Our organization has two main locations. We have an application server, an AV server, and several other LOB servers for each location. We have a replicated file server at each location. We have a single exchange 2003 SP2 server at the primary location. We have about 80 active workstations.

We have licenses for the following apps:
- Kaspersky Internet Security 7.0.1.325
- Kaspersky Antivirus Workstation 6.0.3.837
- Kaspersky AV for NT/Win2K/2003 Server 6.0.3.837
- Kaspersky AV for Win Srv Enterprise Edition 6.0.1.511
- Kaspersky Security 5.5.1354.0 for Exchange 2003

We have an interest in using the following app:
- KAV Admin Kit 6.0 (6.0.1591)

We have some questions:
- Do we need to install the KAV Win Server EE on the exchange server in addition to the KS for exchange 2003?
- If "yes" to the question above, in what order?
- Do we need to install the KAV Admin kit prior to installation of the KAV Win Server EE app?
- Do we need to (or can we) set up an ~AV Server~ at each main location so that location one users get their AV updates from AV Server 1 and location two users get their updates from AV Server 2?

We need some basic high-altitude guidance here.

The Kaspersky Admin Kit 6.0 Deployment Guide states,
"Install the Administration Servers on the computers within the corporate network."
The AV servers? The application servers?

The Kaspersky Security 5.5 for Microsoft Exchange Server 2003 Administrator's Guide states,
"If the computer, from which the installation is performed, is a protected Exchange
server, select the Security Server component."
Protected by what - the very rhobust MS windows built-in firewall? The KAV Win Server EE previously installed on the exchange server? What?

Any intelligible wise advice here would be greatly appreciated!

Hello,

1) Well, if you do not have clustered or terminal server (MS or Citrix) environment you do not need to mandatory work with EE....KAV for File Server would be enough
2) first install KAV for File Server, set some exclusion masks on everything related to the Exchange installation, then install KS for Exchange. KAV for File Server takes car of file system general protection while KS for Exchange is strictly dedicated to the messagging system.
3) First you do not need to install AK on a server machine: a workstation (XP, Vista, 2000 Pro) would be fine. That said, if you're thinking to install AK on a server (anyway this is the suggested scenario), it does not matter if you install KAV or AK first. If i was in your shoes i'll install AK first.
4) Architecture: you certainly may think to balance the "Kaspersky" (update, synchronizations, policy applications and so forth) traffic by installing AK Master on the primary location and a slave server on the secondary one. You do not have to handle so many client so i guess you won't have a huge traffic...so, i guess you can manage everything by defining an AK Master only and, maybe, some update agents on the secondary location.
5) as i've said before, AK is not a client-server based application therefore you can install it within a peer-to-peer network (aka Workgroup). Of course, in order to fully appreciate the hourly based update system, it would be better that AK machine's always on.....and usually you got it with server machines....That said, you can install AK on application server or PDC or whatever else.....it does not matter. Of course if the application server hosts a very "heavy" software and the hardware is close to the application minimum requirements, by installing AK might considerably slow down the whole system.
6) about KS for Exchange: sincerely... i'm not sure....at a first glance i would think the following: "Protected Exchange" is an Exchange system that is going to be protected by KS for Exchange; "Unprotected Exchange" is a server where, maximum, you may have the Management Console only , not the Security Server component of KS for Exchange.

Hope everything helps you
M.