Kaspersky Administration Kit 6.0 MP1/MP2

A policy is a set of the application working parameters. Each application has its own policy. Several policies can be defined for one application in a group. But only one policy can be active: it's the policy whose settings are running at present.

You can "lock" most policy settings from modifying. You can lock a policy in the policy's properties by clicking   for the settings of a specific group. After the image has changed to it is impossible to change this group of settings in the policies of nested groups, task settings or on client computers. Mandatory or “locked” settings are always enforced on client computers.

Remotely configured settings of the Anti-Virus are applied the following ways: 

• "over the air". If the Administration Server has an external IP-address, then mobile device connects with it via the Internet using GPRS. 


• via LAN. When a mobile device is connected to the computer in the LAN (using the cable or cradle) the installed Anti-Virus “finds” the Administration Server and synchronizes with it.

By default the Anti-Virus tries to synchronize with the Administration Server every 3 hours. The synchronization period can be changed in the policy > on the Additional settings tab.

To create a policy, go to > the Policy subfolder > the Add a policy link in the details panel. During the work of the New Policy Wizard define the name of the policy, the application it is created for and configure the minimum necessary number of application parameters.

Policies can be imported and exported.

All Kaspersky Anti-Virus Mobile 6.0 Enterprise Edition settings are grouped on its policies tabs: 

• General 
• Enforcement 
• Events 
• Scan 
• Updates source 
• Additional settings

The General tab

The General tab displays policy name, application for which it is created, creation and modification time and date. On this tab the name of the policy can be changed or the policy can activated based on the event after which it becomes active. In the current Kaspersky Administration Kit version the administrator can configure automatic activation of the selected policy only if the Virus outbreak event occurs. I.e. the policy activates when a certain number of malicious programs is detected on the computers in the logical network during a restricted period of time. Parameters of virus outbreak can be configured in the Administration Server > Properties > the Virus outbreak tab.

You can activate the policy manually. To do it, in the Policy status drop-down menu select Active policy. When some other policy is activated, the prior deployed policy is not active any more. If no policy has the active status, then no policy is enforced.

Mobile user policy cannot be applied in Kaspersky Anti-Virus Mobile Enterprise Edition.

Back to tabs list

The Enforcement tab

The tab gives reference information about results of the policy application on client computers in the group: for how many mobile devices the policy was applied (the list of Clients on which the policy was applied or is going to be applied can be viewed if you click the Details button) - this information can be helpful to know why the settings/ policy have (has) not been applied on some client computers.

Each anti-virus application has its own settings – they are called local settings. When a policy is applied to the application, the application stops using its local settings and starts functioning the following way:

• “locked” parameters (mandatory parameters), are taken from the policy. 

• other parameters (i.e. parameters which are not “locked” in the policy) are taken from its local settings.

Due to specific features of how the policy is applied to Kaspersky Anti-Virus Mobile Enterprise Edition mandatory policy settings change (rewrite) local application settings. When the policy is no longer applied to the application, it gets back to its “old” settings (those which were used before the first policy application).

Because of these working peculiarities it is useless to modify settings in the Advanced windows (to open the window click the Advanced link). Changes made in these settings do not matter at all!

Back to tabs list

The Scan tab

Real-time protection is enabled and On-demand scan is set on this tab.

The following scheme can be used to process an infected object: 

• disinfect (the box Try to disinfect infected object is checked), if disinfection failed choose one of the below given actions: delete, skip, quarantine or prompt for action (a dialog window with possible actions is displayed). 

• do not try to disinfect (the box Try to disinfect infected object is NOT checked), choose one of the below given actions: delete, skip, quarantine or prompt for action (a dialog window with possible actions is displayed).

Back to tabs list

The Updates source tab

Updates source to download anti-virus databases can be set on this tab. If you leave the field empty (either “locked” or “unlocked”), the Anti-Virus will download updates from the addresses embedded in the anti-virus application.

Back to tabs list

The Additional settings tab

Anti-Spam and synchronization settings can be set on this tab.

The default synchronization period is every 3 hours.

Back to tabs list

The Events tab

On the Events tab the administrator can set what events type to be notified of and how these notifications should be delivered.

All events related to anti-virus protection may have the following severity levels according to their importance: 

• Critical 
• An infected object detected 
• Error 
• Unable to delete an object 
• Cannot quarantine the object 
• Warning 
• Object disinfected 
• Object could not be disinfected 
• Object deleted 
• Object quarantined 
• License key validity period has expired 
• Info 
• File system scan result – displays summary information about the last full scan of the file system. This information is also available in the Events node of the Console when viewing detailed information about this event. 
• Device memory scan result - displays summary information about the device memory scan. This information is available in the Events node of the Console when viewing detailed information about this event. 
• Object skipped.
• Message blocked. 
• Anti-Spam service started. 
• Anti-Spam service stopped.
• Real-time protection task started 
• Real-time protection task stopped 
• Updating result - displays summary information about the last update of anti-virus databases. This information is also available in the Events node of the Console when viewing detailed information about this event.

Each event is stored in the Administration Server database (in the Events node of the console tree) for 30 days.

To notify the administrator about an event occurrence a user can send email, use NET SEND or run executable: for it check the necessary boxes in the correct line. Click the Properties button to configure events more precisely.

The option In client’s computer Windows event log which can be found in the properties of the selected event on the Registration tab is unavailable for the anti-virus application as Windows event log is missing from the mobile device

But if all these parameters are already configured in the properties of the Administration Server on the Notification tab, then there is no need to configure them in the policies.

Parameters for storing and sending event notifications are configured for each event SEPARATELY! Highlight EACH event by a mouse and specify its parameters. To change several settings choose them by a mouse by pressing CTRL and SHIFT simultaneously.

Back to tabs list