Enabling and disabling connection protection on a Light Agent

To encrypt the connection, you should configure the connection of Light Agents to the Integration Server.

You can enable or disable connection protection on Light Agents in one of the following ways:

• In Kaspersky Security Center Administration Console, in Light Agent for Windows policy properties and Light Agent for Linux policy properties.
• In the local interface of Light Agent for Windows.
• Using the Web Console when creating or modifying Light Agent for Windows policy settings or Light Agent for Linux policy settings (Application settings → Connection to SVM → Connection Protection).

This section describes how to configure the settings using the Administration Console and in Light Agent for Windows local interface.

To enable or disable connection protection on Light Agents in the Administration Console:

1. Open Kaspersky Security Center Administration Console.
2. In the Managed devices folder of the console tree, open the folder with the name of the administration group to which the relevant protected virtual machines belong.
3. In the workspace, select the Policies tab.
4. In the list of policies, select Light Agent for Windows policy to configure Light Agent for Windows settings, or Light Agent for Linux policy to configure Light Agent for Linux settings, and open the Settings: <Policy name> window by double-clicking it.
5. In the policy properties window, select the Connection protection section in the list on the left.
6. In the right part of the window, do one of the following:
   • If you want to enable encryption of the connection between Light Agents and SVMs, select the Encrypt data channel between Light Agent and SVMs check box. A Light Agent for which connection encryption is enabled can connect only to those SVMs on which the connection is encrypted. By default, connection encryption is disabled on Light Agents and SVMs.
   • If you want to disable encryption of the connection between Light Agents and SVMs, clear the Encrypt data channel between Light Agent and SVMs checkbox. A Light Agent whose connection encryption is disabled can connect to SVMs on which the connection is not encrypted or a non-secure connection is allowed.
7. Click the Apply button.

To enable or disable connection protection on Light Agent for Windows in the local interface:

1. Open the application settings window.
2. In the left part of the window, in the Connection to SVM section, select the Connection protection section.

   If the settings in the local interface are not available, this means that the values of settings defined by the policy are used for all protected virtual machines of the administration group.

3. Complete step 7 of the previous instructions.
4. To save changes, click the Save button.