Sources and scenarios for updates

An update source is a resource that contains updates for Kaspersky Endpoint Security databases and application modules. Update sources can be FTP, HTTP, or HTTPS servers (such as Kaspersky update servers), as well as local or network directories mounted by the user.

If Kaspersky Endpoint Security is used in Light Agent mode to protect virtual environments, the databases on the protected virtual machines are updated from the directory on the SVM.

The main application update sources are Kaspersky update servers. You can specify other update sources in the Update task settings. If an update cannot be performed from an update source, Kaspersky Endpoint Security switches to the next update source.

Kaspersky Endpoint Security supports the following scenarios for updating databases and application modules:

• Update from Kaspersky update servers. Kaspersky update servers are located in different countries around the world, which ensures a high reliability of updates. If an update cannot be performed from one server, the application switches over to the next server. Updates are downloaded via HTTPS protocol.
• Centralized update Centralized update reduces external Internet traffic, and provides for convenient monitoring of the update.

  Centralized update consists of the following steps:

  1. Download the update package to a repository within the organization's network.

     You can use the repository of the Kaspersky Security Center Administration Server as the repository.

     The update package is downloaded to the Administration Server repository via the Download updates to Administration Server repository task of the Administration Server.

     If you manage the application using Kaspersky Security Center Cloud Console, you can use the repositories of the distribution points (devices with Network Agent installed) as the repository. For more details about distribution points, refer to Kaspersky Security Center Help.

  2. Distribute the update package to client devices

     The update package is distributed to the client devices by the Update task of Kaspersky Endpoint Security. In the task settings, select the Kaspersky Security Center Administration Server as the update source.

• Updating from a local or network directory (SMB/NFS) mounted by a user, or from an FTP, HTTP, or HTTPS server. You can specify a custom update source in Update task settings.