Best practices for an Administration Server that manages a large number of devices

Best practices for using DBMS

Configure the Administration Server maintenance task to be run on a regular basis, especially if you use a PostgreSQL DBMS.

Exclude the DBMS folder from IOC scanning.

Best practices for policies and profiles

Reduce the number of active policies for a component (such as Kaspersky Endpoint Security for Windows). You can replace policies with policy profiles.

Best practices for an Administration Server that manages a large number of devices

Reduce the number of simultaneously run tasks, especially remote installation and patch management.

Reduce the number and optimize the schedule for tasks that work with device selections.

In the Event configuration section of policy settings, minimize the number of event types being saved.

Best practices for storing events

Reduce the frequency of single-type events from the Application Control component. Refer to the following topic for details: About blocking frequent events.

Reduce the storage term for events from components (such as Kaspersky Endpoint Security for Windows) and informational events about fixed vulnerabilities.

Enable the Save events related to task progress option in task settings for common tasks, such as update tasks. Refer to the following topic for details: Logging of information about events for tasks and policies.

Optimize the inventory task settings. Refer to the following topic for details: Inventory task.

Page top