Special considerations when setting parameter values when updating the application

If you use Kaspersky Security Center Administration Console to manage the application, you can convert policies and tasks to use the values of policy and task settings configured for the previous version of the application (for more information, see the Kaspersky Security Center Help). The procedure for converting policies and tasks is not available in Kaspersky Security Center Web Console.

After updating the application using the command line, most settings carry over from the previous version of the application. You can also migrate application settings by exporting settings to a file and then importing them from that file.

Default values are assigned to settings that did not exist in the previous version of the application. Some settings are assigned special values.

Database update sources

In the new version of the application, the following changes have been made to the database update tasks:

• The Use Kaspersky update servers if other update sources are not available (UseKLServersWhenUnavailable) setting has been removed. You can configure this functionality using other task settings.
• You can specify multiple update database update sources at the same time. The application use these update sources in the order in which they appear in the list of sources.

After converting tasks in the MMC plug-in, the update sources are configured as follows:

• If the Kaspersky update servers option was selected in the previous version, the Kaspersky update servers check box is selected in the list of sources.
• If the Kaspersky Security Center option was selected in the previous version, the Kaspersky Security Center check box is selected in the list of sources.

  However, if the Use Kaspersky update servers if other update sources are not available check box was selected in the previous version, then the Kaspersky update servers check box is also selected in the list of sources, and the Kaspersky Security Center source is moved to the top of the list.

• If a custom source was configured in the previous version (Other sources on the local or global network), then the custom source with the specified parameters (path or web address of the source) is added to the list of sources, and this check box is selected.

  However, if the Use Kaspersky update servers if other update sources are not available check box was selected in the previous version, then the Kaspersky update servers check box is also selected in the list of sources, and the custom source is moved to the top of the list.

The conversion of policies is not supported by the web plug-in.

After updating the application on the command line, update sources are configured as follows:

• If the SourceType was set to KLServers in the previous version, the following update source is created in the [Sources] section: SourceType=KLServers, Enabled=Yes.
• If the SourceType was set to SCServer in the previous version, the following update source is created in the [Sources] section: SourceType=SCServer, Enabled=Yes.

  However, if the parameter was set to UseKLServersWhenUnavailable=Yes in the previous version, a second update source is created in the [Sources] section: SourceType=KLServers, Enabled=Yes.

• If SourceType was set to Custom in the previous version and the custom source was configured in the [CustomSources.item_#] section, a custom update source is created in the [Sources] section: SourceType=Custom, URL=<path or web address of the source>, Enabled=Yes.

  However, if the parameter was set to UseKLServersWhenUnavailable=Yes in the previous version, a second update source is created in the [Sources] section: SourceType=KLServers, Enabled=Yes.

System event interception settings

If the system event interception mechanism based on the updatable kernel module was selected in the previous version of the application, after the update, the application switches to intercepting system events using the fanotify. Then, after updating the databases and application modules and automatically restarting, the application reverts to using the updatable kernel module again.

Kaspersky Security Network settings

After converting a policy in the MMC plug-in, the Kaspersky Security Network settings in the policy properties depend on whether you accepted or rejected the terms of the Kaspersky Security Network Statement in the Policies and Tasks Batch Conversion Wizard:

• If you accepted the terms of the Statement, the Extended KSN mode option is selected.
• If you rejected the terms of the Statement, the Do not use KSN option is selected.

The conversion of policies is not supported by the web plug-in.

After upgrading the application on the command line, the UseKSN setting is set to No if when updating you set KESL_USE_KSN=No, and UseKSN=Extended is applied if you set KESL_USE_KSN=Yes. In other cases, the value of the UseKSN setting does not change after the update.

Cloud mode settings

After converting a policy in the MMC plug-in, the settings for using cloud mode may change depending on whether you accepted or rejected the terms of the Kaspersky Security Network Statement in the Policies and Tasks Batch Conversion Wizard:

• If you accepted the terms of the Statement, the Enable cloud mode check box will be selected.
• If you rejected the terms of the Statement, the Enable cloud mode check box will be cleared.

The conversion of policies is not supported by the web plug-in.

After updating the application on the command line, CloudMode is set to:

• CloudMode=No if UseKSN=No after the upgrade.
• CloudMode=Yes if UseKSN=Basic/Extended was set after the update and CloudMode=Yes was set before the update.

Cloud mode is available if use of KSN is enabled. To enable cloud mode:

• If using the MMC or web plug-in, select the Extended KSN mode option and select the Enable cloud mode check box.
• When using the command line, set the UseKSN parameter to Basic or Extended and the CloudMode parameter to Yes.

Kaspersky Managed Detection and Response integration settings

If the MDR component was enabled, after converting the policy in the MMC plug-in, the status of the MDR component depends on whether you have accepted or rejected the terms of the Kaspersky Security Network Statement in the Policies and Tasks Conversion Wizard:

• If you have accepted the terms of the Statement, the MDR component remains enabled (the Enable Managed Detection and Response check box is selected).
• If you have rejected the terms of the Statement, the Enable Managed Detection and Response check box is cleared.

The conversion of policies is not supported by the web plug-in.

After updating the application on the command line, UseMDR is set to:

• UseMDR=No if UseKSN=No after the upgrade.
• UseMDR=Yes if UseKSN=Basic/Extended is set after the update and UseMDR=Yes was set before the update.

If you want to use the Kaspersky Managed Detection and Response functionality, you need to enable the extended mode of Kaspersky Security Network.

Page top