Light Agent for Windows policy

You can use a Light Agent for Windows policy to configure the following application settings:

• Automatically starting the application on a virtual machine.
• Settings of the following control components:
  • Application Startup Control.
  • Application Privilege Control.
  • Device Control.
  • Web Control.
  • Integrity Monitoring.

  If you are using Kaspersky Security Center 10 Service Pack 2 Maintenance Release 1, by default the settings of control components cannot be configured in the New Policy Wizard. Only the settings of the Application Privilege Control component are available in the policy properties window. If you want to configure the settings of control components through the policy, you need to enable the display of control settings in the Kaspersky Security Center Administration Console interface settings.

• General anti-virus protection settings.
• Settings of the following protection components:
  • File Anti-Virus.
  • Mail Anti-Virus.
  • Web Anti-Virus.
  • Firewall.
  • Network Attack Blocker.
  • System Watcher.
• Settings for connecting Light Agents to SVMs and the Integration Server:
  • Settings for discovering SVMs running in the network, and for receiving information about them.
  • Settings for connecting Light Agents to the Integration Server. You must configure a connection if you are using the Integration Server to receive information about SVMs running in the network, and if you are using tags for connecting Light Agents to SVMs.
  • Using tags for connecting to SVMs.
  • Settings for encrypting the connection between Light Agents and SVM.
  • Algorithm used by Light Agents when selecting SVMs.

  All settings for connecting Light Agents to SVMs and to the Integration Server, except SVM discovery settings, cannot be configured when creating a policy for Light Agent for Windows. You can configure these settings in the policy properties window.

• Additional settings of the application:
  • Application Self-Defense settings.
  • Settings for managing local and group tasks (except for the custom scan task) through the local interface.
  • Scan mode when the virtual machine is idle.
  • Settings for scanning removable drives on the virtual machine.
  • Settings for reports and Backup.
  • Settings for interaction between the Light Agent local interface and the user.
  • Settings for protecting access to application features and settings in the local interface.
  • Notification settings in the local interface regarding events occurring during Light Agent operation.

For information about configuring general policy settings and event settings, please refer to the Kaspersky Security Center documentation.

The user of a protected virtual machine can also configure the settings of the Light Agent for Windows policy in the local interface of the application, if this is not blocked by the policy.

The capability to locally edit an application setting on a protected virtual machine is determined by the "lock" status:

• When a setting is "locked" (), the user cannot edit the setting locally, and the policy-defined setting is applied to all protected virtual machines within the administration group.
• When a setting is "unlocked" (), the user can edit the setting locally on each protected virtual machine within the administration group.

In this section: Configuring the display of control settings in the Kaspersky Security Center Administration Console Creating a Light Agent for Windows policy Editing settings of the Light Agent for Windows policy

Page top