Hardware and software requirements

Hardware requirements

Kaspersky Industrial CyberSecurity for Networks has the following minimum hardware requirements for computers on which application components will be installed:

Computer that will perform Server functions:
- CPU: Intel® Core™ i7.
- RAM: 32 GB.
- Free space on the hard drive: 750 GB and an additional 250 GB for each monitoring point on this computer.
Computer that will perform sensor functions:
- CPU: Intel Core i5 / i7.
- RAM: 4 GB, and an additional 2 GB for each monitoring point on this computer.
- Free space on the hard drive: 50 GB and 250 GB for each monitoring point on this computer.

When using sensors, the bandwidth of the dedicated Kaspersky Industrial CyberSecurity network between the Server and each sensor must be at least 50% of the cumulative incoming traffic at the sensor (for all monitoring points of the sensor).

Example:

A sensor has two monitoring points. One monitoring point receives 100 Mbit/s of traffic, while the other receives 200 Mbit/s. In this case, the bandwidth of the channel between the sensor and the Server must be at least 150 Mbit/s ((200+100)/2=150).

Software requirements for Kaspersky Industrial CyberSecurity for Networks 3.0

Kaspersky Industrial CyberSecurity for Networks 3.0 has the following software requirements for computers on which application components will be installed:

CentOS operating system version 8.3.2011 or later.
When installing the operating system, we recommend that you allocate the entire hard drive (minus the space required for the boot and swap partitions) to the system (root) partition.
The same version of operating system must be installed on all computers where application components are installed.
To install application components in the CentOS operating system, the following conditions must be fulfilled:
- Chrony time synchronization package version 3.1 or later is installed.
  To install the Chrony time synchronization package:
  
  In the operating system console, run the following commands:
  
  sudo dnf install chrony
  sudo systemctl enable chronyd
  sudo systemctl start chronyd
- The SELinux access control enforcement system is disabled.
  To disable the SELinux access control enforcement system:
  1. Open the system configuration file. To do so, enter the following command:
    sudo mcedit /etc/selinux/config
  2. Set the following parameter value:
    SELINUX=disabled
  3. Save and close the configuration file.
  4. Restart the computer.
- The dnf-utils package is installed.
  To install the dnf-utils package:
  
  In the operating system console, run the following command:
  
  sudo dnf install dnf-utils
- Python interpreter version 2.7 is installed.
  To install python2 packages:
  
  In the operating system console, run the following command:
  
  sudo dnf install python2 libnsl
- A symbolic link to the installed version of the python2 package is configured.
  To configure a symbolic link to the installed version of the python2 package:
  
  In the operating system console, run the following command:
  
  sudo alternatives --set python /usr/bin/python2
- The python2-pyyaml package is installed.
  To install the python2-pyyaml package:
  
  In the operating system console, run the following command:
  
  sudo dnf install python2-pyyaml
To ensure proper functioning of application components on the computer that will perform Server functions, the following conditions must also be fulfilled in the CentOS operating system:
- Python interpreter version 3.6 or later is installed, as well as the following packages supporting the operation of connectors and data conversion scripts: python3-tqdm, python3-certifi, python3-dateutil, python3-pyyaml, python3-pytz, python3-urllib3, python3-psycopg2, python3-cffi (if connectors will also operate on other computers, the listed packages must also be installed on those computers).
  To install packages for connectors and data conversion scripts:
  
  In the operating system console, run the following command:
  
  sudo dnf install python3-tqdm python3-certifi python3-dateutil python3-pyyaml python3-pytz python3-urllib3 python3-psycopg2 python3-cffi
- A Postfix mail server (Mail Transfer Agent – MTA) for sending emails through the email connector is installed.
  To install the Postfix mail server:
  
  In the operating system console, run the following commands:
  
  sudo dnf -y install postfix
  sudo systemctl start postfix
  sudo systemctl enable postfix
- Perl interpreter version 5.10 or later is installed (if Kaspersky Security Center Network Agent is being installed).

For installation of application components, it is recommended to use separate computers on which only software from the operating system is installed. If third-party applications are installed on computers, the performance of components of Kaspersky Industrial CyberSecurity for Networks may be reduced.

To install the Kaspersky Industrial CyberSecurity for Networks Administration Plug-in for Kaspersky Security Center, the Windows® update KB2999226 must be installed on the computer hosting the Kaspersky Security Center Administration Server. Installation of this update is required if the problems fixed by this update are relevant for the installed version of the operating system and configuration of the installed software on the computer hosting the Administration Server (please refer to the description of the specific update).

You can use the following browsers to connect through the web interface:

Google Chrome™ version 89 or later.
Mozilla™ Firefox™ version 86 or later.
Microsoft® Edge version 89 or later.

Kaspersky Industrial CyberSecurity for Networks 3.0 is compatible with Kaspersky Security Center version 11 and 12.

Software requirements for Kaspersky Industrial CyberSecurity for Networks 3.0.1

Kaspersky Industrial CyberSecurity for Networks 3.0.1 has the following software requirements for computers on which application components will be installed:

Astra Linux SE 1.6 operating system with the 20200722SE16 update installed.
When installing the operating system, we recommend that you allocate the entire hard drive (minus the space required for the boot and swap partitions) to the system (root) partition.
The same version of operating system must be installed on all computers where application components are installed.
To install application components in the Astra Linux SE 1.6 operating system, the following conditions must be fulfilled:
- The standard operating system components "Internet tools" and "Network services" are installed (in addition to the standard components that are installed by default in the operating system).
- The operating system has an active firewall implemented by the UFW network security configuration application (for automatic configuration of network filtering).
- Repositories containing up-to-date stable versions of installation packages are connected in the operating system (for example, connected repositories on discs containing an update of the installation disc for the operating system and an update of the disc containing development tools).
  To connect a repository on a disc:
  
  Insert the disc and run the following commands in the operating system console:
  
  sudo apt-cdrom add
  sudo apt update
- Python interpreter version 2.7 is installed.
  
  To install python2 packages:
  
  In the operating system console, run the following command:
  
  sudo apt install python2 libnsl
- The libcap2-bin package is installed.
  To install the libcap2-bin package:
  
  In the operating system console, run the following command:
  
  sudo apt install libcap2-bin
- A symbolic link to the installed version of the python2 package is configured.
  To configure a symbolic link to the installed version of the python2 package:
  
  In the operating system console, run the following command:
  
  sudo alternatives --set python /usr/bin/python2
- The python2-pyyaml package is installed.
  To install the python2-pyyaml package:
  
  In the operating system console, run the following command:
  
  sudo apt install python2-pyyaml
- The python-apt package is installed.
  To install the python-apt package:
  
  In the operating system console, run the following command:
  
  sudo apt install python-apt
- The SSH server package is installed (for centralized installation of application components)
  To install the SSH server package:
  
  In the operating system console, run the following commands:
  
  sudo apt install ssh
  systemctl enable ssh
  systemctl start ssh
- The en_US.utf8 locale is enabled (on the computer from which the centralized installation of application components will be performed).
  To enable the en_US.utf8 locale:
  
  In the operating system console, run the following command:
  
  sudo localedef -i en_US -f UTF-8 en_US.utf8
To ensure proper functioning of application components on all computers that will perform Server and sensor functions, the following conditions must be fulfilled in the Astra Linux SE 1.6 operating system:
- Information streams are allowed without limitations from the capability-based access restriction mechanism (a null capability marker is set for all access objects).
- The closed software environment mechanism is disabled in the operating system.
To ensure proper functioning of application components on the computer that will perform Server functions, the following conditions must also be fulfilled in the Astra Linux SE 1.6 operating system:
- Python interpreter version 3.5 is installed, as well as the following packages supporting the operation of connectors and data conversion scripts: python3-urllib3 python3-yaml python3-tz python3-dateutil python3-psycopg2 python3-cffi (if connectors will also operate on other computers, the listed packages must also be installed on those computers).
  To install packages for connectors and data conversion scripts:
  
  In the operating system console, run the following command:
  
  sudo apt install python3-urllib3 python3-yaml python3-tz python3-dateutil python3-psycopg2 python3-cffi
- A mail server (Mail Transfer Agent – MTA) for sending emails through the email connector is installed and configured.
- Perl interpreter version 5.10 or later is installed (if Kaspersky Security Center Network Agent is being installed).

You can use the following browsers to connect through the web interface:

Google Chrome version 89.
Mozilla Firefox version 86.
Microsoft® Edge version 89.
Chromium™ for Astra Linux version 83.

Kaspersky Industrial CyberSecurity for Networks 3.0.1 is compatible with Kaspersky Security Center version 11 and 12.