Hopefully, everyone is having a good start of their 2020!
Time to continue that good start with more troubleshooting. This time I will list some common problems and mistakes that you can encounter within a Kaspersky Security Center.
So let’s start by listing some issues and mistakes I have seen and/or encountered within Kaspersky Security Center.
I am deploying license keys to clients through a task within Kaspersky Security Center, but even when successful it will not activate Kaspersky!
- Check whether the license is valid for the operating system of the devices (Server/Workstation) and the variant of Kaspersky. This can usually be found within the description or in the mail the key came with.
- Make sure that within a license deploy task, the option to “add this key as an additional key” is not checked.
- If above options did not help, you might have to remove the current license key from the device. We can do this either manually through the GUI on the device itself or you can instead run a batch script if you want to do it remotely or on multiple devices. Be aware! This only works when a password is set on Kaspersky clients!
We have a full scan running weekly, but Kaspersky Security Center still gives the status “Virus scan has not been performed in a long time”!
Be sure to check the scan task options. Under Schedule there is the option to Run missed task.
If devices are offline during the scheduled time, it will start the scan the next time it is available.
Windows keeps telling me it has disabled the firewall because of Kaspersky Firewall being on, but we have Firewall turned off in the Kaspersky Security Center policy!
This happens when the Firewall component is installed, regardless of whether it is active.
The best way to avoid this is to turn off the option within the installation package in Kaspersky Security Center (See images below).
Any installation after changing that will not have the Firewall component installed any more.
If Kaspersky already is installed we do not want to reinstall the software. For this we can create a task with task type “Change application components”. In this you can set the options as desired (with Firewall off for example) and it will deinstall all the components that are not checked.
Both the client and the agent are installed, but it does not connect to our Kaspersky Security Center or cannot retrieve policies from it!
- In the “Services” list for the device, check whether the Kaspersky Security Center Network Agent service is running
- Open klcsngtgui.exe. Here you can look at the server name to make sure it is trying to connect correctly and run a Utility tool to check whether the connection works correctly.
Klcsngtgui.exe can be found in the installation folder for the agent (Mine, for example, is available in: C:\Program Files (x86)\Kaspersky Lab\NetworkAgent)
If the utility tool results in a failure to connect, we will have to make sure we can reach the Security Center (IP/DNS) and allow for port access for all required ports (These can be found through Kaspersky’s support page and search engine).
How can I best install a new version of Kaspersky over the previous one?
Preferably? Do not install it over the old one.
Kaspersky has a chance to create problems when installing a new version when the old one is still installed.
So even for smaller updates I would recommend doing an uninstall -> Restart -> Install of a new version.
Luckily, we can do this easily because tasks have a schedule setting that allows them to run after another task has completed successfully. Which means you can make a task to uninstall Kaspersky and have a task to install the newer version run when the uninstall task has completed successfully.
This works device-independent! Meaning If you run an uninstall task over 5 devices and the install task is set to run after successfully completing the uninstall task, it will start the install task on even a single device that finished the uninstall task. It will NOT have to wait until all 5 devices have the uninstall task run before starting the install task.
A customer already has Kaspersky. These however are linked to a different Kaspersky Security Center. How can I change where they connect to without having to reinstall all Kaspersky Agents?
There are 2 options.
One is through the Kaspersky Security Center they are linked to right now. When creating a task, under the Kaspersky Security Administration Server task types, there is an option for a “Change Administration Server” task. You can have this run on the clients and let it change their settings to connect to your Security Center.
The second option is by doing it through CMD. The agent installation has a klmover.exe file which allows for adjusting of the connection.
Well, these were some of the more common issues I have encountered in Kaspersky Security Center lately and their possible solutions.
Hopefully, it will either help or enlighten someone new to Kaspersky Security Center.
Categories: Anti-virus, Troubleshooting, Kaspersky
Patrick Berger AKA Powershellder.
[ i ] Parallax section below. Click on the section below to upload image. Don't worry if it looks weird in the Weebly editor. It'll look normal on your published site.
To edit or delete your image, press the "toggle" button below. Then, hover over your image until a popup appears with the "edit" and "delete" options. If you don't want a white content section, leave it blank. It will disappear on your live website.