Kaspersky Security Center 13.1

Reference information

Tables of this section provide summary information about the context menu of Administration Console objects, as well as about the statuses of console tree objects and workspace objects.

In this section

Context menu commands

List of managed devices. Description of columns

Statuses of devices, tasks, and policies

File status icons in Administration Console

Page top
[Topic 46988]

Context menu commands

This section lists Administration Console objects and corresponding context menu items (see table below).

Items of the context menu of Administration Console objects

Object

Menu item

Menu item purpose

General items of context menu

Search

Opens the devices search window.

Refresh

Refreshes the display of the selected object.

Export list

Exports the current list to a file.

Properties

Opens the properties window of the selected object.

ViewAdd/Remove columns

Adds or removes columns to/from the table of objects in the workspace.

View Large icons

Shows objects in the workspace as large icons.

ViewSmall icons

Shows objects in the workspace as small icons.

ViewList

Shows objects in the workspace as a list.

ViewTable

Shows objects in the workspace as a table.

View → Configure

Configures the display of Administration Console elements.

Kaspersky Security Center

New → Administration Server

Adds an Administration Server to the console tree.

<Administration Server name>

Connect to Administration Server

Connects to the Administration Server.

Disconnect from Administration Server

Disconnects from the Administration Server.

Managed devices

Install application

Starts the Application Remote Installation Wizard.

ViewConfigure interface

Configures the display of interface elements.

Remove

Removes the Administration Server from the console tree.

Install application

Starts the Remote Installation Wizard for the administration group.

Reset Virus Counter

Resets the virus counters for devices included in the administration group.

View report on threats

Creates a report on threats and virus activity on devices included in the administration group.

New → Group

Creates an administration group.

All Tasks → New group structure

Creates a structure of administration groups based on the structure of domains or Active Directory.

All Tasks → Show Message

Starts the New Message for User Wizard intended for the users of devices included in the administration group.

Managed devicesAdministration Servers

New → Secondary Administration Server

Starts the Add Secondary Administration Server Wizard.

New → Virtual Administration Server

Starts the New Virtual Administration Server Wizard.

Mobile Device ManagementMobile devices

NewMobile device

Connects a new mobile device of the user.

Mobile Device ManagementCertificates

NewCertificate

Creates a certificate.

CreateMobile device

Connects a new mobile device of the user.

Device selections

New → New selection

Creates a device selection.

All TasksImport

Imports a selection from a file.

Kaspersky Licenses

Add activation code or key file

Adds a license key to the Administration Server repository.

Activate Application

Starts the Application Activation Task Creation Wizard.

Report on usage of license keys

Creates and shows a report on license keys on client devices.

Application management → Application categories

NewCategory

Creates an application category.

Application management → Applications registry

Filter

Sets up a filter for the list of applications.

Monitored Applications

Configures the publishing of events related to installation of applications.

Remove applications that are not installed

Clears the list of all details of applications that are no longer installed on networked devices.

Application managementSoftware updates

Accept License Agreements for updates

Accepts the License Agreements of software updates.

Application managementThird-party licenses usage

NewLicensed applications group

Creates a licensed applications group.

Remote installationInstallation packages

Show current application versions

Shows the list of up-to-date versions of Kaspersky applications available on web servers.

NewInstallation package

Creates an installation package.

All TasksUpdate databases

Updates application databases in installation packages.

All TasksShow the general list of stand-alone packages

Shows the list of stand-alone packages created for installation packages.

Device discoveryDomains

All TasksDevice Activity

Sets up the Administration Server's response to inactivity of networked devices.

Device discoveryIP ranges

NewIP range

Creates an IP range.

RepositoriesUpdates for Kaspersky databases and software modules

Download updates

Opens the properties window of the Download updates to the repository task of the Administration Server.

Updates Download Settings

Configures the Download updates to the repository task of the Administration Server.

Report on usage of anti-virus databases

Creates and shows a report on versions of databases.

All TasksClear updates repository

Clears the repository of updates on the Administration Server.

RepositoriesHardware

NewDevice

Creates a new device.

Page top

[Topic 11343]

List of managed devices. Description of columns

The following table displays the names and respective descriptions of columns in the list of managed devices.

Descriptions of columns in the list of managed devices

Column name

Value

Name

NetBIOS name of the client device. The descriptions of the icons of device names are given in the appendix.

Operating system type

Type of operating system installed on the client device.

Windows domain

Name of the Windows domain in which the client device is located.

Network Agent is installed

Result of Network Agent installation on the client device (Yes, No, Unknown).

Network Agent is running

The result of Network Agent operation (Yes, No, Unknown).

Real-time protection

Security application is installed (Yes, No, Unknown).

Last connected to Administration Server

Time period that has elapsed since the client device was connected to the Administration Server.

Protection last updated

The time period that has elapsed since the last update of managed devices.

Status

Current status of the client device (OK, Critical, or Warning).

Status description

Reasons for change of the client device status to Critical or Warning.

The device status changes to Warning or Critical for the following reasons:

  • Security application is not installed.
  • Too many viruses detected.
  • Real-time protection level differs from the level set by the Administrator.
  • Virus scan has not been performed in a long time.
  • Databases are outdated.
  • Not connected in a long time.
  • Active threats are detected.
  • Restart is required.
  • Incompatible applications are installed.
  • Software vulnerabilities have been detected.
  • Check for Windows Update updates has not been performed in a long time.
  • Invalid encryption status.
  • Mobile device settings do not comply with the policy.
  • Unprocessed incidents detected.
  • Device status defined by application.
  • Device is out of disk space.
  • License expires soon.

    The device status only changes to Critical by the following reasons:

  • License expired.
  • Device has become unmanaged.
  • Protection is disabled.
  • Security application is not running.

Managed Kaspersky applications on client devices can add status descriptions to the list. Kaspersky Security Center can receive the description of a client device status from managed Kaspersky applications installed on that device. If the status that has been assigned to the device by a managed application is other than that assigned by Kaspersky Security Center, Administration Console displays the status that is the most critical to the device security. For example, if a managed application has assigned the Critical status to the device while Kaspersky Security Center has assigned it the Warning status, Administration Console displays the Critical status for that device with the corresponding description provided by the managed application.

Information last updated

Time period that has elapsed since the client device was last synchronized successfully with the Administration Server (that is, since the last network scan).

DNS name

DNS domain name of the client device.

DNS domain

The main DNS suffix.

IP address

IP address of the client device. It is recommended to use the IPv4 address.

Last visible

Time period during which the client device has remained visible on the network.

Last full scan

Date and time of the last scan of the client device performed by the security application upon the user's request.

Total number of threats detected

Number of threats found.

Real-time protection status

Real-time protection status (Starting, Running, Running (maximum protection), Running (maximum speed), Running (recommended settings), Running (custom settings), Stopped, Paused, Failed).

Connection IP address

The IP address that is used for connection to Kaspersky Security Center Administration Server.

Network Agent version

Version of Network Agent.

Application version

Version of the security application installed on the client device.

Anti-virus databases last updated

The version of the anti-virus databases.

System last started

Date and time when the client device was last turned on.

Restart is required

Restart of the client device is required.

Distribution point

Name of the device that acts as distribution point for this client device.

Description

Description of the client device received after a network scan.

Encryption status

Data encryption status of the client device.

WUA status

Status of Windows Update Agent on the client device.

Yes corresponds to client devices that receive updates through Windows Update from the Administration Server.

No corresponds to client devices that receive updates through Windows Update from other sources.

Operating system bit size

Bit size of the operating system installed on the client device.

Spam protection status

Status of Spam protection component (Running, Starting, Stopped, Paused, Failed, No data from device)

Data Leakage Prevention status

Status of Data Leakage Prevention component (Running, Starting, Stopped, Paused, Failed, No data from device)

Collaboration servers protection status

Status of Content Filtering component (Running, Starting, Stopped, Paused, Failed, No data from device)

Anti-virus protection status of mail servers

Status of Mail Server anti-virus protection component (Running, Starting, Stopped, Paused, Failed, No data from device)

Endpoint Sensor status

Status of Endpoint Sensor component (Running, Starting, Stopped, Paused, Failed, No data from device)

Created

 

Time when the <Device Name> icon was created. This attribute is used to compare various events with each other.

 

Name of virtual or secondary Administration Server

 

Name of virtual or secondary Administration Server. This column is only available in lists that contain devices from different Administration Servers.

Parent group

 

 

Name of the administration group where the < Device Name> icon is located. This column is only available in lists that contain devices from different Administration Servers.

Managed by a different Administration Server

 

The parameter can take one of these values:

  • True, if during remote installation of security applications on the device, it turns out that the device is managed by different Administration Server.
  • False, otherwise.

Operating system build

 

 

The build number of the operating system. You can specify whether the selected operating system must have an equal, earlier, or later build number. You can also configure searching for all build numbers except the specified one.

 

Operating system release ID

 

The release identifier (ID) of the operating system. You can specify whether the selected operating system must have an equal, earlier, or later release ID. You can also configure searching for all release ID numbers except the specified one.

 

Page top

[Topic 82113]

Statuses of devices, tasks, and policies

The table below contains a list of icons displayed in the console tree and in the Administration Console workspace, next to the names of devices, tasks, and policies. Those icons define the statuses of objects.

Statuses of devices, tasks, and policies

Icon

Status

A computer with a blue display.

Device with an operating system for workstations detected in the system but not yet included in any of the administration groups.

A computer with a green display.

Device with an operating system for workstations included in an administration group, with the OK status.

A computer with a yellow display.

Device with an operating system for workstations included in an administration group, with the Warning status.

A computer with a red display.

Device with an operating system for workstations included in an administration group, with the Critical status.

A computer with a blue display disconnected from Administration Server.

Device with an operating system for workstations included in an administration group, which has lost connection with the Administration Server.

A server in a gray case.

Device with an operating system for servers detected in the system but not yet included in any of the administration groups.

A server in a green case.

Device with an operating system for servers included in an administration group, with the OK status.

A server in a yellow case.

Device with an operating system for servers included in an administration group, with the Warning status.

A server in a pink case.

Device with an operating system for servers included in an administration group, with the Critical status.

A server in a gray case disconnected from Administration Server.

Device with an operating system for servers included in an administration group, which has lost connection with the Administration Server.

A mobile device with a blue display.

Mobile device detected on the network and included in none of the administration groups.

A mobile device with a green display.

Mobile device included in an administration group, with the OK status.

A mobile device with a yellow display.

Mobile device included in an administration group, with the Warning status.

A mobile device with a red display.

Mobile device included in an administration group, with the Critical status.

A mobile device with a gray display disconnected from Administration Server.

Mobile device included in an administration group, having lost its connection with the Administration Server.

A grey microchip with a white exclamation mark.

UEFI protection device detected on the network but not included in any administration group. UEFI protection device is on the network.

A white microchip with a grey exclamation mark.

UEFI protection device detected on the network but not included in any administration group. UEFI protection device is not on the network.

A green microchip with a white check mark.

UEFI protection device included in an administration group, with OK status. UEFI protection device is on the network.

A white microchip with a green check mark.

UEFI protection device included in an administration group, with OK status. UEFI protection device is not on the network.

A yellow microchip with a white exclamation mark.

UEFI protection device included in an administration group, with Warning status. UEFI protection device is on the network.

A white microchip with a yellow exclamation mark.

UEFI protection device included in an administration group, with Warning status. UEFI protection device is not on the network.

A red microchip with a white exclamation mark.

UEFI protection device included in an administration group, with Critical status. UEFI protection device is on the network.

A white microchip with a red exclamation mark.

UEFI protection device included in an administration group, with Critical status. UEFI protection device is not on the network.

A blue lock pictured on a light blue sheet.

Active policy.

A dimmed icon of a lock pictured on a sheet.

Inactive policy.

A blue lock pictured on a white sheet. A green arrow in the left corner of the sheet points down.

Active policy inherited from a group that was created on the primary Administration Server.

A blue lock pictured on a white sheet.

Active policy inherited from a top-level group.

A yellow clipboard on which a green check mark is drawn.

Task (group task, Administration Server task, or task for specific devices) with the Scheduled or Completed successfully status.

A yellow clipboard on which a green check mark is drawn. The blue play icon is located in the lower right corner of the clipboard.

Task (group task, Administration Server task, or task for specific devices) with the Running status.

A yellow clipboard on which a red cross is drawn.

Task (group task, Administration Server task, or task for specific devices) with the Failed status.

A grey clipboard on which a green check mark is drawn. A green arrow in the left corner of the clipboard points down.

Task inherited from a group that was created on the primary Administration Server.

A grey clipboard on which a green check mark is drawn.

Task inherited from a top-level group.

Page top

[Topic 3966]

File status icons in Administration Console

For ease of file management in Kaspersky Security Center Administration Console, icons are displayed next to the names of files (see table below). Icons indicate statuses assigned to files by managed Kaspersky applications on client devices. Icons are shown in the workspaces of the Quarantine, Backup, and Active threats folders.

Statuses are assigned to objects by Kaspersky Endpoint Security installed on the client device on which the object is located.

Correspondence between icons and file statuses

Icon

Status

A red circle with a white exclamation mark.

File with the Infected status.

A blue circle with a white question mark.

File with the Warning or Probably infected status.

A man in blue clothes.

File with the Added by user status.

A red circle with a line across it.

File with the False positive status.

A white circle with a red cross.

File with the Disinfected status.

A red cross.

File with the Deleted status.

A green circle with a white check mark.

File in the Quarantine folder with the Not infected, Password-protected or Must be sent to Kaspersky status. If there is no status description next to an icon, this means that the managed Kaspersky application on the client device has reported an unknown status to Kaspersky Security Center.

A blue arrow that indicates the counterclockwise direction.

File in the Backup folder with the Not infected, Password-protected or Must be sent to Kaspersky status. If there is no status description next to an icon, this means that the managed Kaspersky application on the client device has reported an unknown status to Kaspersky Security Center.

A white circle with a red cross. A clock icon is located in the lower right section of the circle.

File in the Active threats folder with Not infected, Password-protected or Must be sent to Kaspersky status. If there is no status description next to an icon, this means that the managed Kaspersky application on the client device has reported an unknown status to Kaspersky Security Center.

Page top

[Topic 131543]