Installing Light Agents and Network Agent

On each virtual machine that needs to be protected using the Kaspersky Security solution, you need to install Light Agent and Kaspersky Security Center Network Agent.

Installed on protected virtual machines, Kaspersky Security Center Network Agent facilitates interaction between a Light Agent installed on a virtual machine and the Kaspersky Security Center Administration Server, and lets you use Kaspersky Security Center to manage the operation of the Light Agent.

You can install Light Agent on a virtual machine template that will be used to create persistent and non-persistent virtual machines. When installing on a non-persistent virtual machine template, we recommend configuring additional installation settings for Light Agents and Network Agent.

You can install Light Agent on virtual machines as part of an infrastructure that uses VDI-based solutions for creating virtual desktops. For Light Agent for Windows to be compatible with some virtualization solutions, additional steps are required during installation.

About installing Kaspersky Security Center Network Agent on virtual machines

Before or during the installation of Kaspersky Endpoint Security for Linux in Light Agent mode, you need to install Network Agent for Linux on each virtual machine.

Before or during installation of Kaspersky Endpoint Security for Windows in Light Agent mode, you need to install Network Agent for Windows on each virtual machine.

The files required for installing Network Agent are included in the Kaspersky Security Center distribution kit. For more information on installing Network Agent, please refer to the Kaspersky Security Center Help.

About installing Light Agent for Linux

Kaspersky Endpoint Security for Linux in Light Agent mode for protection of virtual environments is installed in one of the following ways:

• Remotely from the administrator's workstation using Kaspersky Security Center.

  To use Kaspersky Endpoint Security for Linux as a Light Agent for Linux, you select the Light Agent mode in one of the following ways:

  • In the properties of the installation package of the Kaspersky Endpoint Security for Linux application, on the Settings tab.
  • Using the autoinstall.ini configuration file, which is included in the application installation package (KSVLA_MODE=yes).
• Using the command line.

  To use Kaspersky Endpoint Security for Linux as a Light Agent for Linux, after the installation is complete, you need to run the initial application configuration and select the Light Agent mode in one of the following ways:

  • Enter yes in the Specifying the application usage step of the initial configuration script.
  • Specify the KSVLA_MODE=yes setting in the initial setup configuration file.

When installing on a non-persistent virtual machine template, we recommend configuring additional installation settings for Light Agent and Network Agent.

For more information about installing Kaspersky Endpoint Security for Linux in Light Agent mode, see the application Help of the relevant version.

About installing Light Agent for Windows

Kaspersky Endpoint Security for Windows in Light Agent mode for protection of virtual environments is installed in one of the following ways:

• Remotely from the administrator's workstation using Kaspersky Security Center.

  To use Kaspersky Endpoint Security for Windows as a Light Agent for Windows, you need to select the Light Agent configuration in the properties of the Kaspersky Endpoint Security for Windows installation package on the Settings tab.

• Locally on a virtual machine using the installation wizard.

  To use Kaspersky Endpoint Security for Windows as a Light Agent for Windows, you need to select the Light Agent for protecting virtual environments configuration at the configuration selection step.

• Using the command line.

  To use Kaspersky Endpoint Security for Windows as a Light Agent for Windows, you select the Light Agent mode in one of the following ways:

  • Run the installation command with LIGHTAGENTMODE=1.
  • Perform a silent installation using a setup.ini file with KSVLAMode=1.

To optimize the performance of Kaspersky Endpoint Security for Windows in Light Agent mode, we recommend using predefined groups of exclusions and trusted applications for various virtualization solutions. You can include recommended scan exclusions and trusted applications in the trusted zone during local installation using the wizard or when creating an installation package in interactive mode.

When installing on a non-persistent virtual machine template, we recommend configuring additional installation settings for Light Agent and Network Agent.

For more information about installing Kaspersky Endpoint Security for Windows in Light Agent mode, see the application Help of the relevant version.

Installing Light Agent on a template for non-persistent virtual machines

If you are installing on a virtual machine template that will be used to create non-persistent virtual machines, we recommend that you configure settings that optimize the operation of Light Agent on the non-persistent virtual machines.

If these settings are configured, the operation of non-persistent virtual machines created from the template will be optimized as follows:

• Kaspersky Security Center functionality that is not required for non-persistent virtual machines will be disabled, namely the receiving of information about software, hardware, vulnerabilities, and necessary updates.
• Updates that require restarting the protected virtual machine will not be installed on virtual machines created from the template. When receiving updates that require a restart, the Light Agent installed on the virtual machine sends a message to Kaspersky Security Center about the need to update the virtual machine template.
• Non-persistent virtual machines running Windows operating systems will not use the active infection disinfection technology regardless of the configured settings of Light Agent for Windows. If it is necessary to perform the disinfection procedure for an active infection, the Light Agent installed on the virtual machine will send a message to Kaspersky Security Center about the need to perform this procedure on the virtual machine template.

Kaspersky Security Center Network Agent settings

If you are installing Network Agent using Kaspersky Security Center, in the properties window of the Network Agent installation package, you need to specify the following settings in the Advanced section:

• Enable dynamic mode for VDI.
• Optimize the settings for VDI.

If you are installing Network Agent using the command line, you need to use a response file (in TXT format) with the following settings:

• KLNAGENT_VM_VDI=1
• KLNAGENT_VM_OPTIMIZE=1

For more information on installing Network Agent, please refer to the Kaspersky Security Center Help.

Light Agent for Linux settings

If you are installing Kaspersky Endpoint Security for Linux in Light Agent mode using Kaspersky Security Center, you need to include the autoinstall.ini configuration file in the installation package with the following settings:

• KSVLA_MODE=yes
• VDI_MODE=yes

If you create an installation package in Kaspersky Security Center Web Console, you can specify these settings using the following check boxes in the installation package properties on the Settings tab:

• Use the application in Light Agent mode
• Enable VDI protection mode.

If you are installing Kaspersky Endpoint Security for Linux in Light Agent mode using the command line, after the installation is complete, you need to configure the settings as follows, depending on the initial configuration mode:

• Run the initial configuration script and enter yes in the Specifying the application usage mode and Enabling VDI protection mode steps.
• Run the initial configuration in automatic mode by specifying the following settings in the initial configuration file:
  • KSVLA_MODE=yes
  • VDI_MODE=yes

For more information about installing Kaspersky Endpoint Security for Linux in Light Agent mode, see the application Help of the relevant version.

Light Agent for Windows settings

If you are installing Kaspersky Endpoint Security for Windows in Light Agent mode using Kaspersky Security Center, you need to configure the following settings in the properties of the Kaspersky Endpoint Security for Windows installation package on the Settings tab:

• select the Light Agent configuration
• select the Protect VDI check box

If you are installing Kaspersky Endpoint Security for Windows in Light Agent mode using the Installation Wizard, you need to configure the following settings at the configuration selection step:

• select the Light Agent for protecting virtual environments configuration
• select the Protect VDI check box

If you are installing Kaspersky Endpoint Security for Windows in Light Agent mode using the command line, you need to do one of the following:

• Run the installation command with LIGHTAGENTMODE=1 and VDI=1.
• Perform installation in silent mode using a setup.ini file with KSVLAMode=1 and InstallOnVDI=1.

For more information about installing Kaspersky Endpoint Security for Windows in Light Agent mode, see the application Help of the relevant version.

Compatibility of Light Agent for Windows with virtualization solutions

You need to take additional steps when installing Light Agent for Windows on virtual infrastructures that use the following virtualization solutions:

• Citrix App Layering
• Citrix Provisioning (Citrix Provisioning Services)
• VMware App Volumes

Expand all | Collapse all

Compatibility with Citrix App Layering technology

Compatibility with Citrix Provisioning (Citrix Provisioning Services) technology

Compatibility with VMware App Volumes technology