Kaspersky Security for Virtualization 4.0 Agentless includes the following built-in tools:
autopatch_client
autopatch_client is the client for running and stopping the task of installing the downloaded autopatches.
Default action: running the task.
To stop the task, use the `-s` key.
check_policy_client
check_policy_client is the client that checks if the security policy is used by default or if it was submitted from Kaspersky Security Center.
detect_cache_purge_client
detect_cache_purge_client is the client for clearing the cache of detects.
It is only available on a file protection virtual machine.
emergency_event_log_client and event_log_client
emergency_event_log_client and event_log_client are the clients for generating events which are sent to Kaspersky Security Center.
event_log_client sends the event to the product, while emergency_event_log_client writes it to /var/opt/kaspersky/ksv/events.
inventory_view_format_client
inventory_view_format_client – a new (recommended) client for displaying an inventory tree.
Default action: displaying an inventory tree with the default format line value.
The `-m` key switches the client to the flat list display mode.
the format line is set by the `-f` key. It can contain the values listed below.
Identification:
- %i - ID of the managed object (moid), e.g. vm-51
- %I - Instance UUID, e.g. 501FDB2F-C55C-F4CC-D808-84E0D44AC49D
- %h - Host name, e.g. linux.avp.ru
- %l - Location ID, e.g. 564D304D-4499-8EB7-8024-7E18E179D2A3
- %u - BIOS UUID, e.g. 421F2D74-4A66-2D23-6A71-4852D901A3C8
Guest operating system information:
- %g - Guest OS type, e.g. winLonghornGuest
- %o - Full name of the OS, e.g. Microsoft Windows 7 (32-bit)
- %O - Type Possible values: ServerOS / WorkstationOS / UnknownOS
Virtual machine parameters:
- %p - Virtual machine state Possible values: PowerOn / PowerOff / Suspend / StandBy / Unknown
- %t - If the machine is a VM template Possible values: isTemplate / notTemplate
- %m - If the machine is an SVM Possible values: isSVM / notSVM
- %t - If the machine is a service VM Possible values: isManaged / notManaged
Protection and activity (only available on a file protection virtual machine):
- %P - If the virtual machine is under the file protection policy of VMware NSX Possible values: Applied / NotApplied / NotApplicable / Unknown
- %e - If OAS protection of the virtual machine enabled in the protection profile of Kaspersky Security for Virtualization Possible values: ShouldProtect / ShouldNotProtect
- %E - If the connection to the virtual machine through VMware EPSec is active Possible values: EPSecOn / EPSecOff
- %E - If the ODS scanning of the virtual machine through VMware EPSec is available Possible values: EPSecAvailable / EPSecUnavailable
Temporary labels (in the format 2016-06-29T12:52:49.0000000Z or Never):
- %r - Time of the latest notification about the On-Access protection activity
- %s - Start time of the latest On-Demand scan
- %s - Finish time of the latest On-Demand scan
- %n - Time of the latest incoming network attack detection
- %n - Time of the latest outgoing network attack detection
- %v - Time of the latest malware detection
inventory_view_tree_client
inventory_view_tree_client – an old client for displaying an inventory tree.
Default action: displaying an inventory tree with the default format line value.
The `-m` key switches the client to the flat list display mode.
ksvscan_client
ksvscan_client - a client for displaying information about the antivirus databases’ status
Only available on a file protection virtual machine.
klmover
klmover - a tool which allows changing the Kaspersky Security Center Administration Server address and the data exchange mode in the SVM configuration settings.
licenser_client
Default action: CheckLicense
licenser_client - license management client. Available commands which can be added through the `-a` key:
- InstallActiveKey (the license key file must be sent submitted using the `-k` key)
- RevokeActiveKey (the license key file must be sent submitted using the `-k` key)
- InstallReserveKey (the license key file must be sent submitted using the `-k` key)
- RevokeReserveKey (the license key file must be sent submitted using the `-k` key)
- ActivateActiveCode (the text of the license code must be sent submitted using the `-c` key)
- ActivateReserveCode (the text of the license code must be sent submitted using the `-c` key)
- CheckLicense (does not require additional parameters)
- SetSettings (submit the language and the installation ID through the keys `-l` and `-u`)
product_status_client
product_status_client - a client for checking the product status.
Default action: getting the return key for scripts.
Use the `-v` key to display the read notification.
qb_client
qb_client – quarantine and backup client.
-l [ --list ] - get information about objects (all objects if specific objects are not specified).
-r [ --restore ] - list of indexes of the objects to be restored (separated by spaces).
-r [ --restore ] - list of IDs of objects to be restored (separated by spaces).
-r [ --restore ] - list of indexes of the objects to be deleted (separated by spaces).
-r [ --restore ] - list of IDs of the objects to be deleted (separated by spaces).
-E [ --export ] - the parameter for exporting backup copies from a folder.
-I [ --import ] - the parameter for importing backup copies to a folder.
-s [ --source ] - the parameter for the source folder of backed up objects. If the folder is empty, remoting is used.
tracer_configurator_client
tracer_configurator_client – changing the trace level and use of the file / system log.
updater_client
updater_client – available commands:
update
rollback
vicreds
vicreds – client for viewing or editing the parameters of vcenter.db connection to vcenter/vims/vrm.
The `-r` key is used for viewing the parameters.
The specified parameters are written to vcenter.db and reviewed upon the product restart.
To add the parameters to the product immediately, the key `-y` is used.
vicreds_test_client
vcenter_creds_test_client – client for testing connection settings to vcenter/vims/vrm by connecting to the specific server with specified parameters
vshield_manager_client
vshield_manager_client – manual registrering / unregistering / registration check of VMware vShield EPSec with specified parameters
Only available on a file protection virtual machine.
vcenter_creds
vcenter_creds – client for viewing or editing the parameters of vcenter.db connection to vcenter/vims/vrm.
vcenter_creds_test_client
vcenter_creds_test_client – client for testing connection settings to vcenter/vims/vrm by connecting to the vCenter server.
