endpoints not updating

[Mr.Tarek]

hello

i have a kaspersky security center on prem with hundreds of endpoints

the ksc has internet while the endpoints don't. 

endpoints are not updating and databases are always showing as outdated

 

how to setup properly the update tasks and update sources ?

thank you

[DonKid]

Please, check ports used by KSC, by clicking here.

[Mr.Tarek]

1 hour ago, DonKid said:

Please, check ports used by KSC, by clicking here.

i did not change any ports..windows firewall is off..only kasperesky endpoints software installed + network agent

[ElvinE5]

if you have everything set up correctly, then the KSC should have at least the following tasks ... running on a schedule

Download updates to the Administration Server repository

Спойлер

Update - KES

Спойлер

the first task is to download updates from the Internet to the server, the second task is to transfer these updates to all devices on which KES is installed

similarly, you should set up client update tasks for other products used in your network - KSWS, KEES etc

Спойлер

watch how these tasks work, by errors it will be possible to identify problems.

also check the availability of the current key in the KSC storage, and that it is distributed to clients.

also check the versions of the installed software on the end devices, probably your versions have already been completely withdrawn from support (EOL) - for such versions, the databases are no longer updated.

https://support.kaspersky.com/corporate/lifecycle#b2b.block0.kes11

[Mr.Tarek]

i can see a lot of updates for the kaspersky software like web plugin and msi .. how to proceed? reinstall new endpoint version on all the devices or what?

[ElvinE5]

1. first, decide what you are currently using and whether this software is supported - https://support.kaspersky.com/corporate/lifecycle#b2b.block3

2. check available new versions of products that interest you - 

Спойлер

https://www.kaspersky.com/small-to-medium-business-security/downloads/endpoint?icid=ru_sup-site_trd_ona_oth__onl_b2b_klsupport_tri-dl____kes___

3. decide on the need for updates

 

install everything in a row does not make any sense update those products that you use, remove old and unnecessary ones ... do the same with management plugins - install only those you need, delete old and unused ...

Edited June 14, 2023 by ElvinE5

[Mr.Tarek]

Quote

install everything in a row does not make any sense update those products that you use, remove old and unnecessary ones ... do the same with management plugins - install only those you need, delete old and unused ...

How exactly ?!

[ElvinE5]

in any way convenient for you ... in manual mode, remote installation tasks from the administration server ... here you have many options

check out the reference materials it will help - https://support.kaspersky.com/KSC/14.2/en-US/171268.htm

[Mr.Tarek]

i have all the tasks

download to server is successful but not to clients 

[ElvinE5]

What product versions are you using? KES , KSWS , KSC etc

give screenshots of what tasks you have, and the state of how they work out (errors)

the state of your clients ... whether they are connected to the server, whether your update tasks are distributed to them ...

show your active keys and that they are distributed (applied) to end devices ...

Edited June 14, 2023 by ElvinE5

[Mr.Tarek]

 

update to server is successfull 

 

 

key is still valid but not all devices are receiving the key ( i dont know why )

 

 

 

[Mr.Tarek]

Please note client devices have no internet - in case this affects the activation

[ElvinE5]

2 минуты назад, Mr.Tarek сказал:

Please note client devices have no internet - in case this affects the activation

and then it is clear why the key was not added to them ...

you use the activation code for activation, when it is delivered to the client, it must be checked ... and since there is no Internet ... then the activation does not go through ...

 

well, let's get the usual keys (files) from the activation code, they don't need access to the Internet to check the validity.

https://keyfile.kaspersky.com/ru/

fill out the form ...

you will receive an archive with key files by mail add keys to the server - there will be two of them one to activate applications the second to activate the functions

make the key for clients automatically distributable

Спойлер

and if necessary, use the key for the server to activate the functionality

Спойлер

 

you need to quickly change the key, use the task

do not forget to uncheck the box about adding a key as a backup

Спойлер

the task can be applied to all devices ... it won't get worse

 

[Mr.Tarek]

what is the difference between the regular license and the " Kaspersky Security for WS and FS" ?

[ElvinE5]

what do you mean by regular license?

if we are talking about the activation code and key files, then they are absolutely the same and will provide you with the same opportunity and functions

it's just that the code is universal, and is suitable for activating everything that is included in the license, key files can be broken down into specific products that they can activate. However, internet access is required to activate with a code...

 

I understand that you received two keys from the activation code ... ?

along with them there should have been a text file with a description

Спойлер

1. Kaspersky Security for WS and FS - designed to activate products installed on workstations and servers, mobile devices - and this is a fairly large set of applications

Kaspersky Endpoint Security for Windows (KES), Ksspersky Security for Windows Server (KWSW), KES for Linux, KES for Mac, KES for Android etc

 

2.The key is designed to unlock the advanced features of the KSC control center (workstations will not be able to use it)