Why a computer with Kaspersky Anti-Virus version 6.0.4.x and Cisco Security Agent installed cannot get an IP address renewal from the DHCP server after deleting the NDIS filter

 

 

Kaspersky Administration Kit 8.0

 
 
 

Why a computer with Kaspersky Anti-Virus version 6.0.4.x and Cisco Security Agent installed cannot get an IP address renewal from the DHCP server after deleting the NDIS filter

Back to "Host Management"
2012 Jan 24 ID: 5095
 
 
 
 
­­

Applies to:
  • Kaspersky Anti-Virus 6.0 R2 for Windows Workstations v. 6.0.4.x
  • Kaspersky Anti-Virus 6.0 for Windows Workstations v. 6.0.3.x
  • Kaspersky Administration Kit 8.0
  • Description

    After deleting the NDIS filter from the network components list on a computer with Kaspersky Anti-Virus 6.0 for Windows Workstations (versions 6.0.3.x / 6.0.4.x) and Cisco Security Agent installed, an attempt to receive/renew its IP address with the DHCP server terminates with an error.

    Reason

    Kaspersky Anti-Virus 6.0 for Windows Workstations (versions 6.0.3.x / 6.0.4.x) without the NDIS filter installed and Cisco Security Agent are using the same hook based network interception scheme. This can lead to a conflict when receiving/renewing the IP address with the DHCP server.

    Solution

    As a solution we suggest that you create a 32 bit DWORD value named PatchOB. This changes the network interception scheme of a Kaspersky Anti-Virus 6.0 for Windows Workstations (versions 6.0.3.x / 6.0.4.x) without the NDIS filter.

    Creating the PatchOB value:

    • Locally on a client host

      • Disable Self-Defense;

      • Download the PatchOB.zip file and extract it into a folder (using Winrar, for example);

      • Execute the PatchOB.reg file;

      • This will create a 32 bit DWORD value PatchOB = 0 in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\KL1 key;

      • Reboot the computer;

      • Enable Kaspersky Anti-Virus 6.0 for Windows Workstations (versions 6.0.3.x / 6.0.4.x) Self-Defense.

    • Via Kaspersky Administration Kit 8

      • Disable Self-Defense in the policy for workstations in the Administration console;

      • Download the PatchOB.zip file and extract it into a folder (using Winrar, for example);

      • Create a .bat file that would import the PatchOB.reg value;

      • Create a deployment task for this .bat file and run it for the client hosts;

      • This will create a 32 bit DWORD value PatchOB = 0 in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\KL1 key;

      • Reboot the computer;

      • Enable Self-Defense in the policy for workstations in the Administration console.

    You can integrate the PatchOB.reg value into a Kaspersky Anti-Virus 6.0 for Windows Workstations (versions 6.0.3.x / 6.0.4.x) without the NDIOS filter installation package, before installing the program. Thus the PatchOB.reg value will be imported during the program installation process.

    This can be accomplished in the following way:
    • Rename PatchOB.reg into setup.reg;

    • Copy setup.reg into a folder containing the msi installer. This is the C:\Program Files\Kaspersky Lab\Kaspersky Administration Kit\Share\Packages\installation_package_name\exec folder on the Administration server, by default;

    • Create a deployment task.

    InformationIt is important to observe the sequence of the actions: first copy the setup.reg file into the installation package folder, then create a deployment task for that package.

     
     
     
     
    Was this information helpful?
    Yes No
     

     
     

    Have you found what you were looking for?

    Please let us know how we can make this website more comfortable for you

    Send feedback Send feedback

    Thank you!

    Thank you for submitting your feedback.
    We will review your feedback shortly.