Configuring connection protection on the Protection Server

Support

Support for business applications

Kaspersky Security for Virtualization 6.0 Light Agent

Connecting Light Agents to SVMs

Protecting the connection between the Light Agent and the Protection Server

Configuring connection protection on the Protection Server

January 25, 2024

ID 254959

You can configure connection protection on SVMs in the Protection Server policy using Kaspersky Security Center Administration Console or Kaspersky Security Center Web Console.

Expand all | Collapse all

How to configure connection protection on SVMs in Kaspersky Security Center Administration Console

In the Kaspersky Security Center Administration Console tree, in the Managed devices folder, select the administration group containing the SVM with the Protection Server whose settings you want to configure.
In the workspace, select the Policies tab.
Select a Protection Server policy in the list of policies and right-click to open the Properties: <Policy name> window.
In the policy properties window, select the Connection protection section in the list on the left.
In the right part of the window, configure the following settings:
- Encrypt data channel between Light Agent and the Protection Server
  Encrypt the connection between Light Agents and Protection Servers.
  
  If the check box is selected, a secure connection is established between the Light Agent and the policy-controlled Protection Server after the Light Agent connects to the SVM with this Protection Server. A Light Agent can connect to an SVM that has connection protection enabled only if the Light Agent also has connection protection enabled or the SVM allows unsecure connections.
  
  If the check box is cleared, an unsecure connection is established between the Light Agent and the Protection Server after the Light Agent connects to the SVM with this Protection Server.
  
  This check box is cleared by default.
- Allow nonsecure connection if secure connection cannot be established
  Allow an unsecure connection between Light Agents and Protection Servers.
  
  If the check box is selected, an unsecure connection may be established between Light Agents and policy-controlled Protection Servers if a secure connection cannot be established.
  
  If the check box is cleared, only a secure connection can be established between Light Agents and policy-controlled Protection Servers. A Light Agent will not be able to connect to the SVM if a secure connection cannot be established to the Protection Server on this SVM.
  
  This check box is cleared by default.
Only Light Agents for which connection protection is configured will connect to SVMs with a Protection Server managed by this policy.
Click the Apply button.

How to configure connection protection on SVMs in Kaspersky Security Center Web Console

In the main window of Kaspersky Security Center Web Console, select Devices → Policies and policy profiles.
A list of policies opens.
Select the administration group containing the SVM with the Protection Server whose settings you want to configure. To do so, click the link in the Current path field located above the list of policies and policy profiles, and select an administration group in the window that opens.
The list displays only the policies configured for the selected administration group.
Click on the name of the desired policy in the list.
In the policy properties window that opens, select the Application settings tab and go to the Connection protection section.
In the right part of the window, configure the following settings:
- Encrypt data channel between Light Agent and the Protection Server
  Encrypt the connection between Light Agents and Protection Servers.
  
  If the check box is selected, a secure connection is established between the Light Agent and the policy-controlled Protection Server after the Light Agent connects to the SVM with this Protection Server. A Light Agent can connect to an SVM that has connection protection enabled only if the Light Agent also has connection protection enabled or the SVM allows unsecure connections.
  
  If the check box is cleared, an unsecure connection is established between the Light Agent and the Protection Server after the Light Agent connects to the SVM with this Protection Server.
  
  This check box is cleared by default.
- Allow nonsecure connection if secure connection cannot be established
  Allow an unsecure connection between Light Agents and Protection Servers.
  
  If the check box is selected, an unsecure connection may be established between Light Agents and policy-controlled Protection Servers if a secure connection cannot be established.
  
  If the check box is cleared, only a secure connection can be established between Light Agents and policy-controlled Protection Servers. A Light Agent will not be able to connect to the SVM if a secure connection cannot be established to the Protection Server on this SVM.
  
  This check box is cleared by default.
Only Light Agents for which connection protection is configured will connect to SVMs with Protection Servers managed by this policy.
Click the Save button.

Kaspersky Professional Services

Implementation services. Health check and security system configuration. Contact us if you need expert help.

Kaspersky Premium Support (MSA): High‑priority incident processing

Telephone and web ticket support. Fast response, monitoring and health check. Submit a request and activate the contract (MSA).

Did you find this article helpful?

What can we do better?

Thank you for your feedback! You're helping us improve.