Managing the application via Kaspersky Security Center

Kaspersky Security for Virtualization 6.1 Agentless is controlled using Kaspersky Security Center, a centralized system that enables remote administration of Kaspersky applications. In the case of Kaspersky Security for Virtualization 6.1 Agentless, a client device of Kaspersky Security Center is an SVM. Protected virtual machines are not considered client devices from the perspective of Kaspersky Security Center because the Kaspersky Security Center Network Agent is not installed on them.

After Kaspersky Security has been installed in the virtual infrastructure, SVMs send their details to Kaspersky Security Center. Based on this information, Kaspersky Security Center combines SVMs into KSC clusters (Kaspersky Security Center clusters):

• The "VMware vCenter Agentless" cluster is a KSC cluster that corresponds to the standalone VMware vCenter Server. This cluster contains all SVMs deployed on VMware ESXi hypervisors managed by one standalone VMware vCenter Server.

  The KSC cluster corresponding to the VMware vCenter Server is assigned the name VMware vCenter '<name>' (<IP address or domain name>) Agentless, where:

  • <name> is the name of the VMware vCenter Server corresponding to this KSC cluster. If the name of the VMware vCenter Server is not defined or matches its IP address, the name is omitted.
  • <IP address or domain name> is the IP address or domain name of the VMware vCenter Server corresponding to this KSC cluster.

  Virtual machines that are managed by this VMware vCenter Server form the protected infrastructure of the "VMware vCenter Agentless" cluster.

• A VMware Cloud Director Agentless cluster is a KSC cluster corresponding to the VMware Cloud Director server. This cluster contains all SVMs deployed on VMware ESXi hypervisors managed by all VMware vCenter Servers connected to one VMware Cloud Director.

  The VMware Cloud Director (<IP address or domain name>) Agentless name is assigned to the KSC cluster corresponding to the VMware Cloud Director server (<IP address or domain name> refers to the IP address or domain name of the VMware Cloud Director corresponding to this KSC cluster).

  Virtual machines that are managed by VMware vCenter Servers connected to this VMware Cloud Director Server, including virtual machines within Cloud Director organizations, form the protected infrastructure of the "VMware Cloud Director Agentless" cluster corresponding to the VMware Cloud Director.

Kaspersky Security Center creates a separate administration group for each KSC cluster in the Managed devices folder of the Administration Console and assigns the name of the KSC cluster to this group. When an administration group with the name of a KSC cluster is selected in the console tree, the Devices tab in the workspace displays a list of SVMs belonging to this KSC cluster.

You can open the cluster properties window by selecting the Clusters and server arrays subfolder within the folder of the administration group named after the KSC cluster. The window can be opened by double-clicking the name of the cluster or using the Properties item of the context menu. In the properties window of the KSC cluster, you can view the following:

• List of virtual machines within the protected infrastructure of this KSC cluster
• List of tasks created for SVMs of this KSC cluster
• List of SVMs within this KSC cluster (the Nodes section)

Kaspersky Security is managed through Kaspersky Security Center by using policies and tasks:

• A policy is a set of application settings that are defined for an administration group. For Kaspersky Security, a policy is applied on SVMs and determines the settings used by SVMs to protect virtual machines that are within the scope of the policy.

  Each policy contains one or multiple protection profiles. Protection profiles let you configure the settings for file protection of virtual machines.

• Tasks are performed on SVMs and they implement application functions such as application activation, scanning of virtual machines, updating application databases, and automatic installation of patches for the application.

For more detailed information about policies and tasks, please refer to the Kaspersky Security Center documentation.