Installation of Kaspersky Endpoint Security in Linux machines

Follow the procedures to  install Kaspersky Endpoint Security(KES) on Linux machines and add to admin console.

To install Kaspersky Endpoint Security on Linux machines require 2 packages:

1. Kaspersky Network                         :  klnagent-8.x.0-xx.i386.rpm
2. Kaspersky Endpoint Security         :  kes4lwks_8.x.x-x.i386.rpm

To install the Network Agent:                                     

1.      Run the command :  rpm -ivh klnagent-8.x.0-xx.i386.rpm

2.      Once the installation is completed, run the perl script to complete the installation of network agent:

/opt/kaspersky/klnagent/lib/bin/setup/postinstall.pl

3.      Enter the  Kaspersky Admin Server IP address.

             Once the Network agent is installed in the machine, it will be shown in the Kaspersky Admin  console.

To install the Kaspersky Endpoint security (KES) :

1.      Run the command: rpm -ivh kes4lwks_8.x.0-xx.i386.rpm

2.      Once the installation is completed, run the perl script to complete the installation of KES:

/opt/kaspersky/kes4lwks/bin/kes4lwks-setup.pl

After competing the above steps,the Linux machine will be listed in Kaspersky Admin console with protection status in Green.

How to upgrade ESXi host NIC Driver

1.     Download the driver from VMware website

2.     Extract the file :driverfile.vib which contains the Driver. And there is a ZIP file offline_bundle-1013484.zip  which is an offline bundle, this also contains the driver and we can also use this for the driver installation.

3.       Migrate /Power off the virtual machines running on the host Change the host into maintenance mode. The host can be put into maintenance mode from the command line with:

ESXi: # vim-cmd hostsvc/maintenance_mode_enter

ESX: # vimsh -n -e hostsvc/maintenance_mode_enter

Exit maintenance mode using the vimsh or vim-cmd command

ESXi: # vim-cmd /hostsvc/maintenance_mode_exit

ESX: # vimsh -n -e /hostsvc/maintenance_mode_exit

4.       Upload the VIB file or offline bundle to the ESXi location /tmp via PSCP(Refer - http://www.it.cornell.edu/services/managed_servers/howto/file_transfer/fileputty.cfm)

5.       Then open SSH shell for ESxi and go to the directory and check for the uploaded file.

          cd /tmp

6.       To install the Driver give the command using VIB file:

                #esxcli software vib install -v /tmp /net-Driverfile.vib

7.       To upgrade the drivers using offline bundle:

#esxcli software vib update -d /tmp/ drivertfile_offline_bundle-1013484.zip

8.       Verify that the VIBs are installed on your ESXi host:
# esxcli software vib list

                  Then reboot the ESXi host. 
            
Verify the new nic driver version using the below commands:
            #esxcli network nic list
            #ethtool -i vmnic-name


    

How to solve the Reconnection issue with Cisco Anyconnect

The root cause of  reconnecting Cisco Anyconnect is the incorrect MTU value.

Step 1 :- Use the following command to check the MTU value:

 netsh interface ipv4 show subinterfaces

The value of Cisco Anyconnect adapter, That may be a huge one containing at least 10 digits.

Step 2 :-  Set the MTU value by the following command (Use Command prompt as Administrator) :

netsh interface ipv4 set subinterface "loopback pseudo-interface 1" mtu=1273 store=persistent

"loopback pseudo-interface 1" is the network adapter name for Cisco Anyconnect.

1273 is the appropriate MTU value , The value might vary from machine to machine, which works fine with Cisco Anyconnect in my system.

------------------------------------------------------------------------------------------------------

Note:- Open Command Prompt with Administrator Privilege and run the commands. 

------------------------------------------------------------------------------------------------------

Tips to solve the Kaspersky Database Obsolete issue without systems restart

This method will help us to solve this issue without restarting or reinstalling the Kaspersky Anti-Virus software

1.       From Kaspersky update settings, In application update setting go to "update source"

·          Select "Kaspersky Lab update servers" (move it to Top) uncheck Kaspersky Security                center or other paths

·          In Proxy server settings disable/Uncheck proxy option

·          Select "copy updates folder"

·          "Save" all settings

2.       In the advance settings Go to Advanced Protection Settings section

·          Uncheck "Self defence "

·          Uncheck "Disable external control of the system service"

3.       After changing the settings as defined above please proceed further as instruction given

·          Stop "Kaspersky protection "( Exit from icon tray)

·          Open "Services" (services.msc)

a.        Stop the services" Kaspersky end point security"

b.        Stop the services" Kaspersky Network Agent"

4.       Open folder properties      

·           Select show "hidden files from folder properties"

5.       Open  "C:\ProgramData\Kaspersky Lab\KES8\Bases"

·          Delete all files from "Bases" folder

OR

·          Delete the file "blst2-0607g.xml" ( File is located inside the bases folder)

6.       Start the services "Kaspersky Network Agent"

7.       Start the services "Kaspersky end point security"

8.       Update  "Kaspersky databases from lab server"

9.       In advanced Protection Settings section Enable both  "Self defence" and  "Disable external    control of the system service" options

10.    After update complete revert the" update sources "  to default connection state.

11.    Instead of restarting the system we can restart the service for completing the update

·          Stop "Kaspersky protection "( Exit from icon tray)

·          Restart the services Kaspersky Network Agent (from services)

·          Restart the services Kaspersky end point security  (from services)

How to stop the Check disk /Scan disk after installing Microsoft update KB2823324

 How to stop the Check disk /Scan disk after installing Microsoft update KB2823324

1.       Type "services.msc" in the Start menu search box, and press Enter. Alternatively, launch the    Services interface via the Administrative Tools folder in the Control Panel.

2.       Stop the Windows Update service. Leave the window open as you will need to restart the service in step

3.       Navigate to your Windows folder (C:\WINDOWS) and delete the folder named "SoftwareDistribution"

4.       Restart the Windows Update service

5.       Do windows Updates

6.       Uninstall KB2823324

7.       open command prompt run as administrator and run

C:\Windows\system32>chkdsk c: /f

Chkdsk cannot run because the volume is in use by another

process.  Would you like to schedule this volume to be

checked the next time the system restarts? (Y/N)    Y

C:\Windows\system32>chkntfs /d 

8.       Restart the system

      The system check disk issues will be solved after completing the above steps.

      If the check disk is again prompting while booting windows

1.       Remove the windows updates

·                KB 2817183

·                KB 2813347

·                KB 2813170

2.       Run and finish the check disk while booting up windows.