Checking the connection between a client device and the Administration Server

Kaspersky Security Center allows you to check connections between a client device and the Administration Server, automatically or manually.

Automatic check of connection is performed on Administration Server. Manual check of the connection is performed on the device.

Automatically checking the connection between a client device and the Administration Server

To start an automatic check of the connection between a client device and Administration Server:

1. In the console tree, select the administration group that includes the device.
2. In the workspace of the administration group, on the Devices tab, select the device.
3. In the context menu of the device, select Check device accessibility.

A window opens that contains information about the accessibility of the device.

Manually checking the connection between a client device and the Administration Server. Klnagchk utility

You can check the connection and obtain detailed information about the settings of the connection between a client device and Administration Server by using the klnagchk utility.

When Network Agent is installed on a device, the klnagchk utility is automatically copied to the Network Agent installation folder.

When started from the command line, the klnagchk utility can perform the following actions (depending on the keys in use):

• Displays on the screen or logs the values of the settings used for connecting the Network Agent installed on the device to Administration Server.
• Records into an event log file Network Agent statistics (since its last startup) and utility operation results, or displays the information on the screen.
• Makes an attempt to establish connection between Network Agent and Administration Server.

  If the connection attempt fails, the utility sends an ICMP packet to check the status of the device on which Administration Server is installed.

To check the connection between a client device and Administration Server using the klnagchk utility:

On the device, start the klnagchk utility from the command line.

Utility command line syntax:

klnagchk [-logfile <file name>] [-sp] [-savecert <path to certificate file>] [-restart]

Descriptions of the keys:

• -logfile <file name> —Record in a log file the values of the settings of connection between Network Agent and Administration Server and the utility operation results.

  By default, information is saved in the standard output stream (stdout). If the key is not in use, settings, results, and error messages are displayed on the screen.

• -sp —Show the password for the user's authentication on the proxy server.

  The setting is in use if connection to the Administration Server is established through a proxy server.

• -savecert <file name> —Save the certificate, used to access the Administration Server, in the specified file.
• -restart —Restart Network Agent after the utility has completed.

About checking the time of connection between a device and the Administration Server

Upon shutting down a device, Network Agent notifies the Administration Server of this event. In Administration Console that device is displayed as shut down. However, Network Agent cannot notify Administration Server of all such events. The Administration Server, therefore, periodically analyzes the Connected to Administration Server attribute (the value of this attribute is displayed in Administration Console, in the device properties, in the General section) for each device and compares it against the synchronization interval from the current settings of Network Agent. If a device has not responded over more than three successive synchronization intervals, that device is marked as shut down.