How to create a rule in Kaspersky Security Center 11 for switching the Network Agent from one Administration Server to another based on the network location

This article concerns Kaspersky Security Center 11 (version 11.0.0.1131).

This feature is only available for devices running under Microsoft Windows operating system.

To create a rule for switching the Network Agent from one Administration Server to another when the network settings are changed:

1. Open Kaspersky Security Center.
2. Select a group of managed devices for which the rule must be created.
3. If you want to create a rule for all devices in the group, go to Policies and open the properties of the Network Agent policy.

4. If you want to create a rule for a specific device in a group, go to Devices, select the device and do the following:
   1. Open the properties of the device.
   2. Go to Applications, select Kaspersky Security Center 11 Network Agent and open its properties.

5. Go to Connectivity → Connection profiles.
6. In the Network location settings section, click Add.

7. Enter the name for network location description and select the connection profile.  

8. Click Add and select the value for the network to which the managed device is connected.
   • Default gateway address, to change the default gateway.
   • DHCP server address, to change the IP address of the DHCP server in the network.
   • DNS domain location, to change the DNS suffix of the subnet.
   • DNS server address, to change the IP address of thr DNS server in the network.
   • Windows domain accessibility, to change the status of the Windows domain to which the managed device is connected.
   • Subnet location, to change the address ad the mask of the subnet.
   • WNS server address, to change the IP address of the WNS server in the network.
   • Name resolvability, to change the resolvability status of the DNS or NetBIOS name of the device.
   • SSL connection address accessibility, to change the SSL connection status.

The conditions in the rule are connected using the AND logical operator. The network location will be switched if all conditions are true.

9. In the window that opens, specify the conditions for switching the Network Agent from one Administration Server to another. The name of the window may be different depending on the value selected at the previous step. Set the parameters for the condition of the rule:
   • Value. You can add one or more values for a condition.
   • Matches at least one value from the list.  The rule will be applied if any of the values is true. This option is set by default.
   • Does not match any of the values in the list.  The rule will be applied if there is no applicable value in the list.

Click OK.

10. Select the checkbox Description enabled. Click OK.

The rule for switching the Network Agent from one Administration Server to another based on the network location will be created and applied.

Network location descriptions are checked for compliance with the network parameters in the same order as in the list of descriptions. If the parameters match several descriptions, the description that is closest to the top of the list will be used. You can change the order of the rules in the list using the corresponding buttons on the right.