’ to continue setup.
Select ‘Yes’ to agree the licensing terms.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 13
Enter the information and click ‘Next’ to continue.
Click ‘Next’ to continue.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 14
Click ‘Next’ to continue.
Select Microsoft SQL Server (MSDE). Click ‘Next’ to continue.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 15
Click ‘Next’ to continue.
Choose Microsoft Windows Authentication Mode and click ‘Next’ to continue.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 16
Click ‘Next’ to continue.
Set the Administration Server Address (static IP address) and click ‘Next’ to continue.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 17
Click ‘Next’ to continue.
Choose to Create new certificate and save certificate’s backup copy. Click ‘Next’ to continue.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 18
Browse destination for backup folder.
Select destination for backup folder.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 19
Specify data encryption password and click ‘Next’ to continue.
Click ‘Next’ to begin copying files.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 20
Shows the installation progress.
Click on ‘Finish’ to complete the Installation.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 21
You can see Kaspersky Administration Server service is running.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 22
Go to Control Panel > Windows Firewall > Advanced tab > Settings. Under Services tab, you can see
port opened under Kasperksy Administration Kit service.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 23
4. CONFIGURING KASPERSKY ADMINISTRATION KIT
Click Start > All Programs > Kaspersky Administration Kit and launch the program.
Right click and select ‘Connect to Administration Server’
AVP (SEA) SDN BHD
Red For Threats. Green For You. 24
Server address is: localhost
Click ‘Ok’
Upon launching for the first time, you will be prompt to Run Quick Start Wizard.
Click ‘Next’ to continue
AVP (SEA) SDN BHD
Red For Threats. Green For You. 25
After the network scanning is complete, click ‘Next’
Click ‘Next’
AVP (SEA) SDN BHD
Red For Threats. Green For You. 26
Click ‘Next’
Enter e-mail account and SMTP server address. Click ‘Next’ to continue
AVP (SEA) SDN BHD
Red For Threats. Green For You. 27
Click Next to let Admin Kit to create default policy and task for Workstation Anti-Virus.
Select not to download the update and click ‘Next’.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 28
Untick Run the Deployment Wizard and click ‘Finish’.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 29
4.1 Importing Group Policy
Expand the tree view and click Groups > Policies and Delete the all the policies inside
Right click and select All Tasks > Import
AVP (SEA) SDN BHD
Red For Threats. Green For You. 30
Import in all the policy one by one which is available inside Installation CD > Adminkit 6 > v6 Policies
After importing the entire task, you need to Activate the policy for each of the task one by one.
Network Agent Policy – Define the size event log and uninstall password protection.
v6 File Server Policy – Define setting/policy for Windows File Servers Anti-Virus.
v6 Workstation Policy – Define setting/policy for Windows Workstations Anti-Virus.
** Password to save settings and exit Kaspersky Anti-Virus is kavadmin
** Password to uninstall Kaspersky Anti-Virus is kavuninstall
AVP (SEA) SDN BHD
Red For Threats. Green For You. 31
4.2 Importing Group Task
Delete all tasks inside Groups > Group Task
Right click and select All Tasks > Import
AVP (SEA) SDN BHD
Red For Threats. Green For You. 32
Import in all the 8 task one by one which is available inside Installation CD > Adminkit 6 > v6 Tasks
v6 File Server Scan For Viruses Task – Every Saturday, 12.00am
v6 File Server Update Task – Every Two Hours
v6 Workstation Scan For Viruses Task – Every Friday, 12.45pm
v6 Workstation Update Task – Every Three Hours
AVP (SEA) SDN BHD
Red For Threats. Green For You. 33
4.3 Global Task (Download Update Task) From Internet
Inside Global task, right click Download updates task and select Properties
Go to Settings tab and click Update List..
AVP (SEA) SDN BHD
Red For Threats. Green For You. 34
Tick all update types except for last four below (Content Filtration Database) and click ‘Ok’
If your network using proxy server for Internet access, under Settings tab, click Properties
AVP (SEA) SDN BHD
Red For Threats. Green For You. 35
Untick Not use proxy-server and click ‘Ok’
Click LAN Settings..
AVP (SEA) SDN BHD
Red For Threats. Green For You. 36
Tick Use proxy server and fill proxy server information and click ‘Ok’
Go to General tab and click Apply. Click Start to download updates task
AVP (SEA) SDN BHD
Red For Threats. Green For You. 37
Download updates task establish connection to Kaspersky Lab update server and downloading the
available updates. Wait till the download update task Completes 100 %.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 38
5. PUSH INSTALL (REMOTE INSTALLATION)
5.1 Creating Workstation 6 Installation Package (to do remote install)
Click Remote Install, you will be able to see that version 6 Kaspersky Network Agent package has
been created automatically. You have to create an installation package for workstation v6.
Right click anywhere near the remote install window and select New> Installation Package.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 39
Click ‘Next’.
Type in a name for the installation package and click ‘Next’.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 40
Click Browse.
Browse to the workstation 6 installation folder located and the CD and select kav6.kpd and Open.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 41
You will be able to see the version and the package that you are creating. Click ‘Next’.
Make sure the license key is loaded, if not you need to browse to open your license key. Click ‘Next’.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 42
Click ‘Next’.
Click ‘Finish’.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 43
The workstation 6 installation package has been created.
Right click and the workstation 6 package and click Properties.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 44
Click on Properties tab. Select All the task at the Task to be installed section. Also only select the
only required protection component to be installed in your corporate organization and click ‘OK’.
Click on Os Reboot tab and configure the action as shown in the above image. This would prompt a
message at the workstation when the deployment has completed. Click ‘OK’ to close the installation
package properties.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 45
5.2 Workstation and Network Agent Deployment
Click on Global Task, right click and select New > Task.
Give a name for the installation task and click ‘Next’.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 46
Application select Kaspersky Administration Kit.
Task type select Product Deployment task.
Click ‘Next’.
Select the workstation 6 installation package. Click ‘Next’.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 47
Select Push Install and click ‘Next’.
Click ‘Next’. If you are reinstalling workstation 6 package onto a workstation, you should deselect
the Do not install application if it is already installed.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 48
For the additional package to install, select the Network Agent v6 and click ‘Next’.
Click ‘Next’.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 49
Select the workstation(s) that you would want to deploy the workstation and network agent v6
package.
Select Specified account and specify user account. The user account must have Administrator
privilege. Click ‘Next’.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 50
Select Manually, and click ‘Next’.
Click ‘Finish’.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 51
Click Global Task > Right click the push install task and select Properties.
Click ‘Start’.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 52
Click ‘Result’ to shows push install status
To see more about the process, right click on the Running process and select Properties
AVP (SEA) SDN BHD
Red For Threats. Green For You. 53
Here it shows the “Remote installation has successfully finished on host. Waiting for reboot”
Workstation(s) that you deploy will be prompted with this pop-up by the Kaspersky Administration Kit.
AVP (SEA) SDN BHD
Red For Threats. Green For You. 54
After the deployment has been completed, you will be able to see the application status of the
workstation(s) in your network.
Please refer to Network Agent Manual to provide communication between Kaspersky Anti-Virus and
Kaspersky Administration Kit for centralize management purpose.