Disabling transmission of patches and installation of updates in an isolated network
You can disable the transmission of patches to isolated Administration Servers, for example, if you decide to take one or more Administration Servers out of an isolated network. Thus, you can reduce the number of patches and the time to download them.
To disable transmission of patches to isolated Administration Servers:
- If you want to remove all Administration Servers from isolation, in the properties of the Administration Server with internet access, delete the paths to the folders intended for patches and the list of required updates. If you want to keep specific Administration Servers within an isolated network, skip this step.
Run the command line, and then change your current directory to the directory with the klscflag utility. The klscflag utility is located in the directory where the Administration Server is installed. The default installation path is /opt/kaspersky/ksc64/sbin.
Run the following commands in the command line:
- To delete the path to the folder for patches:
klscflag -fset -pv klserver -n VAPM_DATA_EXPORT_PATH -t s -v ""
- To delete the path to the folder for the list of required updates:
klscflag -fset -pv klserver -n VAPM_REQ_IMPORT_PATH -t s -v ""
- To delete the path to the folder for patches:
- Restart service on the Administration Server with internet access if you deleted the paths to the folders.
- In the properties of each isolated Administration Server that you want to remove from the isolated network, delete the paths to the folders for patches and the list of required updates.
Run the following commands in the command line under an account with root privileges:
- To delete the path to the folder for patches:
klscflag -fset -pv klserver -n VAPM_DATA_IMPORT_PATH -t s -v ""
- To delete the path to the folder for the list of required updates:
klscflag -fset -pv klserver -n VAPM_REQ_EXPORT_PATH -t s -v ""
- To delete the path to the folder for patches:
- Restart the service of each Administration Server on which you deleted the paths to the folders.
If you reconfigured the Administration Server with internet access, patches will no longer be transmitted via Kaspersky Security Center Linux.
If you reconfigured only specific Administration Servers and removed them from the isolated network, they will no longer receive patches via Kaspersky Security Center Linux. Only those Administration Servers that remain within the isolated network will continue to receive patches.
If you want to start fixing vulnerabilities on disabled isolated Administration Servers in the future, you have to configure these Administration Servers and the Administration Server with internet access once again.
