Using virtual routing and forwarding tables for system services

You can configure the use of a virtual routing and forwarding table when building a route to the following system services of Kaspersky NGFW:

• UPDATER, the local database update service
• KSN, cloud services for data scanning
• KATA, the KATA solution
• Licensing server
• Certificate verification service
• Service for interacting with external systems via ICAP

You can assign a virtual routing and forwarding table for building routes to system services locally on a Kaspersky NGFW device or in a network template used by multiple devices.

To assign a routing and forwarding table for system services:

1. In the main menu of the Open Single Management Platform Console, go to the Application & Services → NGFW section.
2. Manage system service settings in one of the following ways:
   • If you want to manage system service settings in a device template, in the menu, select the Network templates tab, click the device template, and select the System → Services section.
   • If you want to manage system service settings on a Kaspersky NGFW device, select the Devices tab in the menu, click a Kaspersky NGFW device, select the System → Services section, and enable the Override toggle switch.
3. In the VRF drop-down list, select the custom routing and forwarding table that you want to use for building routes to system services.

   By default, the Management virtual routing and forwarding table is used for access to these services.

4. Save the settings of the network template or device.
5. Apply the OSMP policy changes by clicking the Commit and push button.

You can also configure a custom virtual routing and forwarding table for these services using the vrf command from the system services family of commands. For a description of command families and a link to the complete list of Kaspersky NGFW configuration commands, see the Managing Kaspersky NGFW using the command line document.

Page top