Klnagchk utility for analyzing Network Agent connection parameters
This article concerns:
- Kaspersky Security Center 13.2 (version 13.2.0.1511)
- Kaspersky Security Center 13.1 (version 13.1.0.8324)
- Kaspersky Security Center 13 (version 13.0.0.11247)
- Kaspersky Security Center 12 (version 12.0.0.7734)
- Kaspersky Security Center 11 (version 11.0.0.1131b)
The klnagchk.exe utility is designed to analyze the parameters for connecting Network Agent and the Administration Server.
Run the klnagchk utility as an administrator and only from the Network Agent installation folder.
You can find the utility in the Network Agent folder. This is located at C:\Program Files\Kaspersky Lab\NetworkAgent\ by default.
When run from the command line, the klnagchk utility does the following depending on the switches in use:
- Displays or logs to an event report the values of the connection settings for connecting the Network Agent that is installed on a client device to the Administration Server.
- Logs Network Agent statistics from the last time it was run and the results of running the utility to an event log, or outputs the information to the screen.
- Establishes a connection between the Network Agent and the Administration Server. If the connection could not be established, the utility sends an ICMP package to check the status of the device with the Administration Server installed.
How to check the connection between the client device and the Administration Server
Run the klnagchk utility from the command line.
klnagchk [-logfile <file name>] [-sp] [-savecert <path to certificate file>] [-restart] [-sendhb]
- -logfile <file name> — write the values for the parameters for connecting Network Agent to the Administration Server to a log file. By default this information is saved in a standard output stream (stdout). If no switch is used, the parameters, results and error messages will be displayed on the screen.
- -sp — outputs the password for proxy server authentication. This parameter is used if the connection is being established via a proxy server.
- -savecert <file name> — save the certificate used by Network agent to connect to the Administration Server to the specified file.
- -restart — restart Network Agent once the utility has finished running.
- -sendhb — send a heartbeat.
Description of the connection parameters
When started, the utility will access the Network Agent configuration files and output the connection parameters:
- Administration Server address — the address of the Administration Server.
- Use SSL — use of a secure connection when connecting to the Administration Server. Takes the values 0 or 1.
- Server SSL ports — allowed port numbers for secure connection to the Administration Server.
- Server ports — allowed port numbers for standard connection to the Administration Server.
- Use proxy server — whether a proxy server is to be used. Takes the values 0 or 1.
- Proxy location — proxy server address and port, separated by a colon.
- Proxy login — username for accessing the proxy server.
- Proxy password — password for accessing the proxy server. Only displayed when using the sp switch.
- Certificate — availability of an Administration Server certificate on the client device. If, for instance, Network Agent has never managed to connect to the Administration Server successfully, there might not be a certificate on the device. Takes the values 0 or 1.
- Open UDP port — usage of a UDP port by Network Agent for receiving Administration Server synchronization requests.
- Numbers of UDP ports — UDP port numbers available for use by Network Agent.
- Ping period — standard time interval between synchronizations, in seconds.
- Connection timeout — connection time-out.
- RW timeout — read/write operation time-out.
- Device ID - unique ID in the network.
The utility checks the Network Agent’s status. If the service is not running, the utility will terminate. If the service is running, the utility will output connection statistics:
- Ping count — number of attempts to connect to the Administration Server.
- Succ. pings — number of successful connection attempts.
- Sync count — number of synchronization attempts.
- Succ. syncs — number of successful synchronization attempts.
- Last ping — date and time of last connection.