Kaspersky Security Center

Creating a Network Agent switching rule by network location

14 April 2024

ID 231194

Expand all | Collapse all

Network Agent-switching by network location is available only on devices running Windows and macOS.

To create a rule for Network Agent switching from one Administration Server to another if network settings change:

  1. If you want to create a rule for a group of managed devices, open the Network Agent policy of this group. To do this, do the following:
    1. In the main menu, go to DevicesPolicies & profiles.
    2. Click the current path link.
    3. In the window that opens, select a required administration group.

      After that, the current path is changed.

    4. Add the Network Agent policy for the group of managed devices. If you have already created it, click the Network Agent policy name to open the policy properties.
  2. If you want to create a rule for a specific managed device, do the following:
    1. In the main menu, go to DevicesManaged devices.
    2. Click the name of the managed device.
    3. In the managed device properties window that opens, go to the Applications tab.
    4. Click the name of the Network Agent policy to which only the selected managed device applies.
  3. In the properties window that opens, go to Application settings → Connectivity → Connection profiles.
  4. In the Network location settings section, click the Add button.
  5. In the properties window that opens, configure the network location description and switching rule. Specify the following network location description settings:
    • Description
    • Use connection profile
    • Description enabled
  6. Select conditions for the Network Agent switching rule:
    • Condition for DHCP server address—The IP address of the network Dynamic Host Configuration Protocol (DHCP) server has changed.
    • Condition for default connection gateway address—The address of the main network gateway has changed.
    • Condition for DNS domain—The DNS suffix of the subnet has changed.
    • Condition for DNS server address—The IP address of the network DNS server has changed.
    • Condition for WINS server address—The IP address of the network WINS server has changed. This setting is available only for devices running Windows.
    • Condition for name resolvability—The DNS or NetBIOS name of the client device has changed.
    • Condition for subnet—Changes the subnet address and mask.
    • Condition for Windows domain accessibility—Changes the status of the Windows domain to which the client device is connected. This setting is available only for devices running Windows.
    • Condition for SSL connection address accessibility—The client device can or cannot (depending on the option that you select) establish an SSL connection with a specified Server (name:port). For each server, you can additionally specify an SSL certificate. In this case, the Network Agent verifies the Server certificate in addition to checking the capability of an SSL connection. If the certificate does not match, the connection fails.

    The conditions in a rule are combined by using the logical AND operator. To trigger a switching rule by the network location description, all of the rule switching conditions must be met.

  7. In the condition section, specify when Network Agent should be switched to another Administration Server. For this purpose, click the Add button, and then set the condition value.

    Also, the Matches at least one value from the list option is enabled by default. You can disable this option if you want the condition to be met with all specified values.

  8. Save your changes.

A new switching rule by the network location description is created; any time its conditions are met, the Network Agent uses the connection profile specified in the rule to connect to the Administration Server.

See also:

About switching Network Agent to other Administration Servers

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.