Managing Kaspersky Endpoint Agent for Linux policies using Kaspersky Security Center Administration Console

Kaspersky Security Center is designed for centralized running of basic administration and maintenance tasks for an organization's network security system. The application provides the administrator with access to detailed information about the organization's network security level; it lets you configure all the components of protection based on Kaspersky Lab applications.

You can use Kaspersky Security Center to remotely install and remove Kaspersky Endpoint Agent and configure the operation of the program.

For detailed information about Kaspersky Security Center, please refer to the Kaspersky Security Center Help.

The user interface for working with Kaspersky Security Center is provided by the Kaspersky Security Center Administration Console.

You can manage Kaspersky Endpoint Agent using Kaspersky Security Center Web Console with the Kaspersky Endpoint Agent administration plug-in.

The following information in this section describes how to manage Kaspersky Endpoint Agent using the Kaspersky Security Center Administration Console.

Managing policies of Kaspersky Endpoint Agent for Linux

This section provides instructions for creating a policy for Kaspersky Endpoint Agent for Linux and enabling options in the policy using Kaspersky Security Center Administration Console.

Instructions in this section apply only to Kaspersky Endpoint Agent for Linux. For information about Kaspersky Endpoint Agent for Windows, see a separate section.

Creating a policy for Kaspersky Endpoint Agent for Linux

To create a policy for Kaspersky Endpoint Agent in Kaspersky Security Center:

1. Open the Kaspersky Security Center Administration Console.
2. In the console tree, open the Policies folder.
3. Click Create policy.

   The New Policy Wizard starts.

4. In the Enter group policy name, window, enter the name that will be used to display the new policy in the list of policies.
5. In the Select policy type, select a Kaspersky Endpoint Agent deployment mode by selecting the Endpoint Detection and Response Expert (KATA EDR) check box.
6. Click Next.
7. Do one of the following in all settings windows that are displayed in sequence:
   • To configure program settings from the displayed sections when creating the policy:
     1. Click Configure next to the name of the section.
     2. This opens a window; in that window, modify the relevant settings and click OK.
     3. Click Next.
   • To configure the displayed sections later, click Next.

   Program configuration involves the following steps:

   • Configuring general proxy server settings.
   • Configuring the integration of Kaspersky Endpoint Agent with KATA Central Node.
8. In the Target group window, select the Kaspersky Security Center administration group that the new policy must affect:
   1. Click Browse.

      This opens the administration group selection window.

   2. Select an administration group from the list.

      For example, you can select the Managed devices group.

   3. If you want to create a device subgroup in the Managed devices group:
      1. Click New group.
      2. This opens a window; in that window, enter the name of the device subgroup.
      3. Click OK.
   4. Click Next.
9. In the Create group policy for the program select one of the following policy states:
   • Active policy to activate the policy immediately after creation.
   • Inactive policy to activate the policy later.
10. Select the Open policy properties immediately after creation if you need to perform additional configuration of the policy right after it is created.
11. Click Finish.

The policy that you created appears in the list of politics.

Page top

Enabling options in the policy of Kaspersky Endpoint Agent for Linux

When configuring default settings of a Kaspersky Endpoint Agent policy, setting values are saved but not applied until you enable them.

You can enable settings by enabling groups in which the settings reside. In one policy you can enable some groups of settings or all groups of settings.

To enable a group of settings in the Kaspersky Endpoint Agent policy:

1. Open the Kaspersky Security Center Administration Console.
2. In the console tree, open the Policies folder.
3. Select a policy for Kaspersky Endpoint Agent and open its settings window in one of the following ways:
   • Double-click on the name of the policy.
   • In the context menu of the policy, select Properties.
4. In the opened window, select the Application settings tab.
   1. Select the Other settings subsection.
   2. Select one of the following options for using a proxy server:
      • Do not use proxy server.
      • Use proxy server with specified settings.

      If you selected Use proxy server with specified settings, in the Server name or IP address and Port, enter the address and port of the proxy server to which you want to connect. Port 8080 is used by default.

      Kaspersky Endpoint Agent does not encrypt the connection with the proxy server. You must take steps to make sure the network connection between your proxy server and Kaspersky Endpoint Agent is secure.

      If you want to use NTLM authentication when connecting to the proxy server:

      1. Select the Use NTLM authentication by user name and password.
      2. In the User name field, enter the name of the user whose account will be used for authorization at the proxy server.
      3. In the Password field, enter the password to obtain connection to the proxy server.

      To reveal password characters, click Show to the right of the Password field.

      If you do not want to use the proxy server for addresses internal to the organization, select the Bypass proxy server for local addresses check box.

   3. Click Apply.
5. Select the KATA integration section.
   1. Go to the General Settings subsection.
   2. In the Data transmission settings group, set the Under policy toggle switch to active.
   3. In the Event transmission period (sec.) field, type 30.
   4. In the Event limit per one package, type 1024.
   5. In the Throttling settings group, set the Under policy toggle switch to active.
   6. Select the Enable throttling check box.
   7. Enter the maximum number of events per hour and the percentage value for events exceeding the limit.
   8. Go to the KATA integration settings subsection.
   9. In the Connection settings group, move the Enforce toggle switch to active.
   10. Select the Enable KATA integration check box.
   11. Enter the address and port of the KATA server in the Address and Port fields.
   12. Select the Use pinned certificate to secure connection check box.
   13. Click Add new TLS certificate.
   14. In the opened window, click Upload and select the server certificate file to set up a secure connection or enter certificate data in the field.
   15. Click Add.
   16. Click Add client certificate.
   17. In the opened window, select the Secure with client certificate check box.
   18. Click Upload and select a client certificate file to set up a secure connection.
   19. In the Cryptographic container password field, enter the password of the client certificate to set up a secure connection.
   20. Select the Apply TTL period for events transmission.
   21. In the TTL period (min.) field, enter the interval for sending synchronization requests.
   22. Click Apply.
6. Click OK.

Policy settings required by Kaspersky Endpoint Agent are enabled.

Managing database and module update tasks for Kaspersky Endpoint Agent

You can create and configure program database and module update tasks using Kaspersky Security Center Administration Console (see the help section describing how to create and configure program database and module update tasks in Kaspersky Endpoint Agent for Windows).

You can also configure program database and module updates using the command line.