Adding Kaspersky Sandbox servers to Kaspersky Endpoint Agent list

If you enabled the integration with Kaspersky Sandbox, you can add Kaspersky Sandbox servers to Kaspersky Endpoint Agent list. You can add several Kaspersky Sandbox servers.

For a particular policy, add servers that are part of the same cluster. If servers belong to different clusters, the outcome is unpredictable.

All servers in the cluster are peers regardless of which server was used as the base for creating the cluster. Processing the same object on any server in the cluster will yield the same result.

Kaspersky Anti Targeted Attack Platform balances load among the servers. Objects that Kaspersky Endpoint Agent sends for processing to Kaspersky Anti Targeted Attack Platform are processed on the least busy server.

To make Kaspersky Anti Targeted Attack Platform cluster process objects from Kaspersky Endpoint Agent, add to Kaspersky Endpoint Agent at least one server that is part of the cluster during the integration of Kaspersky Endpoint Agent with Kaspersky Anti Targeted Attack Platform.

The list of Kaspersky Anti Targeted Attack Platform servers of Kaspersky Endpoint Agent displays only the servers that you added to this list. Nevertheless, objects can be processed by any server in the cluster thanks to load balancing. The current list of servers in the cluster is displayed in the web interface of Kaspersky Anti Targeted Attack Platform.

It is recommended to add all servers of the cluster to Kaspersky Endpoint Agent.

Kaspersky Endpoint Agent can connect to a different Kaspersky Anti Targeted Attack Platform server in the list if one of the following errors occurs:

• Kaspersky Anti Targeted Attack Platform response timeout (connection timeout).
• Kaspersky Anti Targeted Attack Platform is not available (error code 503 or 504).
• Self-diagnosis problem other than a license problem (error code 500).

When removing a server from the cluster, the following object processing scenarios are possible:

• If there is at least one server from this cluster with a valid IP address or fully qualified domain name (FQDN) in the list of Kaspersky Anti Targeted Attack Platform servers of Kaspersky Endpoint Agent, Kaspersky Anti Targeted Attack Platform continues processing objects from Kaspersky Endpoint Agent.
• If no servers from this cluster remain in the list of Kaspersky Anti Targeted Attack Platform servers of Kaspersky Endpoint Agent, or if IP addresses or fully qualified domain names of cluster servers are not valid, Kaspersky Anti Targeted Attack Platform cannot receive and process objects from Kaspersky Endpoint Agent.

  For correct processing of objects, at least one server from Kaspersky Anti Targeted Attack Platform cluster must be added to Kaspersky Endpoint Agent.

To add Kaspersky Sandbox servers to Kaspersky Endpoint Agent list:

1. Open Kaspersky Security Center Administration Console.
2. In the console tree, open the Policies folder.
3. Select Kaspersky Endpoint Agent policy and open its properties window in one of the following ways:
   • Double-click the policy name.
   • Select Properties in the policy context menu.
   • Select the Configure policy settings item in the right part of the window.
4. In the Kaspersky Sandbox integration section select the Kaspersky Sandbox integration settings subsection.
5. Select the Enable Kaspersky Sandbox integration check box if it is cleared.
6. In the List of Kaspersky Sandbox servers group of settings, click Add.

   The Server properties window opens.

7. Enter the IP address or fully qualified domain name of Kaspersky Sandbox server and the port used for connecting to the server.
8. Click Add.

   The added server is listed in the server table.

9. Repeat the steps to add each Kaspersky Sandbox server to the list.
10. In the upper right corner of the settings group, change the switch from Policy not enforced to Under policy.
11. Click OK.

Kaspersky Sandbox servers are added to Kaspersky Endpoint Agent list.

See also Enabling and disabling integration with Kaspersky Sandbox Configuring trusted connection between Kaspersky Sandbox and Kaspersky Endpoint Agent Configuring the response timeout of Kaspersky Sandbox and request queue settings

Page top