Application architecture

Kaspersky Security is an integrated solution that protects virtual machines on a VMware ESXi hypervisor.

Kaspersky Security is supplied as two images of SVM (secure virtual machine):

• Image of the SVM with the File Anti-Virus component
• Image of the SVM with the Network Threat Detection component

An SVM (secure virtual machine) is a virtual machine on which a component of Kaspersky Security is installed. An SVM is deployed on a VMware ESXi hypervisor. For protection and scanning, the application does not need to be installed on each virtual machine.

Kaspersky Security components are registered as services in VMware NSX Manager:

• The File Anti-Virus component is registered as a file system protection service (Kaspersky File Antimalware Protection).
• The Network Threat Detection component is registered as a network protection service (Kaspersky Network Protection).

When Kaspersky Security services are deployed in a VMware cluster, SVMs with Kaspersky Security components are deployed on each hypervisor in the cluster (see the figure below).

SVMs with the File Anti-Virus component provide protection against viruses and other malware for all virtual machines that meet the conditions for protection of virtual machines.

SVMs with the File Anti-Virus component provide anti-virus scanning of files of all virtual machines that meet the conditions for scanning virtual machines.

SVMs with the Network Threat Detection component provide protection against network threats for all virtual machines that meet the conditions for protection of virtual machines against network threats.

The Integration Server enables interaction between a VMware virtual infrastructure and Kaspersky Security components (the Kaspersky Security administration plug-in and SVMs with the File Anti-Virus and Network Threat Detection components).

Application architecture

The application is managed via Kaspersky Security Center, which is a system for centralized remote administration of Kaspersky Lab applications (see the Kaspersky Security Center documentation).

Kaspersky Security interacts with Kaspersky Security Center via Network Agent, which is a component of Kaspersky Security Center. Network Agent is included in the SVM image.

The Kaspersky Security administration plug-in provides the interface for managing Kaspersky Security through Kaspersky Security Center. The Kaspersky Security administration plug-in is included in the Kaspersky Security distribution kit. The Kaspersky Security administration plug-in needs to be installed on the computer on which the Kaspersky Security Center Administration Console is installed.