Local installation of Network Agent

Expand all | Collapse all

To install Network Agent on a device locally:

1. On the device, run the setup.exe file from the distribution package downloaded from the internet. Refer to the following topic for details: Obtaining the Network Agent installation package from the Kaspersky Security Center distribution kit.

   A window opens prompting you to select Kaspersky applications to install.

2. In the application selection window, click the Install only Kaspersky Security Center 14 Network Agent link to start the Network Agent setup wizard. Follow the instructions of the wizard.
   1. Administration Server

      Port

      Specifies the non-SSL port used by the Administration Server to receive connections from Network Agents.

      By default, this option is set to 14000.

      SSL port

      Specifies the SSL port used by the Administration Server to receive connections from Network Agents.

      By default, this option is set to 13000.

      Use SSL to connect to Administration Server

      If this option is enabled, connection to the Administration Server is established through a secure port via SSL.

      By default, this option is enabled.

      Allow Network Agent to open UDP port

      If this option is enabled, the installer automatically opens the port used by the Administration Server to manage the client device and receive information about it.

      By default, this option is enabled.

      UDP port

      Allows you to configure the port used by the Administration Server to manage the client device and receive information about it.

      By default, this option is set to 15000.

   2. Proxy server configuration

      Use proxy server

      If this option is enabled, you can specify the credentials for proxy server authentication.

      We recommend that you specify the credentials of an account that has minimum privileges required only for the proxy server authentication.

      By default, this option is disabled.

      Address

      Port

      Account

      User name of the account under which connection to the proxy server is established.

      We recommend that you specify the credentials of an account that has minimum privileges required only for the proxy server authentication.

      Password

      Password of the account under which connection to the proxy server is established.

      We recommend that you specify the credentials of an account that has minimum privileges required only for the proxy server authentication.

   3. Connection gateway

      Do not use connection gateway

      Use Network Agent as a connection gateway in DMZ

      Select this option to use Network Agent as a connection gateway in the demilitarized zone (DMZ) to connect to Administration Server, communicate with it, and keep data on the Network Agent safe during data transmission.

      Connect to Administration Server by using a connection gateway

      Select this option and then specify the device that will act as the connection gateway.

   4. Administration Server certificate
   5. Agent tags
   6. Advanced settings

      Automatically install applicable updates and patches for components that have the Undefined status

      We recommend to keep this option enabled. You can clear this option to disable automatic updating and patching for Kaspersky Security Center components. The administrator can re-enable automatic updating and patching later by using a policy.

      By default, this option is disabled.

      Enable Network Agent service protection

      When this option is enabled, after Network Agent is installed on a managed device, the component cannot be removed or reconfigured without required privileges. The Network Agent service cannot be stopped. This option has no effect on domain controllers.

      Enable this option to protect Network Agent on workstations operated with local administrator rights.

      By default, this option is disabled.

      Enable dynamic mode for VDI

      If this option is enabled, dynamic mode for Virtual Desktop Infrastructure (VDI) will be enabled for Network Agent installed on a virtual machine.

      By default, this option is disabled.

      Optimize the Kaspersky Security Center Network Agent settings for the virtual infrastructure. Disable vulnerability scan and inventory of applications and hardware. You can edit the current settings through Network Agent policies.

      If this option is enabled, the following features are disabled in the Network Agent settings:

      • Retrieving information about software installed
      • Retrieving information about hardware
      • Retrieving information about vulnerabilities detected
      • Retrieving information about updates required

      By default, this option is disabled.

   7. Start application

When the setup wizard finishes, Network Agent will be installed on the device.

You can view the properties of the Kaspersky Security Center Network Agent service; you can also start, stop, and monitor Network Agent activity by means of standard Microsoft Windows tools: Computer Management\Services.