Install Network Agent using the SSH protocol

Support

Support for business applications

Kaspersky Endpoint Security 11 for Mac

Manage the application via Kaspersky Security Center Administration Console

Prepare for remote installation of Kaspersky Endpoint Security

Install Network Agent using the SSH protocol

September 12, 2023

ID 127621

One way to install Network Agent on a remote computer is by using the SSH protocol.

Make sure that the following requirements are met:

Kaspersky Security Center Administration Server is deployed on the corporate network.
Administration Console is installed on the Kaspersky Security Center administrator's workstation.
The Network Agent installation package is created and stored in a shared folder of Administration Server.
Remote Login is enabled on the remote computer.
The computer account used to install Network Agent is included in sudoers.

For detailed information about installation packages, see the Kaspersky Security Center help.

Install Network Agent using the SSH protocol

Start the SSH client on the administrator's workstation.
Connect to the remote computer.
Connect the shared folder of Administration Server as a network drive on the remote computer. To do this, enter the following commands in the SSH client:
mkdir /Volumes/KLSHARE

mount_smbfs //<administrator account>:<password>@<Administration Server IP address>/KLSHARE /Volumes/KLSHARE

Parameter descriptions:
- <administrator account> – Name of the administrator account on Administration Server.
- <password> – Password of the administrator on Administration Server.
- <Administration Server IP address> – IP address of the server hosting Kaspersky Security Center.
Run the installation script. To do this, enter the following command in the SSH client:
cd /Volumes/KLSHARE/<klnagent_package_folder>

where <klnagent_package_folder> is the folder, in which the Network Agent installation package is located.

sudo ./install.sh --accept_eula [-r <server>] [-p <port number>] [-s use_ssl 0|1] [-l <SSL port number>] [-x use_proxy 0|1] [-a <proxy>] [-n <proxy login>] [-w <proxy password>]

Parameter descriptions:
- <server> – IP address or DNS name of the server on which Kaspersky Security Center is installed.
- <port number> – Number of the port that will be used to establish an unencrypted connection to Administration Server. Port 14000 is used by default.
- use_ssl 0|1 – Parameter that defines whether encryption will be used when establishing the connection between Network Agent and Administration Server. If the value is "0", an unencrypted connection is used. If the value is "1", the connection is established via the SSL protocol (default value).
- <SSL port number> – Number of the port that will be used to establish an encrypted connection to Administration Server using the SSL protocol. Port 13000 is used by default.
- use_proxy 0|1 – Parameter that defines whether a proxy server will be used when connecting to the internet. If the value is "0", a proxy server is not used. If the value is "1", the connection is established via a proxy server (default value).
- <proxy> – IP address or DNS name of the proxy server.
- <proxy_login> – User account for connecting to the proxy server.
- <proxy_password> – Password for connecting to the proxy server.
Important: Administrator rights are required for executing this command.
Disconnect the network drive on the remote computer. To do this, enter the following command in the SSH client:
umount /Volumes/KLSHARE
Check if Network Agent functions properly on the remote computer. To do this, enter the following commands in the SSH client:
cd /Library/Application\ Support/Kaspersky\ Lab/klnagent/Binaries/

sudo ./klnagchk

If the check is successful, Network Agent functions properly.

Kaspersky Endpoint Security for Mac: Convenient management via a single console

High-performance protection of your data and business continuity. Buy as part of Endpoint Security for Business Advanced.

Kaspersky Premium Support (MSA): High‑priority incident processing

Telephone and web ticket support. Fast response, monitoring and health check. Submit a request and activate the contract (MSA).

Did you find this article helpful?

What can we do better?

Thank you for your feedback! You're helping us improve.