Applications and architecture of the on-premises solution

This guide contains information about features of the Select and Advanced editions of Kaspersky Endpoint Security for Business managed via the on-premises console and features of the Advanced edition of Kaspersky Endpoint Security for Business managed via the cloud console. For information about other editions, please refer to Online Help for the Kaspersky applications included in the solution.

Applications

Use the links to download the latest versions of the Kaspersky applications.

The solution consists of several Kaspersky applications:

• Kaspersky Security Center, which provides centralized management of the policies and tasks
• Kaspersky security applications installed on devices of an organization's network:
  • Kaspersky Endpoint Security for Windows, Kaspersky Endpoint Security for Mac, Kaspersky Endpoint Security for Linux
  • Kaspersky Security for Windows Server
  • Kaspersky Endpoint Agent as part of Kaspersky Endpoint Detection and Response Optimum
  • Kaspersky Security for Mobile

If you want to download and install an earlier version of an application, view the list of Kaspersky applications for business or contact the Kaspersky Technical Support.

For a full list of applications that can be managed through the Administration Server, refer to the Kaspersky Security Center documentation.

If you want to protect virtual or public cloud infrastructure, we recommend that you use Kaspersky Hybrid Cloud Security. A license for this solution is not included in Kaspersky Endpoint Security for Business and must be purchased separately.

The architecture of Kaspersky Endpoint Security for Business as an on-premises solution

The figure below shows architecture of Kaspersky Endpoint Security for Business managed via the on-premises solution and interaction between components of Kaspersky Security Center, client devices, and Kaspersky infrastructure. If your network contains hundreds or thousands of client devices, the scheme may include additional components, such as secondary administration servers or distribution points.

Architecture of Kaspersky Endpoint Security for Business managed via the on-premises solution

Kaspersky Endpoint Security for Business managed via the on-premises solution comprises the following main components:

• Administration Console (also referred to as Console). Provides a user interface to the administration services of Administration Server and Network Agent. Administration Console is implemented as a snap-in for Microsoft Management Console (MMC). Administration Console allows remote connection to Administration Server over the Internet.
• Kaspersky Security Center Web Console. Provides a web interface for creating and maintaining the protection system of a client organization's network that is managed by Kaspersky Security Center.
• Kaspersky Security Center Administration Server (also referred to as Server). Centralizes storage of information about applications installed on the organization's network and about how to manage them.
• KSN servers. Servers that contain a Kaspersky database with constantly updated information about the reputation of files, web resources, and software. Kaspersky Security Network ensures faster responses by Kaspersky applications to threats, improves the performance of some protection components, and reduces the likelihood of false positives.
• Kaspersky update servers. HTTP(S) servers at Kaspersky from which Kaspersky applications download database and application module updates.
• Client devices. Client company's devices protected by Kaspersky Endpoint Security for Business. Each device that has to be protected must have one of the Kaspersky security applications installed.