Jump to content

Kaspersky Security 14 Web Console add subnet to distribution point


Recommended Posts

Posted

Hi,

We are in the process of reorganizing our clients in Kaspersky Security Center.
One question : how can we add some specifics subnets to our distribution points ?

The add subnet option seems to be just a text box....
image.thumb.png.b9cfa11b78ed41ca5a27b1bd30fe78b2.png

 

This is not clear for me thank you.

Best regards,

 

Vincent

Posted (edited)

Good day

You must first configure Connection profiles in the policy for the network administration agent by setting Network location settings

Спойлер

image.thumb.png.d2e09f60766ad3f8f4c4f490496062dc.png

 

Спойлер

image.thumb.png.7c7a84e22e3489178680ede4c7444296.png

as an example

This item works well when you have devices moving between branch offices ...

in cases where distribution points are assigned to specific KSC groups, and you do not want them to move user devices to the distribution point action group when they are in the branch office.

The mechanism of the network administration agent will automatically switch the client to receive updates from distribution points of the branch office.

Edited by ElvinE5
Posted (edited)

as an example

you have a head office with addresses 10.10.10.0/24 and a branch office 10.10.20.0/24

you have a distribution point in the branch office linked to the group in KSC

but you would like the users of the head office to automatically start receiving updates from the local distribution point when they arrive at the branch office, and not try to connect to the main office.

create a connection

Спойлер

image.thumb.png.898d44c2ab2956da3dbdc979c2c0f0cb.png

add settings

we will not configure the connection profile, since we have one KSC server, leave "Home administration server"

Спойлер

image.thumb.png.73e228cb7f7b2feb32aba5a506ec05fd.png

save the settings and move on to adding a subnet to the distribution point.

Спойлер

image.thumb.png.50aaf71d02f5c13a44fcf531350b4ac2.png

give a new name to describe the network

Спойлер

image.png.2d601b2d2902f7822f7230b2cc138dbd.png

and select the subnet we created

Спойлер

image.png.c8160ea67124335921427d2ec298640f.png

 

save the changes ... and you can check

Спойлер

image.thumb.png.a4ce92025822c7acf2f8b35353bce78f.png

in my case, you can remove the binding of the point to the KSC group, since all devices from the network 10.10.20.0/24 will try to work with the distribution point we specified

 

I hope I was able to explain more clearly.

in any case, please first test this solution on a small group and in a test environment...to be sure that the settings are correct.

Edited by ElvinE5

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now


×
×
  • Create New...