Installing the application on the same server with Kaspersky Endpoint Security for Linux

You can install KSMG on the same server with Kaspersky Endpoint Security for Linux version 12 or later.

If you are using Kaspersky Security Center for centralized management of Kaspersky Endpoint Security for Linux, you must edit group policy settings to configure Kaspersky Endpoint Security for Linux. If you are not using centralized management, you can configure Kaspersky Endpoint Security for Linux locally on the command line of each server.

To install and configure KSMG and Kaspersky Endpoint Security for Linux on the same server:

1. If you are using Kaspersky Security Center for centralized management, install the Network Agent.
2. Install Kaspersky Endpoint Security for Linux, perform its initial configuration, activate and configure the necessary protection components.

   For information about installing and configuring Kaspersky Endpoint Security for Linux, refer to the Kaspersky Endpoint Security for Linux Help.

3. In the settings of the File Threat Protection component of Kaspersky Endpoint Security for Linux, add the following directories to exclusions:
   • For Red Hat Enterprise Linux, Rocky Linux operating systems:

     /var/spool/exim — mail server message queue.

   • For Ubuntu operating systems:

     /var/spool/exim4 — mail server message queue.

   • For all operating systems:
     • /var/spool/postfix — Postfix mail server message queue.
     • /var/opt/kaspersky/ksmg — database, event logs, KSMG message Backup.
     • /tmp/ksmgtmp and /tmp/ksmg_filter — temporary working directories of the KSMG application.

   For details, see the Configuring exclusions for the File Threat Protection component of Kaspersky Endpoint Security for Linux section.

4. If you enabled the firewall management component of Kaspersky Endpoint Security for Linux, allow incoming connections to the following TCP ports:
   • 25 — port for incoming SMTP connections for receiving email messages.
   • 443 — default port for the KSMG cluster node management web interface.

     You can use a different port number, the value is specified during the initial configuration of KSMG.

   • 9045 — port for communication between KSMG cluster nodes.

   For details, see the Configuring the Firewall of Kaspersky Endpoint Security for Linux section.

5. If you are using the Network Threat Protection or Web Threat Protection components of Kaspersky Endpoint Security for Linux, temporarily disable these components while you are installing and setting up KSMG.
6. Install the KSMG application, perform its initial configuration.
7. If you are using Kaspersky Security Center for centralized management, restart the Network Agent.
8. Enable the Network Threat Protection and Web Threat Protection components of Kaspersky Endpoint Security for Linux.