Commercial release of Kaspersky Endpoint Security 11.1.0 for Linux (version 11.1.0.3013)
Kaspersky Endpoint Security 11.1.0 for Linux was released on April 13, 2020. Full version number is 11.1.0.3013.
Kaspersky Endpoint Security 11 for Linux is designed to provide anti-virus protection for file servers and workstations running Linux operating systems.
What's new
- On August 6, 2020, Kaspersky Security Center Web Console has been introduced for managing the application via web plugin and notifications about managed devices in Kaspersky Security Center plug-ins.
- Managing connected devices with time and user limitations through Samba Active Directory and Microsoft Active Directory in the Device_Control task is now supported.
Installation
For 32-bit operating systems:
- For systems using RPM:
rpm -i kesl-11.1.0.3013.i386.rpm
/opt/kaspersky/kesl/bin/kesl-setup.pl
rpm -i klnagent-11.0.1-19.i386.rpm
/opt/kaspersky/klnagent/lib/bin/setup/postinstall.pl
- For systems using dpkg:
dpkg -i kesl_11.1.0.3013_i386.deb
/opt/kaspersky/kesl/bin/kesl-setup.pl
dpkg -i klnagent_11.0.1-19_i386.deb
/opt/kaspersky/klnagent/lib/bin/setup/postinstall.pl
For 64-bit operating systems:
- For systems using RPM:
rpm -i kesl-11.1.0.3013.x86_64.rpm
/opt/kaspersky/kesl/bin/kesl-setup.pl
rpm -i klnagent64-11.0.0-38.x86_64.rpm
/opt/kaspersky/klnagent/lib/bin/setup/postinstall.pl
- For systems using dpkg:
dpkg -i kesl_11.1.0.3013_amd64.deb
/opt/kaspersky/kesl/bin/kesl-setup.pl
dpkg -i klnagent64_11.0.0-38_amd64.deb
/opt/kaspersky/klnagent/lib/bin/setup/postinstall.pl
After updating, Kaspersky Endpoint Security 11.1.0 for Linux is started, even if it was stopped before the update process.
Known issues and solutions
- Anti-Cryptor works with SMB1, SMB2, SMB3, and NFS3 protocols.
- If you disable Kaspersky Endpoint Security 11.1.0 for Linux in operating systems of the Red Hat® Enterprise Linux® 7.3 family when working with NFS4, the product might not actually be disabled. Possible solution: Configure the network partitions to use NFS3.
- If Kaspersky Endpoint Security 11.1.0 for Linux is running in operating systems of the Red Hat® Enterprise Linux® 7.2 family, files larger than 2 GB may be blocked. Possible solution: Upgrade the operating system to Red Hat® Enterprise Linux® 7.3 and later.
- If Kaspersky Endpoint Security 11.1.0 for Linux is running in operating systems of the Red Hat® Enterprise Linux® 7 family and CIFS (SMB1) is being used, files on remote network partitions may take a long time to be created. Possible solution: Switch to SMB2 protocol and disable CIFS oplock.
- If a network connection is disrupted while remote network partitions are being actively used simultaneously, the operating system may be slowed down by delays.
- When using the scan-file command, it may be impossible to scan a file whose name is not specified in the encoding of the operating system. Possible solution: Change the file name or configure a scan of the entire folder, or use the standard ODS task.
- The application might not process files in virtual pseudo file systems. Possible solution: Use the mount command to connect network or local partitions.
- In the Mageia 4 operating system, a remote installation of the Kaspersky Security Center package klnagent\kesl via SSH protocol does not work. Possible solution: Remove the "Defaults requiretty" setting from the configuration file /etc/sudoers.
- In the Red Hat® Enterprise Linux® 8 operating system, if firewall blocks the SMB protocol, the errors are possible when unloading the application or stopping the OAS task. Possible solution: Remove the block of the SMB protocol for the mounted SMB partition.
- When using Docker container system, the threats inside the containers may not be intercepted immediately.
- When changing the SizeLimit setting from the command line, the current value does not change until the application restart. Possible solution: restart the application after changing this setting.
- The klnagent-astra package cannot be removed by Kaspersky Security Center tools. Possible solution: remove the package manually from the command line.
- In the Red Hat® Enterprise Linux® 8 operating system, firewall is managed through the iptables-legacy package. Possible solution: do not use nftables to manage the firewall rules.
- When using Docker container system, the application Storage will contain only one instance of the malicious object for the containers started from one image.
- The Device_Control task does not block the floppy disks connected via the ISA bus.
- When changing the user role from "admin" to "user" and backwards, the new role will not be assigned until GUI is restarted. Restart the GUI to assign a new role.
- In the Astra Linux Special Edition, version 1.5 operating system may experience multiple errors and performance degradation during the File_Threat_Protection task run.
- In the Red Hat Enterprise Linux 8.1, unresponsive SMB server can cause the File_Threat_Protection task to hang in Starting or Stopping state. Possible solution is described in the Red Hat knowledge base article.