Kaspersky Security for Virtualization 6.2 Light Agent has the following new features:
The Kaspersky Security solution includes a new version of the Integration Server designed to be installed on a device with the Linux operating system (hereinafter also referred to as the "Linux-based Integration Server"). Now you can use the Windows-based Integration Server or the Linux-based Integration Server, depending on your infrastructure.
In the new version of Kaspersky Security, you can use Integration Server Web Console to manage the Integration Server. The web console is available in Kaspersky Security Center Web Console after installing the Integration Server web plug-in. Web Console and Integration Server Console implement the same functions for managing the Integration Server. Using Integration Server Web Console, you can:
configure the list of virtual infrastructures to which the Integration Server connects
deploy, remove, or reconfigure SVMs
view information about SVMs that are connected to the Integration Server
change passwords of accounts that are used to connect to the Integration Server
view the list of tenants registered in the Integration Server database and configure the connection settings required for interaction between the Integration Server REST API and Kaspersky Security Center Administration Server
Integration Server Web Console lets you manage the Windows-based Integration Server and the Linux-based Integration Server.
You can now select the versions of Light Agents for which the Protection Server will receive updates of application databases and modules. You can reduce traffic by downloading updates to SVMs only for those versions of Light Agents that work in your infrastructure.
For virtual infrastructure on the VK Cloud platform, you can now use the Integration Server while deploying and operating the Kaspersky Security solution. You can configure a connection to this infrastructure and manage SVMs through Integration Server Console or Integration Server Web Console. You can use the Integration Server to detect SVMs using Light Agents.
You can now protect virtual infrastructures based on the Basis platform.
You can now protect virtual infrastructures on the R-Virtualization server virtualization system.
Some limitations apply to the installation and operation of the application in a virtual infrastructure based on the ROSA Virtualization platform. Please refer to the Knowledge Base for details.
As its Light Agent for Windows, the solution uses Kaspersky Endpoint Security for Windows 12.8 or 12.9, which provides expanded functionality for protecting virtual machines with Windows guest operating systems (compared to Light Agent for Windows 5.2). The following functions are now available in the solution:
BadUSB Attack Prevention.
Log Inspection.
Intrusion Prevention (instead of Application Control functionality).
Behavior Detection, Exploit Prevention and Remediation Engine (instead of System Monitoring functionality).
Ability to integrate with the following Kaspersky solutions:
Kaspersky Managed Detection and Response The solution automatically detects and analyzes security incidents in your infrastructure and sends incident data to Kaspersky experts. These experts can then handle the incident themselves or provide recommendations for handling the incident.
Kaspersky Endpoint Detection and Response Optimum The solution is designed to protect an organization's IT infrastructure from advanced threats.
Components of the Kaspersky Anti Targeted Attack Platform solution (Endpoint Detection and Response (KATA), Network Detection and Response (KATA), KATA Sandbox) The solution is designed for early detection of complex threats, such as targeted attacks, advanced persistent threats (APT), zero-day attacks and others.
Kaspersky Sandbox The solution analyzes the behavior of objects to identify malicious activity and signs of targeted attacks on the organization's IT infrastructure, and automatically blocks advanced threats on devices.
Kaspersky Unified Monitoring and Analysis Platform (KUMA) A SIEM solution for managing security information and security events in an organization's IT infrastructure. KUMA lets you detect, analyze and eliminate security threats before they can harm your organization.
Kaspersky Endpoint Security for Windows 12.9 has a new tool, Temporary password monitoring. A temporary password lets you grant access to Kaspersky Endpoint Security for Windows application with Password protection enabled for an individual device. Temporary password monitoring lets you save password history (up to 30 days), monitor the status of the temporary password (Active, Expired, Revoked), and revoke temporary passwords.
The following limitations exist running Kaspersky Endpoint Security for Windows in Light Agent mode:
Data encryption components and Adaptive Anomaly Control are not available.
The built-in EDR Expert agent does not work in Light Agent mode.
The solution uses Kaspersky Endpoint Security for Linux 12.2 as the Light Agent for Linux. The new version of the application implements the ability to integrate with Kaspersky Unified Monitoring and Analysis Platform and with components of the Kaspersky Anti Targeted Attack Platform solution: Kaspersky Network Detection and Response (KATA) and KATA Sandbox. For the full list of improvements relative to the previous version of the application, see the Kaspersky Endpoint Security for Linux Help of the relevant version.
We added support for new licenses under which you can use the Kaspersky Security solution.