Scenario: Kaspersky applications deployment
This scenario explains how to deploy Kaspersky applications through Kaspersky Security Center Web Console. You can use the quick start wizard and Protection deployment wizard, or you can complete all necessary steps manually.
The following applications are available for deployment by using Kaspersky Security Center Web Console:
- Kaspersky Endpoint Security for Linux
- Kaspersky Endpoint Security for Windows
Stages
Kaspersky applications deployment proceeds in stages:
- Downloading management web plug-in for the application
This stage is handled by the quick start wizard. If you choose not to run the wizard, download the plug-ins manually.
- Downloading and creating installation packages
This stage is handled by the quick start wizard.
The quick start wizard allows you to download the installation package with the management web plug-in. If you did not select this option when running the wizard, or if you did not run the wizard at all, you must download the package manually.
If you cannot install Kaspersky applications by means of Kaspersky Security Center Linux on some devices, for example, on remote employees' devices, you can create stand-alone installation packages for applications. If you use stand-alone packages to install Kaspersky applications, you do not have to create and run a remote installation task, nor create and configure tasks for Kaspersky Endpoint Security for Windows.
Alternatively, you can download the distribution packages for Network Agent and security applications from the Kaspersky website. If the remote installation of the applications is not possible for some reason, you can use the downloaded distribution packages to install the applications locally.
- Creating, configuring, and running the remote installation task
This step is part of the Protection deployment wizard. If you choose not to run the Protection deployment wizard, you must create this task manually and configure it manually.
You also can manually create several remote installation tasks for different administration groups or different device selections. You can deploy different versions of one application in these tasks.
Make sure that all the devices on your network are discovered; then run the remote installation task (or tasks).
If you want to install Network Agent on devices with the SUSE Linux Enterprise Server 15 operating system, install the insserv-compat package first to configure Network Agent.
If you want to install Network Agent on devices with the operating system RED OS 7.3.4 or later, install the libxcrypt-compat package for the correct function of Network Agent.
- Creating and configuring tasks
The Update task of Kaspersky Endpoint Security must be configured.
This step is part of the quick start wizard: the task is created and configured automatically with the default settings. If you did not run the wizard, you must create this task manually and configure it manually. If you use the quick start wizard, make sure that the schedule for the task meets your requirements. (By default, the scheduled start for the task is set to Manually, but you might want to choose another option.)
- Creating policies
Create the policy for Kaspersky Endpoint Security manually or through the quick start wizard. You can use the default settings of the policy; you can also modify the default settings of the policy according to your needs at any time.
- Verifying the results
Make sure that deployment was completed successfully: you have policies and tasks for each application, and these applications are installed on the managed devices.
Results
Completion of the scenario yields the following:
- All required policies and tasks for the selected applications are created.
- The schedules of tasks are configured according to your needs.
- The selected applications are deployed, or scheduled to be deployed, on the selected client devices.