Using VDI dynamic mode on client devices

A virtual infrastructure can be deployed on a corporate network using temporary virtual machines. Kaspersky Security Center detects temporary virtual machines and adds information about them to the Administration Server database. After a user finishes using a temporary virtual machine, the machine is removed from the virtual infrastructure. However, a record about the removed virtual machine can be saved in the database of the Administration Server. Also, nonexistent virtual machines can be displayed in Administration Console.

To prevent information about nonexistent virtual machines from being saved, Kaspersky Security Center supports dynamic mode for Virtual Desktop Infrastructure (VDI). The administrator can enable support of dynamic mode for VDI in the properties of the installation package of Network Agent to be installed on the temporary virtual machine.

When a temporary virtual machine is disabled, Network Agent notifies the Administration Server that the machine has been disabled. If the virtual machine has been disabled successfully, it is removed from the list of devices connected to the Administration Server. If the virtual machine is disabled with errors and Network Agent does not send a notification about the disabled virtual machine to the Administration Server, a backup scenario is used. In this scenario, the virtual machine is removed from the list of devices connected to the Administration Server after three unsuccessful attempts to synchronize with the Administration Server.

Enabling VDI dynamic mode in the properties of an installation package for Network Agent

To enable VDI dynamic mode:

1. In the Remote installation folder of the console tree, select the Installation packages subfolder.
2. In the context menu of the Network Agent installation package, select Properties.

   The Properties: Kaspersky Security Center Network Agent window opens.

3. In the Properties: Kaspersky Security Center Network Agent window, select the Advanced section.
4. In the Advanced section, select the Enable dynamic mode for VDI option.

The device on which Network Agent is to be installed will be a part of VDI.

Searching for devices that are part of VDI

To find devices that make up part of VDI:

1. Select Search from the context menu of the Unassigned devices folder.
2. In the Find devices window, on the Virtual machines tab, in the This is a virtual machine drop-down list, select Yes.
3. Click the Find now button.

The application search for devices that make up part of Virtual Desktop Infrastructure.

Moving devices from VDI to an administration group

To move devices that are part of VDI to an administration group:

1. In the workspace of the Unassigned devices folder, click Configure rules.

   This opens the properties window of the Unassigned devices folder.

2. In the properties window of the Unassigned devices folder, in the Move devices section, click the Add button.

   The New rule window opens.

3. In the New rule window, select the Virtual machines section.
4. In the This is a virtual machine drop-down list, select Yes.

A rule will be created for device relocation to an administration group.