Proper Network Agent Setup for over internet KSC Connection

[khairulaizat92]

i have a few PC that on our branch offices. And the branch office internet and network are not connected to the HQ network.

 

So I have made change the default configuration of the network agent installer by replacing the default internal HQ internal KSC Host IP, to the static Public IP that has properly setup to point to the KSC Host. Then create installer package, which then I used to install to the Branch PCs.

 

The connection are successful. But I wonder if this the proper way? I tried to sent install KES install command over the internet through KSC, but it always failed. 

[alexcad]

You cannot trigger this clients this way. 

A better way:
Establish a distribution point in the branch office and connect it via a connection-gateway in a DMZ.

Connecting clients via Public IP is also discussed here https://community.kaspersky.com/kaspersky-corporate-products-27/proper-kaspersky-network-agent-connection-profile-auto-switching-11713 

Regards
Alex