Kaspersky Security for Virtualization 6.0 Agentless

Hardware and software requirements

Requirements for Kaspersky Security Center components

For Kaspersky Security to operate in an organization's local network, one of the following versions of Kaspersky Security Center must be installed:

• Kaspersky Security Center 13.1.
• Kaspersky Security Center 12.
• Kaspersky Security Center 11.

  When using Kaspersky Security Center 11, 12 or 13.1, Kaspersky Security can protect a virtual infrastructure managed by VMware vCloud Director (in a multitenancy mode) or a virtual infrastructure managed by one or more VMware vCenter Servers (multitenancy mode is not being used).

• Kaspersky Security Center 10 Service Pack 3.

  When using Kaspersky Security Center 10 Service Pack 3, Kaspersky Security can protect a virtual infrastructure managed by one or more VMware vCenter Servers (multitenanсy mode is not being used).

If you want to use Kaspersky Security in a multitenanсy mode, you need to install Kaspersky Security Center 11, 12 or 13.1.

The following Kaspersky Security Center components are required in order for the application to work:

• Administration Server.
• Administration Console.
• Network Agent. This component is included in Kaspersky Security SVM images.

For Kaspersky Security Center installation instructions, see the Kaspersky Security Center documentation.

The operating system on which Kaspersky Security Center is installed must be compatible with the Integration Server component.

Software requirements for the Integration Server component

The computer must have one of the following operating systems to support installation and operation of the Integration Server component:

• Windows Server 2019
• Windows Server 2016
• Windows Server 2012 R2 Datacenter / Standard / Essentials

The Microsoft .NET Framework 4.6.1 platform is required for installation of the Integration Server, Integration Server Console, and Kaspersky Security administration plug-in.

Software requirements for the File Threat Protection component

For the File Threat Protection component to work properly, the virtual infrastructure must meet the following software requirements:

• Option 1:
  • VMware ESXi 6.7 hypervisor Update 3, VMware ESXi 6.5 hypervisor Update 3a or VMware ESXi 6.0 hypervisor Update 3a
  • VMware vCenter Server 6.7 Update 3, VMware vCenter Server 6.5 Update 3 or VMware vCenter Server 6.0 Update 3j
  • VMware NSX for vSphere 6.4.6
• Option 2:
  • VMware ESXi 6.5 hypervisor Update 3a or VMware ESXi 6.0 hypervisor Update 3a
  • VMware vCenter Server 6.5 Update 3 or VMware vCenter Server 6.0 Update 3j
  • VMware NSX for vSphere 6.3.7

The File Threat Protection component ensures protection of virtual machines that have the following guest operating systems installed:

• Windows desktop operating systems:
  • Windows 10
  • Windows 8.1
  • Windows 8
  • Windows 7 Service Pack 1
• Windows server operating systems:
  • Windows Server 2019
  • Windows Server 2016
  • Windows Server 2012 R2 without ReFS (Resilient File System) support
  • Windows Server 2012 without ReFS (Resilient File System) support
  • Windows Server 2008 R2 Service Pack 1

  On protected virtual machines running Windows operating systems, one of the following file systems must be used: FAT, FAT32, NTFS, ISO9660, UDF, CIFS.

• Linux server operating systems:
  • Ubuntu Server 14.04 LTS (64-bit)
  • Red Hat Enterprise Linux Server 7 GA (64-bit)
  • SUSE Linux Enterprise Server 12 GA (64-bit)
  • CentOS 7 (64-bit)

  On protected virtual machines running Linux operating systems, one of the following file systems must be used:

  • Local file systems: EXT2, EXT3, EXT4, XFS, BTRFS, VFAT, ISO9660.
  • Network file systems: NFS, CIFS.

To protect virtual machines against file threats on virtual machines, you must install the Guest Introspection driver (NSX File Introspection Driver).

To do so, you must install VMware Tools kit version 11.0.1 on virtual machines running a Windows operating system. When installing the VMware Tools package, you need to install the NSX File Introspection Driver component that is included in the package. The NSX File Introspection Driver component is not installed by default.

Special packages are provided for installation of the NSX File Introspection Driver component on virtual machines running a Linux operating system.

For information on the installation and update of VMware components, please refer to the VMware product documentation.

Software requirements for the Network Threat Protection component

For the Network Threat Protection component to work properly, the VMware virtual infrastructure must meet the following software requirements:

• Option 1:
  • VMware ESXi 6.7 hypervisor Update 3, VMware ESXi 6.5 hypervisor Update 3a or VMware ESXi 6.0 hypervisor Update 3a
  • VMware vCenter Server 6.7 Update 3, VMware vCenter Server 6.5 Update 3 or VMware vCenter Server 6.0 Update 3j
  • VMware NSX for vSphere 6.4.6
• Option 2:
  • VMware ESXi 6.5 hypervisor Update 3a or VMware ESXi 6.0 hypervisor Update 3a
  • VMware vCenter Server 6.5 Update 3 or VMware vCenter Server 6.0 Update 3j
  • VMware NSX for vSphere 6.3.7

The requirements of a guest operating system of the protected virtual machine match the requirements imposed by the File Threat Protection component.

You must install VMware Tools kit version 11.0.1 or open-vm-tools to protect virtual machines from network threats.

A current license for NSX for vSphere Advanced or NSX for vSphere Enterprise is required in order for the Network Threat Protection component to work.

The Network Threat Protection component protects only those virtual machines that use the E1000 or VMXNET3 network adapter.

Software requirements for operation in the multitenancy mode

VMware vCloud Director 9.7.0.3 for Service Providers component must be installed in the virtual infrastructure for application to operate in multitenancy mode.

Hardware requirements

The application distribution kit includes several SVM (secure virtual machine) images with the File Threat Protection component installed and several SVM images with the Network Threat Protection component installed. You can use these images to deploy SVMs with the necessary configuration.

Depending on the selected configuration for an SVM with the File Threat Protection component, the following minimum system resources are required:

Depending on the selected configuration for an SVM with the Network Threat Protection component, the following minimum system resources are required:

The computer must meet the following minimum hardware requirements to support installation and operation of the Integration Server:

• 3 GB of available disk space
• Available RAM:
  • For operation of the Integration Server Console – 50 MB.
  • For operation of the Integration Server that serves no more than 30 hypervisors and 2,000 to 2,500 protected virtual machines – 300 MB. RAM size may change depending on the size of the VMware virtual infrastructure.

For the hardware requirements of Kaspersky Security Center, please refer to the Kaspersky Security Center documentation.

See the VMware product documentation for hardware requirements for the VMware virtual infrastructure.

For hardware requirements for the Windows operating system, see Windows product documentation.