Network Agent installation package settings

Expand all | Collapse all

To configure a Network Agent installation package:

1. In the Remote installation folder of the console tree, select the Installation packages subfolder.

   The Remote installation folder is a subfolder of the Advanced folder by default.

2. In the context menu of the Network Agent installation package, select Properties.

The Network Agent installation package properties window opens.

General

The General section displays general information about the installation package:

• Installation package name
• Name and version of the application for which the installation package has been created
• Installation package size
• Installation package creation date
• Path to the installation package folder

Settings

This section presents the settings required to ensure proper functioning of Network Agent immediately after it is installed. The settings in this section are available only on devices running Windows.

In the Destination folder group of settings, you can select the client device folder in which Network Agent will be installed.

• Install in default folder

  If this option is selected, Network Agent will be installed in the <Drive>:\Program Files\Kaspersky Lab\NetworkAgent folder. If this folder does not exist, it will be created automatically.

  By default, this option is selected.

• Install in specified folder

  If this option is selected, Network Agent will be installed in the folder specified in the entry field.

In the following group of settings, you can set a password for the Network Agent remote uninstallation task:

• Use uninstallation password

  If this option is enabled, by clicking the Modify button you can enter the uninstall password (only available for Network Agent on devices running Windows operating systems).

  By default, this option is disabled.

• Status

  Status of the password: Password set or Password not set.

  By default, this password is not installed.

• Protect Network Agent service against unauthorized removal or termination, and to prevent changes to the settings

  When this option is enabled, after Network Agent is installed on a managed device, the component cannot be removed or reconfigured without required privileges. The Network Agent service cannot be stopped. This option has no effect on domain controllers.

  Enable this option to protect Network Agent on workstations operated with local administrator rights.

  By default, this option is disabled.

• Automatically install applicable updates and patches for components that have the Undefined status

  If this option is enabled, all downloaded updates and patches for Administration Server, Network Agent, Administration Console, Exchange Mobile Device Server, and iOS MDM Server will be installed automatically (automatic updating and patching is only available starting from Kaspersky Security Center 10 Service Pack 2 version).

  If this option is disabled, all downloaded updates and patches will only be installed after you change their status to Approved. Updates and patches with Undefined status will not be installed.

  By default, this option is enabled.

Connection

In this section, you can configure connection of Network Agent to the Administration Server. To establish a connection, you can use the SSL or UDP protocol. For configuring the connection, specify the following settings:

• Administration Server

  Address of the device with Administration Server installed.

• Port

  Port number that is used for connection.

• SSL port

  Port number that is used for connection over the SSL protocol.

• Use Server certificate

  If this option is enabled, authentication of Network Agent access to the Administration Server will use the certificate file that you can specify by clicking the Browse button.

  If this option is disabled, the certificate file will be received from the Administration Server at the first connection of Network Agent to the address specified in the Server address field.

  We do not recommend to disable this option, because automatic receipt of an Administration Server certificate by Network Agent upon connection to the Administration Server is considered insecure.

  By default, this check box is selected.

• Use SSL

  If this option is enabled, connection to the Administration Server is established through a secure port via SSL.

  By default, this option is disabled. We recommend that you do not disable this option so your connection remains secured.

• Use UDP port

  If this option is enabled, the Network Agent is connected to Administration Server through a UDP port. This allows to manage client devices and receive information about them.

  The UDP port must be open on managed devices where Network Agent is installed. Therefore, we recommend that you do not disable this option.

  By default, this option is enabled.

• UDP port number

  In this field you can specify the port to connect Administration Server to Network Agent using UDP protocol.

  The default UDP port is 15000.

• Open Network Agent ports in Microsoft Windows Firewall

  If this option is enabled, UDP ports used by Network Agent are added to the Microsoft Windows Firewall exclusion list.

  By default, this option is enabled.

• Use proxy server

  If this option is disabled, direct connection is used to connect the device to the Administration server.

  If this option is enabled, specify the proxy server parameters:

  • Proxy server address
  • Proxy server port

  If your proxy server requires authentication, enable the Proxy server authentication option and specify the User name and Password of the account under which connection to the proxy server is established. We recommend that you specify the credentials of an account that has minimum privileges required only for the proxy server authentication.

For compatibility purposes, it is not recommended to specify proxy connection settings in the Network Agent installation package settings.

Advanced

In the Advanced section, you can configure how to use the connection gateway. For this purpose, you can do the following:

• Use Network Agent as a connection gateway in the demilitarized zone (DMZ) to connect to Administration Server, communicate with it, and keep data on the Network Agent safe during data transmission.
• Connect to Administration Server by using a connection gateway to reduce the number of connections to the Administration Server. In this case, enter the address of the device that will act as the connection gateway in the Connection gateway address field.
• Configure the connection for Virtual Desktop Infrastructure (VDI) if your network includes virtual machines. For this purpose, do the following:
  • Enable dynamic mode for VDI

    If this option is enabled, dynamic mode for Virtual Desktop Infrastructure (VDI) will be enabled for Network Agent installed on a virtual machine.

    By default, this option is disabled.

  • Optimize settings for VDI

    If this option is enabled, the following features are disabled in the Network Agent settings:

    • Retrieving information about software installed
    • Retrieving information about hardware
    • Retrieving information about vulnerabilities detected
    • Retrieving information about updates required

    By default, this option is disabled.

Additional components

In this section you can select additional components for concurrent installation with Network Agent.

Tags

The Tags section displays a list of keywords (tags) that can be added to client devices after Network Agent installation. You can add and remove tags from the list, as well as rename them.

If the check box is selected next to a tag, this tag is automatically added to managed devices during Network Agent installation.

If the check box is cleared next to a tag, the tag will not automatically be added to managed devices during Network Agent installation. You can manually add this tag to devices.

When removing a tag from the list, it is automatically removed from all devices to which it was added.

Revision history

In this section, you can view the history of the installation package revisions. You can compare revisions, view revisions, save revisions to a file, and add and edit revision descriptions.

Network Agent installation package settings available to a specific operating system are given in the table below.

Network Agent installation package settings

Property section	Windows	Mac	Linux
General
Settings
Connection		(except for the Open Network Agent ports in Microsoft Windows Firewall and Use only automatic detection of proxy server options)	(except for the Open Network Agent ports in Microsoft Windows Firewall and Use only automatic detection of proxy server options)
Advanced
Additional components
Tags		(except for the automatic tagging rules)	(except for the automatic tagging rules)
Revision history

Page top