Scenario: Configuring a connection gateway to connect mobile devices to Kaspersky Security Center Web Console
This scenario describes how to configure a connection gateway to connect mobile devices to Kaspersky Security Center Administration Server.
Requirements
For a connection gateway to work correctly with mobile devices, the following requirements must be met:
- Port 13292 must be open on the host with the connection gateway.
- Port 13000 must be open between the connection gateway and Kaspersky Security Center. It does not need to be open outside the DMZ.
- The host must have a static address accessible from the internet.
Stages
The configuration proceeds in the following steps:
- Installing Network Agent in the connection gateway role on a host
First, you need to install Network Agent on the selected host device acting in the gateway connection role.
For information about generating a Network Agent installation package, refer to the Kaspersky Security Center Help.
You can install Network Agent in interactive mode by specifying installation parameters step by step. Alternatively, you can use an answer file—a text file that contains a custom set of installation parameters: variables and their respective values. Using this answer file allows you to run an installation in silent mode, that is, without user participation. For information on installing Network Agent in silent mode, refer to the Kaspersky Security Center Help.
- Configuring the connection gateway on Kaspersky Security Center Administration Server
Once you have installed Network Agent in the connection gateway role, you must connect it to Administration Server. Administration Server does not yet list the device with the connection gateway among the managed devices because the connection gateway has not tried to connect to Administration Server.
You must create a new group under the Managed Devices group and add the device acting as a connection gateway to the group that you have created. For information on manually adding devices to groups in Kaspersky Security Center Web Console, refer to the Kaspersky Security Center Help.
After that, assign the device as a distribution point and configure the distribution point to act as a connection gateway in the Connection gateway section of the distribution point properties. Then enable the Open port for mobile devices (SSL authentication of the Administration Server only) and Open port for mobile devices (two-way SSL authentication) options and specify ports and DNS domain names of the distribution point to connect mobile devices.
Results
The connection gateway will be configured. You will be able to add new mobile devices by specifying the connection gateway address.