Reinforcing the security of computers with application components installed

After installing Kaspersky Industrial CyberSecurity for Networks, it is recommended to reinforce the security of the operating systems on computers that have application components installed. To reinforce security, you can use the application installation script kics4net-deploy-<application version number>.bundle.sh.

You can use the application installation script to perform the following actions:

• Enable prevention of the startup of operating system services that are not required for the operation of application components (for example, avahi-daemon and cups).
• Change the network configuration settings that impact the security of the operating system (for example, enable prevention of redirected network packet processing over the ICMP protocol).

The application installation script performs actions that harden the security on all computers on which application components are installed.

To reinforce security, the script kics4net-deploy-<application version number>.bundle.sh uses the installation settings file that was saved on the computer. If the installation settings file on this computer is corrupt or missing from its original folder, the application installation script searches for a copy of the file on the computer and on other computers that have application components installed.

To reinforce the security of computers that have application components installed:

1. On the computer from which the installation was performed, go to the folder containing the saved files from the distribution kit of Kaspersky Industrial CyberSecurity for Networks.
2. Enter the following command:

   bash kics4net-deploy-<application version number>.bundle.sh \

   --harden <parameter>

   where <parameter> is one of the following startup parameters:

   • -s enables prevention of the startup of operating system services.
   • -n modifies the network configuration settings.
   • -a enables prevention of the startup of operating system services and modifies the network configuration settings.
3. In the SSH password and SUDO password invitations, enter the password for the user account that is used to run the installation.

Wait for completion of the script kics4net-deploy-<application version number>.bundle.sh. If it completes successfully, the screen displays information about the actions performed on computers with application components installed.

Page top