Kaspersky Security Center Antivirus

This template assesses the status and overall performance of a Kaspersky Security Center Antivirus.


Prerequisites: WMI access to the target server.

Credentials: Windows Administrator on the target server.

Monitored Components:

Service: Kaspersky Activation Proxy

     This monitor returns CPU and memory usage of Kaspersky Activation Proxy. This service that gives Network Agent access to activation servers on which you can activate installed applications.


Service: Kaspersky Lab Administration Server

     This monitor returns CPU and memory usage of Kaspersky Lab Administration Server.  Administration Server manages Kaspersky Lab applications installed throughout an enterprise network.


Service: Kaspersky Lab Network Agent

     This monitor returns CPU and memory usage of Kaspersky Lab Network Agent. Network Agent coordinates the interaction between the Administration Server and Kaspersky Lab applications installed on client computers.


Service: Kaspersky Lab Web Server

     This monitor returns CPU and memory usage of Kaspersky Lab Web Server.


TCP Port: Administration server (13000)

     This component monitor tests the ability of Administration Server to accept incoming sessions. By default it monitors TCP port 13000. This TCP port is required for gathering the data from client hosts, connecting Update agents and connecting slave Administration servers. Uses secure SSL connection.


TCP Port: Administration server (14000)

     This component monitor tests the ability of Administration Server to accept incoming sessions. By default it monitors TCP port 14000. This TCP port is required for gathering the data from client hosts, connecting Update agents and connecting slave Administration servers. Uses secure SSL connection.


TCP Port: Kaspersky Security Center Web-Console (HTTP)

     This component monitor tests the ability of Kaspersky Security Center Web-Console (HTTP) to accept incoming sessions. By default, it monitors TCP port 8060. This TCP port is required for connecting to the web server to manage Kaspersky Security Center Web-Console and to organize inner corporate portal.


TCP Port: Kaspersky Security Center Web-Console (HTTPS)

This component monitor tests the ability of Kaspersky Security Center Web-Console (HTTPS) to accept incoming sessions. By default, it monitors TCP port 8061. This TCP port is required for connecting to the web server to manage Kaspersky Security Center Web-Console and to organize inner corporate portal. Encryption is used upon connection.


TCP Port: Activation Proxy Server

     This component monitor tests the ability of Activation Proxy Server to accept incoming sessions. By default, it monitors TCP port 17000. This TCP port is required for connecting to an activation proxy server. Uses secure SSL connection.


TCP Port: Web Console

     This component monitor tests the ability of Activation Proxy Server to accept incoming sessions. By default, it monitors TCP port 13291. Used for a secure SSL connection between Web Console and Administration Server.

     Note: This monitor is disabled by default.


Warning and Errors Events: Network Agent

     This monitor returns warning and error events of Kaspersky Network Agent.

     Source name: klnagent

     Event log: Kaspersky Event Log


Warning and Errors Events: Administration Server

     This monitor returns warning and error events of Kaspersky Administration Server.

     Source name: kladminserver

     Event log: Kaspersky Event Log


Warning and Errors Events: Web Server

     This monitor returns warning and error events of Kaspersky Web Server.

     Source name: klwebsrv

     Event log: Kaspersky Event Log


Warning and Errors Events: Activation Proxy

     This monitor returns warning and error events of Kaspersky Activation Proxy.

     Source name: klactprx

     Event log: Kaspersky Event Log

Portions of this document are courtesy of Kaspersky, copyright 2013: http://support.kaspersky.com/9297

Last updated: 12/4/2013