I have readen thi Linux course of Kaspersky Endpoint Security and reached to the topic that was about "how kasperksy scan encrypted traffic?" and A question has arisen for me that how Kaspersky's Self-sign certificate participate in TLS/Handshake proccesses?How does it spoofed it self ?what contents does it have? 

I konw that it uses Man In The Middle to sacn the traffic but I have confused what role takes on the self-sign certificate in the whole proccess.

After we received the new updates on the Kaspersky Endpoint Cloud Console we getting nonfictions that our devices been critical status. However on the devices itself there is no any red flag from Kaspersky and even before the update everything was working fine on the Console and our devices. So if anyone can assist me.

Pls suggest how to fix How to fix problem while config Kas after install on Linux (CentOS 8.0) "Failed to resolve permission nlmsg_delay"

We encountered Database error, it says

“ #1950 (701) Generic db error: "701 'There is insufficient system memory in resource pool 'internal' to run this query.{42000};' LastStatement='tsk_should_process_sync_events'"

Error details: 1950/701 (Generic db error: "701 'There is insufficient system memory in resource pool 'internal' to run this query.{42000};' LastStatement='tsk_should_process_sync_events'"), c:\a\b\a_vvg9opzi\s\csadminkit\development2\server\db\ado\db_adoprepstmtimpl.cpp, 408. “

This was a fresh installation in Windows 10 Desktop with 16GB of RAM. I checked the Memory Usage for SQL Server Windows NT 64 Bit - it eats only 4.7GB and the total consumption for the whole system including the SQL Server is only at 56-57%. So why is it the error says “ insufficient system memory in resource pool “ ?

KSC Version: 13.2.571

Thank you

Web Console 14.2

Windows 22H2

Good afternoon, there is a license to use IOC Search tasks. According to the instructions from the official website, a task to search for the IOC was created in the “Web Console”. Under "Program Options", select "Override IOC Files". When selecting more than 3 files, the Web console freezes and does not save the result of adding files. If you add 3 files or less, the task will be saved and processed.

Please suggest an alternative method for adding IOC. Or tell me what the problem is. I tried to restart the Web Console service on the server, but it did not work.

The only thing i can is to manually quit KES on computer, restart KES and agree to KSN participation. ok after.

Is there a way to enable KSN participation remotely from KSC ?

Thanks

.

Is Kaspersky Security for Windows Server v11.0.1.897 a deprecated/obsolete product and for new installations on servers we should use Kaspersky Endpoint Security for Windows, the same which we use on workstations?

I'm experiencing an issue with Kaspersky, as my devices are repeatedly generating the info event "Update source is selected." Its origin is marked as the task "Update," and it's the only event being recorded, preventing me from viewing any historical events. Does anyone know where this configuration is located and how to reduce the number of recorded events?

I've already checked the task settings, which are configured for "Save only task execution results," but the events keep being generated. I've also searched through the policy settings, but I couldn't find this specific event. This situation is hindering my ability to review historical events, and the sheer volume of informational events is filling up the capacity.

Any assistance you can provide would be greatly appreciated. Thank you in advance!

 I want to know how to solve the problem. Is there any way to help?

With a virtual Windows server 2019, I encounter this error which cancels the installation of the latest KES application versions 12.3 or 12.4.

What solution should I follow in order to install KES ?

Regards

When we change the single Positions the mmc reacts very slow . 

It needs long time to open the Group Policy Settings . 15 Seconds or more. 

We try it with an SQL 2016 Server on an other machine and also with an lokal installed SQL Express Server . 

Thanks for Help 

Michael 

First uncheck the "Force inheritance in child group" box 

Then create New group:

But as you can see it says the new group is inherited policy!

I'm unable to access the Administration server through Kaspersky Security Center. It gives me 'Access Denied' error. I tried restarting the Administration server service and changing the administration server service account but It did not work.

Thanks in advance

I hope you are doing well . I am trying to use Active Directory to install Kaspersky Endpoint Security for windows using the script and the method in the below document :

https://support.kaspersky.com/Cloud/1.0/en-US/147138.htm

Below is my script

set SHARE_PATH=\\192.168.1.238\klshare
set PACKAGE_NAME=installer.exe
set __KESCLOUD_ROOT_KEY="HKLM\Software\KasperskyLab\KESCloud"
set __KESCLOUD_KEY_NAME="12.4.0"
set __KESCLOUD_PACKAGE_FULL_PATH="%SHARE_PATH%\%PACKAGE_NAME%"
set __KESCLOUD_PACKAGE_ARGUMENTS=-s
REG QUERY %__KESCLOUD_ROOT_KEY% /v %__KESCLOUD_KEY_NAME% | FIND "0x1"
IF %ERRORLEVEL% == 1 GOTO INSTALL
GOTO END
:INSTALL
REG ADD %__KESCLOUD_ROOT_KEY% /v %__KESCLOUD_KEY_NAME% /t REG_DWORD /f /D 1
%__KESCLOUD_PACKAGE_FULL_PATH% %__KESCLOUD_PACKAGE_ARGUMENTS%
:END

After applying the method in the above document , I restart the client computer , I expect that Kaspersky Endpoint Security for windows installation will begin and finalize but nothing happen.

So kindly advice.

Best Regards

Best Regards

Is Kaspersky Anti Ransomware Tool included Endpoint Security for Business ?

Thank you

Kind Regards
 

Which component  does play a role of ntrusion Detection in KES ?

I want to figure out How "Kaspersky Anti-Virus Personal Root Certificate" decrypt SSL connection to scan it

I decide to write an article about how Kaspersky scan SSL\TLS connection by Kaspersky Anti-Virus Personal Root Certificate and describe the proccess in details 

I will be happy to guide me to complete this article 

Thanks .

Kaspersky Endpoint Security for Windows (12.3.0) (English) (Lite encryption) (12.3.0.493): Remote installation has been completed with an error on this device: Fatal error during installation. (Your computer already has another localization of a Kaspersky application installed. Please uninstall it before installing Kaspersky Endpoint Security for Windows.)    

I tested are 5 machines can success updated 3 machines only. May I know what problem be trigger like as above problem ?

License: Kasperksy Enpoint Security Business Select Advanced.

Expected behavior: when password is set whenever user is trying to remove package (Either

dpkg -r <kasperksy>

or

apt-get remove <kaspersky>

)  it should prompt for password

we tried to use:   KLAPR , kavremvr
Can you please help us?
Sincerely Christopher

I can install version 11.2.0 without problems.

The /var/log/kaspersky/kesl/kesl_launcher.log have this error:

2023-03-24 13:59:30 launcher {pid:6493}: <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< exit(1) <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2023-03-24 13:59:42 launcher {pid:6498}: =================== --install 1679666321 --package-type deb ===================
2023-03-24 13:59:42 launcher {pid:6498}: Mode: Install
2023-03-24 13:59:42 launcher {pid:6498}: Product not running (Can't open "/var/run/wdserver.pid" file. Reason: No such file or directory)
2023-03-24 13:59:42 launcher {pid:6498}: Is running: 0
2023-03-24 13:59:42 launcher {pid:6498}: Running cp -rplvPT /var/opt/kaspersky/kesl/install_11.3.0.7441/ /var/opt/kaspersky/kesl/11.3.0.7441_1679666321 ...
2023-03-24 13:59:42 launcher {pid:6498}: Setting 'en_US.UTF-8' localization ...
2023-03-24 13:59:42 launcher {pid:6498}: Loc directory: "/var/opt/kaspersky/kesl/11.3.0.7441_1679666321/opt/kaspersky/kesl/shared/loc/"
2023-03-24 13:59:42 launcher {pid:6498}: Localization 'en_US.UTF-8' has been set
2023-03-24 13:59:42 launcher {pid:6498}: Language: en
2023-03-24 13:59:42 launcher {pid:6498}: Product name: Kaspersky Endpoint Security 11.3.0 for Linux
2023-03-24 13:59:42 launcher {pid:6498}: Error installing the application
2023-03-24 13:59:42 launcher {pid:6498}: /home/builder/a/c/d_00000000/s/product/kesl/supervisor/utils.cppThrow in function lfs::supervisor::Path lfs::supervisor::ResolvePath(const char*)
Dynamic exception type: boost::exception_detail::error_info_injector<std::runtime_error>
std::exception::what: chkconfig not found

The chkconfig binary is not available in Debian based distros.