Kaspersky Anti-Virus is managed using the profile and server settings.
Profile is a set of Kaspersky Anti-Virus settings that define the behavior of the application with respect to one server or a group of servers included in this profile. The profile mechanism provides centralized control of Kaspersky Anti-Virus settings.
You can use profiles to set Kaspersky Anti-Virus settings for a group of servers, for example, based on their geographical location, functions or other factors. This makes it easier to manage the application if it is installed on several servers and allows the anti-virus security status on all computers to be controlled centrally.
A profile can contain several servers or just one. When Kaspersky Anti-Virus's isolated deployment model is used, the profile includes only one server. When Kaspersky Anti-Virus's distributed deployment model is used, the profile includes several servers.
Profiles can be used to configure all application settings, except the server license and Quarantine storage period. These two settings are only for an individual server and are defined in the server settings. In addition, a number of server settings can be redefined by the profile. This enables values to be set for an individual server that correspond to the role of the server in the anti-virus protection system and that differ from the values set in the profile. Classified as such, for example, are update settings, settings for saving information about events logged by Kaspersky Anti-Virus and statistical information.
Servers are added to the profile automatically when Kaspersky Anti-Virus is installed on them. Servers are deleted from the profile when the application is deleted. Only protected Kaspersky Anti-Virus servers are included in the profile.
You can create and delete profiles. You can move a server with Kaspersky Anti-Virus installed from one profile to another.
You can also use profiles to create a protection system with various levels of security, for example, for mail servers or database servers. To do so, you can create several profiles with different settings. To assign a specified security level to a server or group of servers, simply move the servers to the profile with the required settings.
You can use server settings to configure individual values corresponding to the server's functions in the organization's network. For example, server settings can be used to configure a centralized scheme to update anti-virus databases.
All information about Kaspersky Anti-Virus settings is stored in the Control Center database – kavcontrolcenter.nsf. The Control Center database is created in the Kaspersky Anti-Virus database directory when the application is installed (the default folder is kavdatabases). At the same time, in the database a profile is created to which the protected server is added. The profile and server settings are assigned the default values.
Since the password for accessing the proxy server is stored in the kavcontrolcenter.nsf database, users having access to this database can know this password. In light of this, we recommend granting users access to the kavcontrolcenter.nsf database only when absolutely necessary, and monitoring access. When a user who had access to the kavcontrolcenter.nsf database is dismissed or reassigned, we recommend changing the proxy server access password.
If Kaspersky Anti-Virus uses the distributed deployment model, the kavcontrolcenter.nsf database contains information about Kaspersky Anti-Virus settings on each of the protected servers. A database is created on one of these servers during installation and a replica of the existing Control Center database is created on each subsequent server. A database from one of the servers on which Kaspersky Anti-Virus is already installed (selected by the Administrator) is taken as a basis. The new protected server is added to the profile containing the server from which the replica kavcontrolcenter.nsf database was created. The server settings are assigned the default values. When Kaspersky Anti-Virus is deleted from one of the servers, information about this server is deleted from the profile and from the Control Center database.
If there is an isolated deployment scheme, the kavcontrolcenter.nsf database is placed on one server and contains information about the configuration of only this server.
To configure and manage Kaspersky Anti-Virus, open the kavcontrolcenter.nsf database.
Rights to open the kavcontrolcenter.nsf database and configure and manage Kaspersky Anti-Virus are granted only to authorized users from one of the three functional groups: Security administrators, Control Center administrators, and Administrators with restricted privileges. Before opening the database, make sure that the user account is authorized to perform the required operations (create, delete, and configure profiles, configure servers, etc.).
The kavcontrolcenter.nsf can be opened on any protected server using a Lotus Notes client or web browser.
By default, changes to the profile and server settings are made to the database replica on the server which is connected. During the replication process, any changes are distributed to all other protected servers. There may be some delay before the new settings are applied. For this reason, the topology of the replications should be taken into account when selecting the server on which to configure the settings.
If you are using Kaspersky Anti-Virus through a Lotus Notes client, changes to the settings can be made to the Control Center database replica located on the server whose settings you are editing, regardless of which server is connected. In this case, the new server settings are applied much faster. When a browser is used, this option is not supported and changes to the server settings are always made to the open replica.
The Control Center database can be opened from several workstations or in parallel via a web browser or Lotus Notes client. In such case, a conflict in the replications could occur if the settings of a profile or server are modified by two or more users simultaneously. In addition, it is not advised to modify the server settings and the settings of the profile that contains the server. The server settings can be automatically redefined when the new profile settings are applied.