User computers managed by Kaspersky Security Center Administration Server can interact with KSN via the KSN Proxy service.
The KSN Proxy service provides the following capabilities:
The user's computer can query KSN and submit information to KSN even without direct access to the Internet.
The KSN Proxy service caches processed data, thereby reducing the load on the external network communication channel and speeding up receipt of the information that is requested by the user's computer.
By default, after KSN is enabled and the KSN Statement is accepted, the application uses a proxy server to connect to Kaspersky Security Network. The proxy server used by the application is the Kaspersky Security Center Administration Server via TCP port 13111. Therefore, if KSN Proxy is not available, you need to verify the following:
The ksnproxy service is running on the Administration Server.
The Firewall on the computer is not blocking port 13111.
You can configure the use of KSN Proxy as follows: enable or disable KSN Proxy, and configure the port for the connection. To do so, you need to open the Administration Server properties. For details on KSN Proxy configuration, please refer to the Kaspersky Security Center Help. You can also enable or disable KSN Proxy for individual computers in the Kaspersky Endpoint Security policy.
Open the Kaspersky Security Center Administration Console.
In the console tree, select Policies.
Select the necessary policy and double-click to open the policy properties.
In the policy window, select Advanced Threat Protection → Kaspersky Security Network.
In the KSN Proxy Settings block, use the Use Administration Server as a KSN proxy server check box to enable or disable KSN Proxy.
If necessary, select the Use Kaspersky Security Network servers if the KSN proxy server is unavailable check box.
If the check box is selected, Kaspersky Endpoint Security uses KSN servers when the KSN Proxy service is unavailable. KSN servers may be located both on the side of Kaspersky and on the side of third parties (when Kaspersky Private Security Network is used).
In the main window of the Web Console, select Devices → Policies & Profiles.
Click the name of the Kaspersky Endpoint Security policy.
The policy properties window opens.
Select the Application settings tab.
Go to Advanced Threat Protection → Kaspersky Security Network.
Use the Use Administration Server as a KSN proxy server check box to enable or disable KSN Proxy.
If necessary, select the Use Kaspersky Security Network servers if the KSN proxy server is unavailable check box.
If the check box is selected, Kaspersky Endpoint Security uses KSN servers when the KSN Proxy service is unavailable. KSN servers may be located both on the side of Kaspersky and on the side of third parties (when Kaspersky Private Security Network is used).
Save your changes.
The KSN Proxy address matches the Administration Server address. When the Administration Server domain name is changed, you need to manually update the KSN Proxy address.
To configure the KSN Proxy address:
In the Administration Console, go to the folder Administration Server → Additional → Remote installation → Installation packages.
In the context menu of the Installation packages folder, select Properties.
On the General tab in the opened window, specify the new address of the KSN proxy server.