Preparing to install Kaspersky Security Center 10
The article concerns the following versions of Kaspersky Security Center 10:
- Service Pack 3 (version 10.5.1781.0)
- Service Pack 2 Maintenance Release 1 (version 10.4.343)
Before installation, check if hardware and software of the device meet the requirements for Administration Server and Administration Console.
Kaspersky Security Center stores its information in a SQL Server database. Choose the SQL server according to the recommendations and install it before installing Kaspersky Security Center.
To install Kaspersky Security Center, you must have the local administrator permissions.
A server version of the Network Agent will be installed along with the Administration Server component. It cannot be installed together with the regular version of the Network Agent. If the server version of the Network Agent is already installed on the computer, remove it and run the installation of the Administration Server again.
Ports used by Kaspersky Security Center 10
To be able to use all the features of Kaspersky Security Center 10, make sure the following ports are open on the devices:
|
Port number |
Protocol |
Description |
|
|---|---|---|---|
|
Device with the Administration Server |
|||
|
8060 |
HTTP |
Required for connection to the web server, which allows managing Kaspersky Security Center Web Console and organizing the internal company portal. |
|
|
8061 |
HTTPS |
Required for connection to the web server, which allows managing Kaspersky Security Center Web Console and organizing the internal company portal. Connections are encrypted. |
|
|
13000 |
TCP |
Required for:
|
|
|
13000 |
UDP |
Required for reporting on computers' shutdown. |
|
|
13111 |
TCP |
Required for connecting to the KSN proxy server. |
|
|
13291 |
TCP |
Required for connecting the Administration Console to the Administration Server. Uses the secure SSL connection/ |
|
|
13292 |
TCP |
Required for connecting to mobile devices. |
|
|
14000 |
TCP |
Required for:
|
|
|
17000 |
TCP |
Required for connecting to the Activation proxy server. Uses the secure SSL connection. |
|
|
17100 |
TCP |
Required for connection to the activation proxy server when activating mobile clients. |
|
|
18000 |
HTTP |
Used by Administration Server for receiving data from the Cisco® NAC authentication server. |
|
|
Device serving as an Update Agent |
|||
|
13000 |
TCP |
Used by client computers for connecting to the Update Agent. |
|
|
13001 |
TCP |
Used by managed devices for connecting to the Update Agent (if the device with Administration Server installed serves as the Update Agent). |
|
|
14000 |
TCP |
Used by client computers for connecting to the Update Agent. |
|
|
14001 |
TCP |
Used by managed devices for connecting to the Update Agent (if the device with Administration Server installed serves as the Update Agent). |
|
|
A device with the Network Agent installed. |
|||
|
7 |
UDP |
Used by the Wake On Lan feature. |
|
|
67 |
UDP |
Used on a PXE server host when operating system images are deployed. |
|
|
69 |
UDP |
||
|
15000 |
UDP |
Used for receiving a request for connection to the Administration Server, which allows receiving the information about the computer in the real-time mode. |
|
|
15001 |
UDP |
Required for connection with the Update Agent. |
|
For outgoing connections from client computers to the Administration Server and Update Agents, the port range 1024–5000 (TCP protocol) is used.
