Adding and connecting a sensor using the sensor web interface

Expand all | Collapse all

After installation and initial configuration of the Kaspersky Industrial CyberSecurity for Networks Server, you can add sensors to the application. Sensors are added on the Server web interface page.

To add a sensor on a computer, the corresponding packages must be installed from the application distribution kit. You can use the application components centralized installation script or local installation script to install these packages.

When adding a sensor, a configuration package containing a certificate and configuration data for the sensor is generated on the Server. The added sensor is connected by using the sensor web interface. The sensor web interface lets you download the configuration package and connect the sensor using the following methods:

• Use a communication data package. When using this method, the configuration package is saved a file with password-protected certificate. This file is known as the communication data package. The communication data package must be securely delivered to a computer that can access the sensor computer over the network, and must then be downloaded on the sensor web interface page. After the communication data package is downloaded, the sensor is automatically connected to the Server on which this file was created.

  Using a communication data package to add and connect a sensor

  1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
  2. Select Settings → Deployment.
  3. Click the Add sensor button.

     The details area appears in the right part of the web interface window.

  4. On the Use a file tab:
     1. Enter the sensor name that will represent the sensor within Kaspersky Industrial CyberSecurity for Networks.

        The sensor name must be unique (not match the names of other sensors or the Server) and must contain no more than 100 characters. You can use letters of the English alphabet, numerals, a space, and the following special characters: _ and - (for example, Sensor_1). The sensor name must begin and end with any permitted character except a space.

     2. Enter the Server IP address that the sensor will use to connect to the Server.
     3. Enter the IP address used by the web server on the sensor computer.
     4. Enter password for protecting the certificate in the communication data package.

        The password must meet the following requirements:

        • Must contain between 8 and 256 ASCII characters (in Kaspersky Industrial CyberSecurity for Networks version 4.0) or between 12 and 256 ASCII characters (in Kaspersky Industrial CyberSecurity for Networks version 4.0.1).
        • Must contain one or more uppercase letters of the English alphabet.
        • Must contain one or more lowercase letters of the Latin alphabet.
        • Must contain one or more numerals.
        • Must contain no more than three consecutive repeated characters.
  5. Click the Create communication data package button.

     Your browser will save the downloaded file. Depending on your browser settings, your screen may show a window in which you can change the path and name of the saved file.

  6. Connect to the sensor through the web interface.
  7. On the sensor web interface page, click the Select file button.

     This opens the standard browser window for selecting a file.

  8. Specify the path to the communication data package.
  9. Click the button for opening the file.
  10. After downloading the contents of the file, enter the password for accessing the sensor certificate in the communication data package.

  The sensor will connect to the Server, then information about the connection will be displayed on the Server and sensor web interface pages.

• Automatically over the network. This method lets you forward a configuration package over the network to the specified IP address of the sensor computer. The sensor processes the configuration package, uses it to generate a certificate signing request (CSR), and sends this request to the Server. After receiving the request, the Server web interface page displays the fingerprint of the received request as a sequence of characters. This same request fingerprint is also displayed on the sensor web interface page at the same time. You must make sure that these fingerprints are identical before completing the addition of the sensor.

  Adding and connecting a sensor automatically over the network

  1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
  2. Select Settings → Deployment.
  3. Click the Add sensor button.

     The details area appears in the right part of the web interface window.

  4. On the Automatically over the network tab:
     1. Enter the sensor name that will represent the sensor within Kaspersky Industrial CyberSecurity for Networks.

        The sensor name must be unique (not match the names of other sensors or the Server) and must contain no more than 100 characters. You can use letters of the English alphabet, numerals, a space, and the following special characters: _ and - (for example, Sensor_1). The sensor name must begin and end with any permitted character except a space.

     2. Enter the Server IP address that the sensor will use to connect to the Server.
     3. Enter the IP address used by the web server on the sensor computer.
  5. Click the Connect and add sensor button.

     The application will establish a connection with the sensor computer, then the Server web interface page will show a prompt to confirm the received fingerprint for the certificate signing request.

  6. Connect to the sensor through the web interface.

     The sensor web interface page will show a message containing information about the certificate request fingerprint that was sent to the Server.

  7. Make sure that the sequences of characters representing the certificate request fingerprint are identical on the web interface pages of the sensor and Server.
  8. On the Server web interface page, click the button to confirm the received certificate request fingerprint.

  The sensor will connect to the Server, then information about the connection will be displayed on the Server and sensor web interface pages.