DMorg24

Hi atWORK, Thank you for bringing this to our attention. I’m happy to hear you are having success with KES 11.7 version.

Hello Deadlock, Happy New Year! Yes, you can change the IP of the primary server. You would just need to make sure that your configuration for primary/secondary servers is not IP dependent (if you used hostname or fqdn, there is nothing to change) Check this in the properties of each Administration Server where you should be able to edit if needed. Here is some documentation that can help if you need for reference: Creating a hierarchy of Administration Servers: adding a secondary Administration Server (kaspersky.com) If you are still unable to get this working with above documentation, please contact our support department so we can assist you: Contact Information | Kaspersky Cheers!

Hello Nabeel, Here is how to configure email notifications in the Security Center (on-prem) version: Configuring event notification (kaspersky.com) Here is how to configure the same in KSC Cloud Console if you have this version instead: Configuring notification delivery (kaspersky.com) If you are still unable to get this working with above documentation, please contact our support department so we can assist you: Contact Information | Kaspersky Cheers!

Seems like it has to do with Windows logging you in with Microsoft account in Windows 10. Whereas the backup and restore wizard of KTS is looking for a local admin account. I successfully scheduled a monthly backup by going to “Family & other users” in windows and creating a new local admin account. Once that account was created, I specified it in KTS and successfully scheduled the backup.

Hello arnaud21, It would be a bit of a security taboo to release the password on a public forum. We can get you this password, please kindly open a request through your company's account portal: https://companyaccount.kaspersky.com/account/login or contact technical support in your region. Please see your region support group contacts here: https://support.kaspersky.com/b2b/Thank you for your cooperation.

Hello Comgam, The USB port will be shut down for things such as charging if the “connection bus” is also blocked. What you can do is block types of media such as “removeable drives” yet leave the USB connection bus enabled. This will stop the transfer of data via removeable drives but still allow the port to be functional.

Hello, Please ensure to remove the trial license and input your purchased license to remove trial status. For more information please contact the Kaspersky Business Support team by opening a web ticket through the company's account portal: https://companyaccount.kaspersky.com/account/login or contact technical support in your region. Please see your region support group contacts here: https://support.kaspersky.com/b2b/Thank you for your cooperation.

Hello, Here is documentation on user roles: Users and user roles (kaspersky.com) For more information please contact the Kaspersky Business Support team by opening a web ticket through the company's account portal: https://companyaccount.kaspersky.com/account/login or contact technical support in your region. Please see your region support group contacts here: https://support.kaspersky.com/b2b/Thank you for your cooperation.

Hello UOFM_Support, I assume you are installing an upgrade over-the-top from a previous version? If so, what versions are you upgrading from and how many devices are resulting in this error?

Hello Ennova Research. The network agent is simply a communication application. It’s function is to communicate the status of the device back to the Security Center Cloud Console. The error you are seeing with real-time protection is caused by the “Security application is not installed.” message in the status description. You must also install the Endpoint Security application to the devices which is the security application. Once it’s installed, make sure to add a license or activation code to enable protection and run a database update. Then protection will be enabled on the device and these errors should be cleared up.

Hello, Please check the account that is running the Kaspersky Security Center Administration Server service. Ensure that this account has read/write permissions to the target folder you are attempting to create the report .pdf in. If it is a network path, the account running the service must be a domain admin account.

Hello JH1987, Hope you are well, this sounds like something complex that would require some troubleshooting of the KES 11.6 to get fixed. I suggest to open an incident with support at companyaccount.kaspersky.com or call in to support for some assistance. That way we can begin troubleshooting and get to the bottom of this for you. Hope to talk to you soon!

Hello Emil, Hope you are well. You can deploy KES for Mac remotely via installation task or locally from the dmg file. The network agent for Mac must be installed locally first however before you are able to remotely deploy the KES for Mac. This is because there are only two methods of remote installation from the Security Center console. “using network agent” or “using windows resources”. Since it’s a Mac OSX, that rules the second option out and you must install the agent locally to use the network agent. Here are some helpful links; How to install KES 11 for Mac: https://support.kaspersky.com/15309 How to install network agent for Mac: https://support.kaspersky.com/15302 The KES for Mac would use the same license as your windows devices, so no additional cost there.

Hi Sandro, I think you are referring to building an installation package based on a .bat file and running this as an installation task to the target devices? I understand that the .bat file is a command to copy files from a UNC path to the C:\ of target device correct? If so, please keep in mind the installation task will execute under the “System” account and it will copy the script locally to the C:\Windows\Temp directory and execute it there. Please be sure that the .bat file will execute properly under those conditions.

Hi Aseman.ab, This was known issue for KSC 12 build of the network agent package when being installed on some Domain Controllers. We have a special installer built that will fix this issue. To obtain this custom network agent 12 installer, please open a request with your local Kaspersky support office so we can supply it to you. You can do this by calling or opening request in your companyaccount.kaspersky.com portal. I also believe this issue was fixed in our most recent KSC 13 version that is available for download on the support site now. So this other option would be to upgrade your Security Center to version 13 and instead use the network agent 13 package. Either option should work.

Hello Nisar, Here is a link that you can reference: https://support.kaspersky.com/KSC/CloudConsole/en-US/195507.htm This shows that you can use a Kaspersky Endpoint Security for Business Select/Advanced/Total or EDR-O license with the KSC Cloud Console. These licenses also work with our on-prem solution.

To be able to create the application registry report; Open your KSC console Select Administration Server Select ‘Reports’ tab to the right Create new report Select report on application registry history template Review properties of that report to tailor it to your liking as much as it will allow

Hi Apts, You can generate a report on application registry history that will show you the first two. But there is not a way to combine that with sessions as well in the current version of the Security Center. The different fields you can add/remove from the reports are in the properties of the report itself. There are only specific details that can be included within the framework of the report. To see the sessions on a device in question, the quickest way to do it is to go into the properties of the device in question and look at the session section under system info sub-section.

Hello Yasutoshi, Please check the properties of the installation package you are using for the connection gateway devices. There are options to optimize for VDI infrastructure that should NOT be selected. Having these options selected are intended for non-persistent VDI devices and will wipe the machine data in KSC and the next time it boots it will be registered as a new device. This would show the original option in the KSC as unmanaged as you are describing.

These options would require the installation distributive since they are in effect re-installing the application. The un-install is available since all it needs is the un-install string (including GUID) from the registry. I have not tested this myself, but in theory, if the extracted installer folders are still present, these options may be selectable. In most cases, after installation however the installation files are removed to reduce unnecessary disk space consumption.