The basic functions of protecting and monitoring virtual machines are provided by the functional components and tasks of the Light Agent for Linux and Light Agent for Windows.
The Kaspersky Security solution uses Kaspersky Endpoint Security for Linux as the Light Agent for Linux. The Kaspersky Security solution uses Kaspersky Endpoint Security for Windows as the Light Agent for Windows. For a description of the Light Agent functionality, please refer to the Online Help of the corresponding application.
Kaspersky Endpoint Security for Linux and Kaspersky Endpoint Security for Windows operating in Light Agent mode have the following features:
The application is activated on the Protection Server.
Updates of application databases and modules are managed on the Protection Server. The application gets updates from a folder on the SVM. You cannot select a different update source.
The use of cloud databases is not supported.
The application interacts with KSN servers using a KSN proxy server. Direct interaction with KSN is not supported.
The use of the application's proxy server is not supported when connecting to the Integration Server, SVMs, and KSN servers.
Managing the application using Kaspersky Security Center Cloud Console is not available.
For the Kaspersky Endpoint Security for Linux application only: the application cannot be managed using the graphical user interface.
For the Kaspersky Endpoint Security for Windows application only:
Data encryption components and Adaptive Anomaly Control cannot be installed.
The built-in EDR Expert agent does not work in Light Agent mode.
To keep the components of Kaspersky Security up-to-date and to expand the solution's capabilities, it provides the following additional functions:
Activation. Using the solution under a commercial license ensures the full functionality of solution components and access to updates of the solution's databases and application modules.
Updating databases and application modules. Updating the solution's databases and application modules ensures up-to-date protection of virtual machines against viruses and other applications that pose a threat.
Using Kaspersky Security Network in the operation of solution components. Using Kaspersky's cloud knowledge base about the reputation of files, Internet resources, and software makes it possible to improve protection of virtual machines and user data, ensure faster response times to various threats, and reduce the number of false positives.
Reports and notifications. Various types of events occur during the operation of solution components. You can receive notifications about events and generate reports based on events.
The update functionality (including anti-virus signature updates and code base updates), as well as the KSN functionality may not be available in the solution in the territory of the USA.