KASPERSKY LAB Kaspersky® Administration Kit version 5.0 Reference Book KASPERSKY® ADMINISTRATION KIT VERSION 5.0 Reference Book © Kaspersky Lab Visit our website: http://www.kaspersky.com/ Revision date: December, 2005 Contents CHAPTER 1. KASPERSKY® ADMINISTRATION KIT.................................................. 6 1.1. The purpose of the document............................................................................... 8 1.2. Conventions used in this book .............................................................................. 8 CHAPTER 2. GETTING STARTED.............................................................................. 10 2.1. Starting the program and connecting to the administration server.................... 10 2.2. Granting rights to users ....................................................................................... 13 2.3. Viewing information about the computer network IP subnetworks.................... 17 2.4. Quick Start Wizard............................................................................................... 21 CHAPTER 3. VIEWING, CREATING, AND CONFIGURING A LOGICAL NETWORK ................................................................................................................. 27 3.1. Viewing the logical network structure ................................................................. 27 3.2. Finding a computer in the logical network .......................................................... 35 3.3. Computer queries................................................................................................ 40 3.4. Creating, modifying, and deleting logical network groups.................................. 45 3.5. Adding, moving and deleting a computer from a logical network ...................... 47 3.6. Moving a client to another logical network.......................................................... 49 3.7. Local connection of the client computer to the Administration Server............... 52 3.8. Verifying connection of the client computer to the Administration server.......... 54 CHAPTER 4. HIERARCHY OF ADMINISTRATION SERVERS ................................ 56 4.1. Connecting a slave Administration Server to a master Server .......................... 56 4.2. Viewing the logical network of a slave Administration Server............................ 58 CHAPTER 5. INSTALLATION AND DEINSTALLATION APPLICATIONS ON CLIENTS..................................................................................................................... 59 5.1. Viewing the installation package parameters..................................................... 59 5.2. Creating installation packages ............................................................................ 63 5.3. Configuring installation package settings for the Network Agent....................... 66 5.4. Creating an application deployment task........................................................... 67 5.5. Configuring the remote installation task.............................................................. 76 5.6. Remote software uninstallation........................................................................... 78 4 Kaspersky Administration Kit 5.7. Application Deployment Wizard.......................................................................... 79 5.8. Local installation of Network Agent..................................................................... 82 5.9. Local installation of Network Agent Console Plug-in.......................................... 86 5.10. Installing applications in silent mode................................................................. 87 CHAPTER 6. POLICY MANAGEMENT ....................................................................... 88 6.1. Creating a policy for an application..................................................................... 88 6.2. Viewing and modifying a policy........................................................................... 91 6.3. Activating a policy.............................................................................................. 100 6.4. Creating a Network Agent policy....................................................................... 101 6.5. Exporting and importing policies ....................................................................... 103 CHAPTER 7. TASK MANAGEMENT ......................................................................... 105 7.1. Creating a group task ........................................................................................ 105 7.2. Creating a global task........................................................................................ 114 7.3. Creating a local task .......................................................................................... 115 7.4. Viewing and changing task settings.................................................................. 117 7.5. Application start / stop task................................................................................ 124 7.6. Exporting and importing tasks........................................................................... 126 7.7. Starting and stopping tasks............................................................................... 127 7.8. Monitoring and viewing task performance results............................................ 128 7.9. Deploying group tasks on slave Administration Servers.................................. 135 CHAPTER 8. MANAGING APPLICATION SETTINGS............................................. 136 8.1. Viewing application settings .............................................................................. 136 8.2. Administration Server settings .......................................................................... 140 8.3. Network Agent settings ..................................................................................... 150 CHAPTER 9. UPDATING THE ANTI-VIRUS DATABASE AND PROGRAM MODULES................................................................................................................ 151 9.1. Creating the update task ................................................................................... 151 9.2. Configuring the update task .............................................................................. 154 9.3. Viewing update list............................................................................................. 155 9.4. Automatic update deployment .......................................................................... 157 CHAPTER 10. WORKING WITH QUARANTINE ...................................................... 159 CHAPTER 11. EVENTS, REPORTS AND NOTIFICATIONS................................... 161 11.1. Logging and viewing events and receiving notifications ................................ 161 Contents 5 11.2. Viewing and modifying report templates ........................................................ 169 11.3. Creating a report template .............................................................................. 171 11.4. Generating and viewing reports...................................................................... 173 11.5. Generating summary reports on slave Administration Servers..................... 174 CHAPTER 12. MANAGING LICENSE KEYS ............................................................ 176 12.1. Viewing information about license keys.......................................................... 176 12.2. Installing a new license key............................................................................. 178 12.3. Creating and viewing the license key report................................................... 180 CHAPTER 13. BACKUP COPYING AND RESTORATION OF THE ADMINISTRATION SERVER DATA....................................................................... 181 13.1. Backup data copying task ............................................................................... 181 13.2. Backup data copying utility.............................................................................. 184 APPENDIX A. FREQUENTLY ASKED QUESTIONS ............................................... 186 APPENDIX B. GLOSSARY......................................................................................... 190 APPENDIX C. KASPERSKY LAB............................................................................... 196 C.1. Other Kaspersky Lab Products ........................................................................ 197 C.2. Contact Us ........................................................................................................ 202 APPENDIX D. LICENSE AGREEMENT .................................................................... 203 CHAPTER 1. KASPERSKY® ADMINISTRATION KIT Kaspersky® Administration Kit is an application that is designed to provide a centralized solution for most important administration tasks associated with managing the corporate network anti-virus security system based on Kaspersky Lab's applications included into Kaspersky Anti-Virus Business Optimal and Kaspersky Corporate Suite . Kaspersky Administration Kit supports all network configurations that use TCP/IP protocol. Kaspersky Administration Kit is a tool for corporate network administrators and anti-virus security officers. The application enables the administrator to: · Deploy Kaspersky Lab applications across a network connection to computers running Windows. This feature enables the administrator to copy the required set of Kaspersky Lab's applications to a selected computer and then deploy these applications on the network computers. Manage licenses. This feature allows to install license keys to all installed Kaspersky Lab's in a centralized way, monitor the observance of the License Agreement (that is, the conformity of the number of licenses to the number of applications operating in the network) and the expiration date. Remotely manage Kaspersky Lab applications across a network connection to computers running Windows. This feature enables the administrator to create a multi-level anti-virus protection system and manage the operation of all applications from a single administrator's workstation. This is particularly important for larger companies that have a local network consisting of a large number of computers that may cover several separate buildings or offices. This feature enables the administrator to: · group computers into administration groups based on the functions performed by such computers and the set of applications installed on them; configure the application settings in a centralized way by creating and applying group policies; configure individual settings of the application for individual computers using the application settings. manage the operation of the applications in a centralized way by creating and running group and global tasks. · · · · · Kaspersky® Administration Kit 7 · create individual patterns for the application's operation by creating and running tasks for a set of computers from different administration groups. · Automatically update the anti-virus database and application modules on computers. This features allows centralized updating of the anti-virus database for all installed Kaspersky Lab's applications without accessing the Kaspersky Lab's internet updates server for each individual update. The updating can be performed automatically according to the schedule set up by the administrator. The administrator can monitor the installation of the updates on the client computers. Receive reports using a dedicated system. This feature allows centralized collection of statistical information about the operation of all installed Kaspersky Lab's applications, monitoring the correctness of the operation of these applications and creating reports based on the information obtained. The administrator can create a cumulative network report about the operation of an application or reports about the operation of application installed on each computer. Use events notification system. Mail notification sending system. This feature allows the administrator to create a list of events in the operation of the applications about which her or she will receive notifications. The list of such event may, for example, include detection of a new virus or an error that occurred when attempting to update the anti-virus database on a computer, detection of a new computer in the network. · · Kaspersky Administration Kit application consists of three major components: · Administration server performs the function of centralized storage of information about Kaspersky Lab's applications installed in the corporate network and about managing such applications. Network Agent coordinates the interaction between the Administration Server and Kaspersky Lab's applications installed on a specific network node (a workstation or a server). This component supports all applications included in ...