Configuring SVM discovery settings

Support

Support for business applications

Kaspersky Security for Virtualization 6.0 Light Agent

Connecting Light Agents to SVMs

Configuring SVM discovery settings

January 25, 2024

ID 254887

You can configure SVM discovery settings via Light Agents for Linux in the Light Agent policy using Kaspersky Security Center Administration Console or Kaspersky Security Center Web Console.

Expand all | Collapse all

How to configure SVM discovery settings in Kaspersky Security Center Administration Console

In the Kaspersky Security Center Administration Console tree, in the Managed devices folder, select the administration group containing the virtual machine with the Light Agent whose settings you want to configure.
In the workspace, select the Policies tab.
Select a Kaspersky Endpoint Security policy in the list of policies and double-click to open the Properties: <Policy name> window.
In the policy properties window, select the SVM discovery settings section in the list on the left.
In the right part of the window, select the method that Light Agents use to detect SVMs:
- Use Integration Server
  If this option is selected, Light Agent connects to Integration Server to get a list of SVMs available for connection and their details.
  
  If you want to use the Integration Server, configure the settings for connecting Light Agents to the Integration Server.
- Use a custom list of SVM addresses
  If this option is selected, you can specify the list of SVMs to which Light Agents managed by the specified policy can connect. Light Agents will connect only to the SVMs specified in the list.
If you select the Use a custom list of SVM addresses option, the Light Agent is using the advanced SVM selection algorithm, and large infrastructure protection mode is enabled on an SVM, then connecting a Light Agent to this SVM is only possible if the SVM path is ignored. In the SVM selection algorithm section, you need to set the SVM path setting to Ignore SVM path.
If the Use a custom list of SVM addresses option is selected, create a list of SVMs. To do this, perform the following actions:
1. Click the Add button located above the list of SVM addresses.
  The SVM addresses window opens.
2. Enter the IP address in IPv4 format or the fully qualified domain name (FQDN) of the SVM to which Light Agents managed by the policy can connect. You can enter several IP addresses or full domain names of the SVMs by typing them from a new line.
  In the list of SVM addresses, specify only full domain names (FQDN) that are matched by a single IP address. Using a fully qualified domain name that corresponds to multiple IP addresses can lead to errors in the solution.
3. In the SVM addresses window, click OK.
  The specified addresses and fully qualified domain names of SVMs are checked. If some addresses or names are not recognized, a relevant message with the number of addresses or names that have not been recognized appears in a separate window. Recognized addresses and fully qualified domain names appear in the list of addresses of SVMs.
4. To remove an IP address or fully qualified domain name of an SVM from the list, select it in the list and click the Delete button above the list.
Click the Apply button.

How to configure SVM discovery settings in Kaspersky Security Center Web Console

In the main window of Kaspersky Security Center Web Console, select Devices → Policies and policy profiles.
A list of policies opens.
Select the administration group containing the virtual machine with the Light Agent whose settings you want to configure. To do so, click the link in the Current path field located above the list of policies and policy profiles, and select an administration group in the window that opens.
The list displays only the policies configured for the selected administration group.
Click on the name of the Kaspersky Endpoint Security for Linux policy in the list.
In the policy properties window that opens, select the Application settings tab and go to Light Agent mode → SVM discovery settings.
Select the SVM discovery method used by Light Agents:
- Use Integration Server
  If this option is selected, Light Agent connects to Integration Server to get a list of SVMs available for connection and their details.
  
  If you want to use the Integration Server, configure the settings for connecting Light Agents to the Integration Server.
- Use a custom list of SVM addresses
  If this option is selected, you can specify the list of SVMs to which Light Agents managed by the specified policy can connect. Light Agents will connect only to the SVMs specified in the list.
  
  If you select the Use a custom list of SVM addresses option, the Light Agent is using the advanced SVM selection algorithm, and large infrastructure protection mode is enabled on an SVM, then connecting a Light Agent to this SVM is only possible if the SVM path is ignored. In the SVM selection algorithm section, you need to set the SVM path setting to Ignore SVM path.
If the Use a custom list of SVM addresses option is selected, create a list of SVMs. To do this, perform the following actions:
1. Click the Add button located above the list of SVM addresses.
  The SVM addresses window opens.
2. Enter the IP address in IPv4 format or the fully qualified domain name (FQDN) of the SVM to which Light Agents managed by the policy can connect. You can enter several IP addresses or full domain names of the SVMs by typing them from a new line.
  In the list of SVM addresses, specify only full domain names (FQDN) that are matched by a single IP address. Using a fully qualified domain name that corresponds to multiple IP addresses can lead to errors in the solution.
3. In the SVM addresses window, click OK.
  The specified addresses and fully qualified domain names of SVMs are checked. If some addresses or names are not recognized, a relevant message with the number of addresses or names that have not been recognized appears in a separate window. Recognized addresses and fully qualified domain names appear in the list of addresses of SVMs.
4. To remove an IP address or fully qualified domain name of an SVM from the list, select it in the list and click the Delete button above the list.
Click the Save button.

In a large-sized virtual infrastructure running the TIONIX Cloud Platform or OpenStack platform, if you selected the Use Integration Server option, you can configure the size of the available SVMs list that the Integration Server relays to Light Agents.

To configure the size of the list of available SVMs:

Open the Integration Server configuration file %ProgramFiles(x86)%\Kaspersky VIISLA\viislaservice.exe.config for editing.
Configure value of the OpenStackMaxSvmCountToReturn parameter:
- If you want to limit the size of available SVM list, which the Integration Server transmits to Light Agents, then specify number of SVMs, whose information must be included into this list.
- If you want the Integration Server to transfer full list of available SVMs to Light Agents, specify a value of 0.
Save the viislaservice.exe.config file.
Restart the Integration Server.

Kaspersky Professional Services

Implementation services. Health check and security system configuration. Contact us if you need expert help.

Kaspersky Premium Support (MSA): High‑priority incident processing

Telephone and web ticket support. Fast response, monitoring and health check. Submit a request and activate the contract (MSA).

Did you find this article helpful?

What can we do better?

Thank you for your feedback! You're helping us improve.