Hardware and software requirements

Hardware and software requirements for servers for installing Kaspersky Anti Targeted Attack Platform

Deploying the application on a virtual platform requires installing the VMware ESXi hypervisor version 6.7.0 or 7.0.

For the application to work correctly in a virtual environment, you must install an up-to-date update package for the hypervisor.

For the Central Node, Sensor and Sandbox hardware requirements see the Sizing Guide.

Hardware requirements for installing the Endpoint Agent component

The Endpoint Agent component can be represented by the following applications:

• Kaspersky Endpoint Agent for Windows
• Kaspersky Endpoint Agent for Linux
• Kaspersky Endpoint Security for Windows
• Kaspersky Endpoint Security for Linux

For hardware requirements of the applications, see the Online Help of the relevant application: Kaspersky Endpoint Agent for Windows, Kaspersky Endpoint Agent for Linux, Kaspersky Endpoint Security for Windows, Kaspersky Endpoint Security for Linux.

Hardware and software requirements for using the web interface of Kaspersky Anti Targeted Attack Platform

One of the following browsers must be installed on the computers in order to configure and manage the application using the web interface:

• Mozilla Firefox for Linux.
• Mozilla Firefox for Windows.
• Google Chrome for Windows.
• Google Chrome for Linux.
• Edge (Windows).
• Safari (Mac).

Minimum screen resolution to use web interface: 1366х768.

Compatibility of Kaspersky Endpoint Agent for Windows versions with Kaspersky Anti Targeted Attack Platform versions

The Kaspersky Endpoint Agent application uses predefined settings that determine the impact that it has on the performance of the local computer under scenarios of information retrieval and interaction with the Central Node component.

If the version of Kaspersky Anti Targeted Attack Platform installed on Central Node servers is incompatible with the version of Kaspersky Endpoint Agent installed on computers on the corporate LAN, the functionality of Kaspersky Anti Targeted Attack Platform may be limited.

Information about the compatibility of Kaspersky Endpoint Agent component versions with Kaspersky Anti Targeted Attack Platform versions is listed in the table below.

Compatibility of Kaspersky Endpoint Agent for Windows versions with Kaspersky Anti Targeted Attack Platform versions

Version Kaspersky Endpoint Agent	Type Kaspersky Endpoint Agent	Compatibility with KATA 3.7	Compatibility with KATA 3.7.1	Compatibility with KATA 3.7.2	Compatibility with KATA 4.0	Compatibility with KATA 4.1	Compatibility with KATA 5.0	Compatibility with KATA 5.1
Endpoint Agent 3.7	Standalone installation or as part of KES versions 11.2 and 11.3	No	No	No	No	No	No	No
Endpoint Agent 3.8	Standalone installation	Yes	Yes	There are limitations The amount of data sent by Kaspersky Endpoint Agent is limited: AMSI scan event data not available. The amount of data sent by Kaspersky Endpoint Agent for Module loaded, File changed, Registry modified, Process: console interactive input events is limited. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform Help for version 3.7.1. The Get list of files and processes task is not supported.	There are limitations The amount of data sent by Kaspersky Endpoint Agent is limited: Event information does not display the OS name and OS name fields. The amount of data sent by Kaspersky Endpoint Agent is limited for the events: Module loaded, File changed, Registry modified, Process: console interactive input and Connection to remote host. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform Help for version 3.7.1. AMSI scan event data not available. The tasks Collect data, Start YARA scan, Service management are not supported.	There are limitations The amount of data sent by Kaspersky Endpoint Agent is limited: Event information does not display the OS name and OS name fields. The amount of data sent by Kaspersky Endpoint Agent is limited for the events: Module loaded, File changed, Registry modified, Process: console interactive input and Connection to remote host. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform Help for version 3.7.1. AMSI scan event data not available. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform version 3.7.2 Help. The tasks Collect data, Start YARA scan, Service management, Get NTFS metafiles, Get process memory dump, Get registry key are not supported. For detailed information about these tasks, refer to Kaspersky Anti Targeted Attack Platform version 4.0 Help.	There are limitations The amount of data sent by Kaspersky Endpoint Agent is limited: AMSI scan event data not available. The amount of data sent by Kaspersky Endpoint Agent is limited for the events: Module loaded, File changed (File created), Registry modified, Process: console interactive input. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform version 3.7.1 Help. OS name, OS name, and Host IP are not displayed in information about events. The tasks Start YARA scan, Service management, Get forensics, Get NTFS metafiles, Get process memory dump, Get registry key, Get disk image, Get memory dump are not supported.	No
Endpoint Agent 3.9	Standalone installation or as part of EPP applications	Yes	Yes	There are limitations	There are limitations	There are limitations	There are limitations	No
Endpoint Agent 3.10	Standalone installation or as part of EPP applications	No	There are limitations The server of this Kaspersky Anti Targeted Attack Platform version can receive a limited scope of data from the Kaspersky Endpoint Agent application for the events: Module loaded, File changed, Registry modified, Process: console interactive input. Details of the scope of data for these events are described in the Kaspersky Anti Targeted Attack Platform version 3.7.1 Help.	Yes	There are limitations The amount of data sent by Kaspersky Endpoint Agent is limited: The Host IP is not displayed in information about events. Getting an autorun points list using the Get forensics task is not supported. The tasks Start YARA scan and Service management are not supported.	There are limitations The amount of data sent by Kaspersky Endpoint Agent is limited: The Host IP is not displayed in information about events. Getting a list of autorun points using the Collect data task is not supported. The tasks Start YARA scan, Service management, Get NTFS metafiles, Get process memory dump, Get registry key are not supported.	There are limitations The amount of data sent by Kaspersky Endpoint Agent is limited: The Host IP is not displayed in information about events. Getting a list of autorun points using the Collect data task is not supported. The tasks Start YARA scan, Service management, Get NTFS metafiles, Get process memory dump, Get registry key, Get disk image, Get memory dump are not supported.	No
Endpoint Agent 3.11	Standalone installation or as part of KES version 11.7	No	There are limitations	Yes	There are limitations	There are limitations	There are limitations	No
Endpoint Agent 3.12	Standalone installation	No	No	No	Yes	There are limitations The amount of data sent by Kaspersky Endpoint Agent is limited: Scanning autorun points using the Start YARA scan task is not supported. The tasks Get NTFS metafiles, Get process memory dump, Get registry key are not supported.	There are limitations The amount of data sent by Kaspersky Endpoint Agent is limited: Scanning autorun points using the Start YARA scan task is not supported. The tasks Get NTFS metafiles, Get process memory dump, Get registry key, Get disk image, Get memory dump are not supported.	There are limitations
Endpoint Agent 3.13	Standalone installation	No	No	No	There are limitations The server of this Kaspersky Anti Targeted Attack Platform version can receive a limited scope of data from the Kaspersky Endpoint Agent application: The tasks Get NTFS metafiles, Get process memory dump, Get registry key are not supported.	Yes	There are limitations The amount of data sent by Kaspersky Endpoint Agent is limited: The tasks Get disk image and Get memory dump are not supported.	There are limitations
Endpoint Agent 3.14	Standalone installation	No	No	No	There are limitations The server of this Kaspersky Anti Targeted Attack Platform version can receive a limited scope of data from the Kaspersky Endpoint Agent application: creation of Get NTFS metafiles, Get process memory dump, Get registry key, Get disk image, Get memory dump tasks is not available in the web interface of the application.	There are limitations The server of this Kaspersky Anti Targeted Attack Platform version can receive a limited scope of data from the Kaspersky Endpoint Agent application: The tasks Get disk image and Get memory dump are not supported.	Yes	Yes
Endpoint Agent 3.15	Standalone installation	No	No	No	No	No	No	Yes

Page top

Compatibility of Kaspersky Endpoint Agent for Windows versions with EPP applications

If you want to use the Kaspersky Endpoint Agent application as the Endpoint Agent component, you can install just the Kaspersky Endpoint Agent, or configure the integration of Kaspersky Endpoint Agent with workstation protection applications (Endpoint Protection Platform, hereinafter also "EPP"), Kaspersky Endpoint Security for Windows, Kaspersky Security for Windows Server, and Kaspersky Security for Virtualization Light Agent. If the integration of applications is configured, Kaspersky Endpoint Agent also sends the information about threats detected by EPP applications and their processing results to the Central Node server.

The integration scenarios described above do not work when Kaspersky Endpoint Agent is installed on a virtual desktop in Virtual Desktop Infrastructure.

Integration of Kaspersky Endpoint Agent with Kaspersky Endpoint Security for Windows and Kaspersky Security for Windows Server requires installing Kaspersky Endpoint Agent as part of those applications.

Compatibility of Kaspersky Endpoint Agent for Windows with versions of Kaspersky Security for Windows Server

You can install the following versions of Kaspersky Endpoint Agent as part of Kaspersky Security for Windows Server:

• Kaspersky Endpoint Agent 3.9 as part of Kaspersky Security 11 for Windows Server.
• Kaspersky Endpoint Agent 3.10 as part of Kaspersky Security 11.0.1 for Windows Server.

When you install Kaspersky Endpoint Agent as part of Kaspersky Security for Windows Server, the standalone Kaspersky Endpoint Agent of the same or earlier version is removed. If Kaspersky Endpoint Agent installed as part of Kaspersky Security for Windows Server has an earlier version, it will not be installed. In this case, you must first remove the standalone Kaspersky Endpoint Agent application.

If necessary, you can upgrade the Kaspersky Endpoint Agent application that is already installed as part of Kaspersky Security for Windows Server. Integration between compatible versions of the applications is maintained both when Kaspersky Endpoint Agent is upgraded and when Kaspersky Security for Windows Server is upgraded.

Information about the compatibility of Kaspersky Endpoint Agent versions with Kaspersky Security for Windows Server versions is listed in the table below.

Compatibility of Kaspersky Endpoint Agent versions with Kaspersky Security for Windows Server versions

Kaspersky Security for Windows Server version	Compatibility with Endpoint Agent 3.8, 3.9, 3.10	Compatibility with Endpoint Agent 3.11, 3.12	Compatibility with Endpoint Agent 3.13, 3.14, 3.15
KSWS 10.1.2	Yes	No	No
KSWS 11	Yes	Yes	No
KSWS 11.0.1	No	Yes	There are limitations Kaspersky Security for Windows Server does not send data about the AMSI scan event.

For more details about installing Kaspersky Security for Windows Server, see Kaspersky Security for Windows Server Help.

Compatibility of Kaspersky Endpoint Agent for Windows with versions of Kaspersky Endpoint Security for Windows

You can install the following versions of Kaspersky Endpoint Agent (Endpoint Sensors) as part of Kaspersky Endpoint Security for Windows:

• Kaspersky Endpoint Agent 3.7 or Kaspersky Endpoint Agent (Endpoint Sensors) 3.6.1 as part of Kaspersky Endpoint Security 11.2, 11.3 for Windows.

  Kaspersky Endpoint Agent (Endpoint Sensors) 3.6.1 is not compatible with Kaspersky Anti Targeted Attack Platform version 4.1 or higher.

  Kaspersky Endpoint Agent 3.7 is not compatible with all versions of Kaspersky Anti Targeted Attack Platform.

• Kaspersky Endpoint Agent 3.9 as part of Kaspersky Endpoint Security 11.4, 11.5.
• Kaspersky Endpoint Agent 3.10 as part of Kaspersky Endpoint Security 11.6.
• Kaspersky Endpoint Agent 3.11 as part of Kaspersky Endpoint Security 11.7, 11.8.

When you install Kaspersky Endpoint Agent 3.10 or later as part of Kaspersky Endpoint Security for Windows, the standalone Kaspersky Endpoint Agent application of the same or earlier version is removed. If the separately installed Kaspersky Endpoint Agent has a later version, the application bundled with Kaspersky Endpoint Security for Windows is not installed. In this case, you must first remove the standalone Kaspersky Endpoint Agent application.

If necessary, you can upgrade the Kaspersky Endpoint Agent application that is already installed as part of Kaspersky Endpoint Security for Windows. Integration between compatible versions of the applications is maintained both when Kaspersky Endpoint Agent is upgraded and when Kaspersky Endpoint Security for Windows is upgraded. You can upgrade a previous version of Kaspersky Endpoint Agent to version 3.14 only for Kaspersky Endpoint Agent version 3.7 or higher.

Information about the compatibility of Kaspersky Endpoint Agent versions with Kaspersky Endpoint Security for Windows versions is listed in the table below.

Compatibility of Kaspersky Endpoint Agent versions with Kaspersky Endpoint Security for Windows versions

For more details about installing Kaspersky Endpoint Security, see Kaspersky Endpoint Security for Windows Help.

Compatibility of Kaspersky Endpoint Agent with versions of Kaspersky Security for Virtualization Light Agent

You can configure the integration of separately installed Kaspersky Endpoint Agent and Kaspersky Security for Virtualization Light Agent.

Information about the compatibility of Kaspersky Endpoint Agent versions with Kaspersky Security for Virtualization Light Agent versions is listed in the table below.

Compatibility of Kaspersky Endpoint Agent versions and Kaspersky Security for Virtualization Light Agent versions

Kaspersky Endpoint Agent and Kaspersky Security for Virtualization Light Agent installed on a virtual machine generate the same load on the Central Node server as Kaspersky Endpoint Agent and Kaspersky Security for Virtualization Light Agent installed on the host.

For more details about enabling the integration of Kaspersky Endpoint Agent with Kaspersky Security for Virtualization Light Agent, see Kaspersky Security for Virtualization Light Agent Help.

Compatibility of Kaspersky Endpoint Agent with versions of Kaspersky Industrial CyberSecurity for Nodes

You can install Kaspersky Endpoint Agent on a device with Kaspersky Industrial CyberSecurity for Nodes installed. The applications are integrated automatically.

Integration is supported only for Kaspersky Endpoint Agent version 3.14 and Kaspersky Industrial CyberSecurity for Nodes version 3.1. Integration between other versions of the applications is not supported.

To integrate with Kaspersky Industrial CyberSecurity for Nodes, the corresponding license key must be installed in the Kaspersky Endpoint Agent.

For detailed information, you can contact your account manager.

Page top

Requirements for Kaspersky Endpoint Agent for Linux

This section describes hardware and software requirements of Kaspersky Endpoint Agent 3.12 for Linux.

Software requirements for installing Kaspersky Endpoint Agent 3.12 for Linux

Kaspersky Endpoint Agent 3.12 only works on computers that have one of the following operating systems installed:

• Ubuntu 16.04 LTS or later
• Ubuntu 18.04 LTS or later
• Ubuntu 20.04 LTS
• Red Hat Enterprise Linux 7.2 or later
• Red Hat Enterprise Linux 8.0 or later
• CentOS 7.2 or later
• CentOS 8.0 or later
• Debian GNU / Linux 9.4 or later
• Debian GNU / Linux 10.1 or later
• Debian GNU / Linux 11 or later
• Oracle Linux 7.3 or later
• Oracle Linux 8 or later
• SUSE Linux Enterprise Server 12 or later
• SUSE Linux Enterprise Server 15
• Astra Linux Special Edition RUSB.10015-01 (regular update 1.6)
• Astra Linux Special Edition RUSB.10015-01 (regular update 1.7)
• Astra Linux Special Edition RUSB.10015-16 (variant 1) (regular update 1.6)
• Astra Linux Common Edition (regular update 2.12)
• Alt 8 SP Server
• Alt Server 9
• Alt Workstation 9
• Goslinux 7.17
• RED OS 7.3

Hardware requirements for installing Kaspersky Endpoint Agent 3.12 for Linux

Minimum hardware requirements:

• CPU: 2 GHz.
• RAM: 512 MB.
• Available disk space: 1 GB.

Required software

Kaspersky Endpoint Agent for Linux requires Linux Audit Daemon 2.8 or later. Installed on hosts with Kaspersky Endpoint Agent.

Compatibility of Kaspersky Endpoint Agent 3.12 for Linux with Kaspersky EPP applications

Kaspersky Endpoint Agent 3.12 supports integration with Kaspersky Endpoint Security 11.1, 11.2 for Linux.

Integration of Kaspersky Endpoint Agent 3.12 for Linux with other Kaspersky applications

Kaspersky Endpoint Agent 3.12 can be integrated with the following Kaspersky applications and solutions:

• Kaspersky Security Center 13, 13.2.
• Kaspersky Endpoint Agent administration plug-in 3.10, 3.11, 3.12.
• Kaspersky Endpoint Agent web plug-in 3.10, 3.11, 3.12.

Compatibility of Kaspersky Endpoint Agent for Linux versions with Kaspersky Anti Targeted Attack Platform versions

Information about the compatibility of Kaspersky Endpoint Agent application versions with Kaspersky Anti Targeted Attack Platform versions is listed in the table below.

Compatibility of Kaspersky Endpoint Agent for Linux versions with Kaspersky Anti Targeted Attack Platform versions

Page top

Compatibility of Kaspersky Endpoint Agent for Linux versions with EPP applications

You can use Kaspersky Endpoint Agent alone or configure the integration of Kaspersky Endpoint Agent with the workstation protection application (Endpoint Protection Platform, hereinafter also called EPP) Kaspersky Endpoint Security for Linux. If the integration is configured, Kaspersky Endpoint Agent also sends the information about threats detected by this application and the results of threat processing to the Central Node server.

Kaspersky Endpoint Agent 3.9 and 3.12 are compatible with the following versions of Kaspersky Endpoint Security for Linux: 11.1, 11.2.

For more details about installing Kaspersky Endpoint Security, see Kaspersky Endpoint Security for Linux Help.

Compatibility of Kaspersky Endpoint Agent for Linux versions with other applications

Integration of Kaspersky Endpoint Agent 3.12 for Linux with other Kaspersky applications

Kaspersky Endpoint Agent 3.12 can be integrated with the following Kaspersky applications and solutions:

• Kaspersky Security Center versions 12.1 and 12.2.
• Kaspersky Endpoint Agent administration plug-in 3.10.
• Kaspersky Endpoint Agent web plug-in 3.10.

Integration of Kaspersky Endpoint Agent 3.12 for Linux with other Kaspersky applications

Kaspersky Endpoint Agent 3.12 can be integrated with the following Kaspersky applications and solutions:

• Kaspersky Security Center 13, 13.2.
• Kaspersky Endpoint Agent administration plug-in 3.10, 3.11, 3.12.
• Kaspersky Endpoint Agent web plug-in 3.10, 3.11, 3.12.

Compatibility of Kaspersky Endpoint Security for Windows versions with Kaspersky Anti Targeted Attack Platform versions

You can use Kaspersky Endpoint Security as the Endpoint Agent component.

Information about the compatibility of Kaspersky Endpoint Security versions with Kaspersky Anti Targeted Attack Platform versions is listed in the table below.

Compatibility of Kaspersky Endpoint Security for Windows versions with Kaspersky Anti Targeted Attack Platform versions

To integrate Kaspersky Endpoint Security 12.1 with Kaspersky Anti Targeted Attack Platform, you do not need to install Kaspersky Endpoint Agent.

Compatibility of Kaspersky Endpoint Security for Linux versions with Kaspersky Anti Targeted Attack Platform versions

You can use Kaspersky Endpoint Security as a component of Endpoint Agent.

Information about the compatibility of Kaspersky Endpoint Security versions with Kaspersky Anti Targeted Attack Platform versions is listed in the table below.

Compatibility of Kaspersky Endpoint Security for Linux versions with Kaspersky Anti Targeted Attack Platform versions

To integrate Kaspersky Endpoint Security 11.4 with Kaspersky Anti Targeted Attack Platform, you do not need to install Kaspersky Endpoint Agent.