Scenario: Installation and initial setup of Kaspersky Security Center Web Console
Nov 27, 2023
This scenario describes how to install Kaspersky Security Center Administration Server and Kaspersky Security Center Web Console, perform initial setup of the Administration Server by using the quick start wizard, and install Kaspersky applications on managed devices by using the Protection deployment wizard.
Installation and initial setup of Kaspersky Security Center Web Console proceeds in stages:
- Installing a database management system (DBMS)
Install the DBMS that will be used by Kaspersky Security Center or use an existing one.
- Installing Administration Server, Administration Console, Network Agent
Administration Console and the server version of Network Agent are installed together with Administration Server.
During the installation of Kaspersky Security Center Administration Server, specify whether you want to install Kaspersky Security Center Web Console on the same device. If you choose to install both components on the same device, you do not have to install Kaspersky Security Center Web Console separately, because it is installed automatically. If you want to install Kaspersky Security Center Web Console on a different device, then, after installing Kaspersky Security Center Administration Server, proceed to installing Kaspersky Security Center Web Console.
- Installing Kaspersky Security Center Web Console
If you did not choose to install Kaspersky Security Center Web Console together with the Kaspersky Security Center Administration Server on the previous step, install Kaspersky Security Center Web Console separately. You can install Kaspersky Security Center Web Console on a different device or the same device where Administration Server is installed.
- Performing initial setup
When Administration Server installation is complete, at the first connection to the Administration Server the quick start wizard starts automatically. Perform initial configuration of Administration Server according to the existing requirements. During the initial configuration stage, the wizard uses the default settings to create the policies and tasks that are required for protection deployment. However, the default settings may be less than optimal for the needs of your organization. If necessary, you can edit the settings of policies and tasks.
- Licensing of Kaspersky Security Center (optional)
Kaspersky Security Center with support of Administration Console basic functionality does not require a license. You need a commercial license if you want to use one or several of the additional features, including Vulnerability and patch management, Mobile Device Management, and Integration with the SIEM systems. You can add a key file or activation code for these features at the corresponding step of the quick start wizard or manually.
- Discovery of networked devices
This stage is handled by the quick start wizard. You can also discover the devices manually. Kaspersky Security Center receives the addresses and names of all devices detected on the network. You can then use Kaspersky Security Center to install Kaspersky applications and software from other vendors on the detected devices. Kaspersky Security Center regularly starts device discovery, which means that if any new instances appear on the network, they will be detected automatically.
- Arranging devices into administration groups
This stage is handled by the quick start wizard, but you can also move the detected devices into groups manually.
- Installing Network Agent and security applications on networked devices
Deployment of protection on an enterprise network entails installation of Network Agent and security applications (for example, Kaspersky Endpoint Security for Windows) on devices that have been detected by Administration Server during the device discovery.
To install the applications remotely, run the Protection deployment wizard.
Security applications protect devices against viruses and other programs that pose a threat. Network Agent ensures communication between the device and Administration Server. Network Agent settings are configured automatically by default.
Before you start installing Network Agent and the security applications on networked devices, make sure that these devices are accessible (turned on).
- Deploying license keys to client devices
Deploy license keys to client devices to activate managed security applications on those devices.
- Installing Kaspersky Security for Mobile (optional)
If you plan to manage corporate mobile devices, follow the instructions provided in the Kaspersky Security for Mobile Help for information about deployment of Kaspersky Endpoint Security for Android.
- Configuring Kaspersky application policies
To apply different application settings to different devices you can use device-centric security management and/or user-centric security management. Device-centric security management can be implemented by using policies and tasks. You can apply tasks only to those devices that meet specific conditions. To set the conditions for filtering devices, use device selections and tags.
- Monitoring the network protection status
You can monitor your network by using widgets on the dashboard, generate reports from Kaspersky applications, configure and view selections of events received from the applications on the managed devices, and view notification lists.