Migrating the [KSWS+KEA] configuration to [KES+built-in agent] configuration

To support using Kaspersky Endpoint Security for Windows as part of EDR Optimum, EDR Expert, Kaspersky Sandbox, and MDR, the application includes the built-in agent. You no longer need a separate Kaspersky Endpoint Agent application to work with these solutions. The Kaspersky Endpoint Agent application is needed only to support the KATA EDR solution.

When migrating from KSWS to KES, the EDR Optimum, EDR Expert, Kaspersky Sandbox, and MDR solutions continue to work with Kaspersky Endpoint Security. In addition, the Kaspersky Endpoint Agent is removed from the computer.

Migrating the [KSWS+KEA] configuration to [KES+built-in agent] involves the following steps:

  1. Migrating from KSWS to KES

    Migrating from KSWS to KES involves installing Kaspersky Endpoint Security instead of Kaspersky Security for Windows Server and migrating policies and tasks.

    To carry out the migration, you must select the components needed to support Detection and Response solutions as part of Kaspersky Endpoint Security. After installing the application, Kaspersky Endpoint Security switches to using the built-in agent and removes Kaspersky Endpoint Agent.

  2. Migrating the policy and tasks

    Use the Kaspersky Endpoint Agent Policy and Task Migration Wizard to migrate Kaspersky Endpoint Agent settings to Kaspersky Endpoint Security for Windows.

    The Policy and Task Migration Wizard for Kaspersky Endpoint Agent is only available in the Web Console.

    This creates a new Kaspersky Endpoint Security policy. The new policy has the Inactive status. To apply the policy, open policy properties, accept the Kaspersky Security Network Statement and set the status to Active.

    The Policies and tasks batch conversion wizard migrates KSWS policy settings to a KES policy profile. The Kaspersky Endpoint Agent Policy and Task Migration Wizard migrates policy settings to the corresponding policy. The policy and policy profile have priorities that you can manage using the Closed lock icon. attribute. Settings of the policy profile have a higher priority than settings of the policy. Therefore you can either allow modifying settings in the Detection and Response section in the policy profile (the Open lock icon. attribute) or configure the hierarchy of policies so that the policy with KSWS settings is nested inside the policy with settings of the Detection and Response section.

  3. Licensing functionality

    If you use a common Kaspersky Endpoint Detection and Response Optimum or Kaspersky Optimum Security license to activate Kaspersky Endpoint Security for Windows and Kaspersky Endpoint Agent, EDR Optimum functionality will be activated automatically after upgrading the application to version 11.7.0. You do not need to do anything else.

    If you use a stand-alone Kaspersky Endpoint Detection and Response Optimum Add-on license to activate EDR Optimum functionality, you must make sure that the EDR Optimum key is added to the Kaspersky Security Center repository and the automatic license key distribution functionality is enabled. After you upgrade the application to version 11.7.0, EDR Optimum functionality is activated automatically.

    If you use a Kaspersky Endpoint Detection and Response Optimum or Kaspersky Optimum Security license to activate Kaspersky Endpoint Agent, and a different license to activate Kaspersky Endpoint Security for Windows, you must replace the Kaspersky Endpoint Security for Windows key with the common Kaspersky Endpoint Detection and Response Optimum or Kaspersky Optimum Security key. You can replace the key using the Add key task.

    You do not need to activate Kaspersky Sandbox functionality. Kaspersky Sandbox functionality will be available immediately after upgrading and activating Kaspersky Endpoint Security for Windows.

  4. Checking the health of Kaspersky Endpoint Detection and Response Optimum and Kaspersky Sandbox

    If after the upgrade, the computer has the Critical status in the Kaspersky Security Center console:

    • Make sure that the computer has Administration Agent 13.2 installed.
    • Check the operating status of the EDR Optimum and Kaspersky Sandbox components by viewing the Application components status report. If a component has the Not installed status, install the components using the Change application components task.
    • Make sure you accept the Kaspersky Security Network Statement in the new policy of Kaspersky Endpoint Security for Windows.

    Make sure EDR Optimum functionality is activated using the Application components status report. If a component has the Not covered by license status, make sure that the automatic license key distribution functionality of EDR Optimum is turned on.

Page top