Connecting a Linux device as a gateway in the demilitarized zone

To connect a Linux device as a gateway in the demilitarized zone (DMZ):

  1. Download and install Network Agent on the Linux device.
  2. Run the post-install script and follow the wizard in order to setup the local environment configuration. In the command prompt, run the following command:

    $ sudo /opt/kaspersky/klnagent64/lib/bin/setup/postinstall.pl

  3. On the step asking for the Network Agent mode, choose the Use as connection gateway option.
  4. In MMC-based Administration Console, in the context menu of the Administration Server, select Properties.
  5. In the Administration Server properties window that opens, select the Distribution points section.
  6. In the Distribution points window that opens, in the right part of the window:
    1. Select the Manually assign distribution points option.
    2. Click the Add button.

    This opens the Add distribution point window.

  7. In the Add distribution point window, perform the following actions:
    1. Under Device to act as distribution point, click the down arrow () on the Select split button, and then select the Add connection gateway in DMZ by address option.
    2. Under Distribution point scope, click the down arrow () on the Select split button.
    3. Indicate the specific devices to which the distribution point will distribute updates. You can specify an administration group.
    4. Click OK to close the Add distribution point window.
  8. The distribution point that you have added will be displayed in the list of distribution points, in the Distribution points section.
  9. Run the klnagchk utility in order to check whether a connection to Kaspersky Security Center has been successfully configured. In the command prompt, run:

    $ sudo /opt/kaspersky/klnagent64/bin/klnagchk

  10. In the main menu, go to Kaspersky Security Center and discover the device.
  11. In the window that opens, click the <Device name>.
  12. In the drop-down list, select the Move to Group link.
  13. In the Select group window that opens, click the Distribution points link.
  14. Click OK.
  15. Restart the Network Agent service on the Linux client by executing the following command in the command prompt:

    $ sudo /opt/kaspersky/klnagent64/bin/klnagchk -restart

Connecting a Linux device as a gateway in the DMZ is completed.

After that, you can connect a Linux device to the Administration Server through the configured connection gateway. Follow these procedures only after you have completed the main installation scenario.

See also:

Scenario: Connecting out-of-office devices through a connection gateway
Page top