For all of our desktop users, i've simply left the "update" settings in Workstation 6 to "manual".
This isn't too much of an issue as the updates get pushed from the admin kit when it's updated.

For the laptops I created a mobile policy, that changes the update location from the admin kit, to Kaspersky's servers, but i've came accross an issue I can't think how to sort, at least not automatically.
There is no place in the mobile policy to set the update run mode (i.e. the settings you get in the local update tab - Automatic, Every 1 day, or Manually).
This means that when the disconnect from the network, the update source changes, but I suspect the update won't actually happen.

Is there a way to set this via mobile policy? If not, whats the easiest way to get this onto our dozen laptops.

Thanks

Carl

The time, the tasks start is set through the option in the tasksettings. The policy just sets the updatesource.

Do you have a policy for the network agent?

If you have this policy it switched immediately between active and mobile policy.

Yes, I understand the policy is activated, but it only changes the update source, not actually changing the update from "manual" to "automatic".

The laptop i'm testing it on is set to "manual" update. When on the network at the office it's fine, as updates are pushed to it when the admin kit is updated.
If I disconnect it from the network, the mobile policy activates, but it only changes the update source. There's not a way to tell the AV to now update automatically when it's connected to the internet. It still says "manualy".




Are you saying I need to create an update task in the group tasks for the laptops in the admin kit? If so, then i'd have updates being pushed by the admin kit update task, and an update task for the group?

I guess you are looking in the local update task and this task is setting to manualy.

The group update is is still working when the mobile policy is active.

Hello,

I would like to add that if you have laptops in your network with a mobile policy defined, then the group update task must be configured to be executed every (N) minutes, hours, days ... whatever you want and except "On receipt of updates by Administration Server".
In this case, new threats definition are pushed from the Administration Server to managed hosts, but if hosts are not reachable because they aren't in the corporate network, then they won't be updated anymore.

As a conclusion, update should be pulled (download) from hosts and not be pushed from the Administration Server when a mobile policy is configured.

Thanks.

I've set a group task for the laptops to update daily. So in theory they'll at least be updated once a day whenever they ae connected or disconnected.

ok .. i have some problem, what diffrently of general policy and mobile policy?, if on general policy update source is set to adminkit & kaspersky lab updates. In case when agent failed synchronize to administration kit for three times it will switch to kaspersky lab server. The questions is, mobile policy functionalliy is nothing if can replace by general policy ........

Sorry, didn't understand anything...

Ok .. i'm sorry my english isen not fluently. I means mobile policy functions is for keep update of workstations when admin kit cannot be reached. In case, i make new policy which set as active policy. in updates source, i checklist kaspersky administration kit and kaspersky lab's server. Did it can replaced the function of mobile policy?.

Just create one active policy with administration kit as update source for example. Then create a mobile policy with Kaspersky Lab Update Server as Source.

If client is able to reach the administration kit, the active policy is enabled and updates are loaded from the AK. If the client is not able to reach the AK, mobile policy is enabled and updates are loaded from Kaspersky servers in the internet.

for simply, i'm using 2 options, so i didn't need a mobile policy. it's work and can running automatictly without always set it by manually.

Ok, if it's just about update sources, it's ok.

But for example, many customers disable the anti-hacker in the corporate network with the active policy (cause they are using a strong perimeter protection) and activate anti-hacker over the mobile policy to protect notebooks and stuff, if they are 'on the road'.