Kaspersky security Center 14: Kaspersky endpoint security for windows

[AmarNa]

I install network agent on the laptop manually, the laptop have different IP address range from the server since it is take internet from Mikrotik router(Nated network). The router have same IP address range as the server. The laptop and the server(where the Kaspersky is operated) can ping each other, but Kaspersky security center 14 can't detect network agent that installed on laptop manually.
I get this message : Attempting to connect to Administration Server...Transport level error has occurred while connecting to http://avsrv:13000: failed to resolve the address.

[ElvinE5]

The screenshot shows that the agent is trying to connect to the server using a DNS name that it cannot recognize... check the availability of the server using the DNS name

You can also change the server connection parameter to an IP address using the klmover utility

https://support.kaspersky.com/KSC/14.2/en-US/227839.htm

located in the same place (as in the screenshot), run commandnubb line as administrator and run the command

klmover.exe -address <server IP address>

 

[AmarNa]

Hello Sir,
Thank you first. I can ping the DNS name :(avsrv.internet.local) but I cannot ping the NetBIOS name : (AVSRV).
while the computers that have the same IP address range with the server can ping both.

 

[JL - KL DACH]

Hello AmarNa,

the error is really unique, there is no way to resolve the address. 
It is necessary to properly configure DNS and name resolution in your environment.
If IPaddress of your server do not change use the klmover command from ElvinE5 and move the connection to the IP instead of the server name.

Thank you in advance

Best Regards

 

[Demiad]

@AmarNa hello

I think you need to change the server address to a FQDN in the Network Agent package setting on the KSC.

Then retry the installation with the updated package.

 

[AmarNa]

I hope that you are well. Thank you for these helpful responses. I solved my problem, it was a mistake in the FQDN name.

 

 

[AmarNa]

I am trying to solve another problem if you can help me please. when I install the Network Agent manually on the client device, I can then install the endpoint security remotely from the server, While when I am trying to install the network Agent remotely from the the server I face a permission denied problem.
Please can I get a help ??!!

[Demiad]

Is the target computer is joined to a Windows-domain?

Is the account the server service is running from a domain account?

Check it:

wmic service where 'name = "kladminserver"' get startname

[AmarNa]

No Sir, the target computer is not joined to the domain.

 

[Demiad]

1) You are needed to disable remote UAC (not local UAC) on the target device:

REG ADD HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f

Microsoft documentation:

• https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/user-account-control-and-remote-restriction
• https://learn.microsoft.com/en-us/windows-server/storage/file-server/best-practices-analyzer/smb-open-file-sharing-ports

2) Add an account to connect to the administrative shared folders on the target device in the installation task settings (Account settings):

https://support.kaspersky.com/ksc/14.2/173072