Kaspersky Industrial CyberSecurity for Networks

Installing a Server and external sensors

March 22, 2024

ID 206299

When installing a Server with external sensors, multiple computers can be used for installing application components. The Server is installed on one of the computers. The sensors that will receive data from computer networks are installed on the other computers. The application can use up to 32 sensors in Kaspersky Industrial CyberSecurity for Networks version 4.0 and up to 50 sensors in Kaspersky Industrial CyberSecurity for Networks version 4.0.1.

To receive traffic from the industrial network, you must add monitoring points to computers:

  • No more than 8 monitoring points on a sensor
  • No more than 4 monitoring points on the Server
  • The application can use no more than 32 monitoring points in Kaspersky Industrial CyberSecurity for Networks version 4.0 and no more than 50 monitoring points in Kaspersky Industrial CyberSecurity for Networks version 4.0.1.

Monitoring points must be added to those network interfaces that will receive traffic from segments of the industrial network. A computer must have one network interface per each monitoring point.

Computers must also have separate network interfaces that will be used for the following purposes:

  • Connection with the Server (on computers that perform sensor functions)
  • Connection with other computers through the web interface
  • Receipt of data from EPP applications
  • Connection through connectors.

For these purposes, each computer can use either multiple separate network interfaces or one shared network interface. There must be no monitoring points on these network interfaces.

The figure below shows an example scenario for deploying a Server and three sensors. The network interfaces of computers that perform sensor functions are connected to the SPAN ports of network switches (SPAN ports and connections are marked yellow) and receive a copy of traffic from their respective segments of the industrial network. The dedicated Kaspersky Industrial CyberSecurity network is designated by green lines.

Example deployment of a Server and three sensors

Example deployment of a Server and three sensors

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.