Kaspersky Embedded Systems Security for Linux

Update task (Update, ID:6)

Updating the databases and application modules of Kaspersky Embedded Systems Security ensures up-to-date protection on your device. New viruses, malware, and other types of threats appear worldwide on a daily basis. The application databases contain information about the threats and the ways to neutralize them. To detect threats quickly, you are urged to regularly update the application databases and modules.

Current application license is required for regular database updates. If there is no current license, you will only be able to perform one update.

The main application update sources are Kaspersky update servers.

Your device must be connected to the Internet to successfully download the update package from Kaspersky update servers. By default, Internet connection settings are determined automatically. If you use a proxy server, you will need to adjust the connection settings. The update package is downloaded using the Update task.

During an update, the following objects are downloaded and installed on your device:

  • Application databases. During installation, the application downloads the latest databases from one of the Kaspersky HTTP update servers. If the predefined task with default settings (ID=6) is used for updates, the application will update the databases every 60 minutes. You can edit the settings of the predefined task for database and application module updates and create user update tasks.

    If the database update download is interrupted or finishes with an error, the application continues to use the previously installed database version. If application databases were not installed before, the application continues functioning in "without databases" mode. Database and application module updates are still available.

    By default, the application logs the Databases are out of date event (BasesAreOutOfDate) if the last installed database updates were published on the Kaspersky server more than three but less than seven days ago. If the databases have not been updated for seven days, the application logs the Databases are extremely out of date (BasesAreTotallyOutOfDate) event. The database is up-to-date if it was downloaded less than three days ago.

  • Updating application modules. In addition to application databases, you can also update the application itself. Module updates fix vulnerabilities and enhance existing functions.

    The application module can be installed regardless of the state of the application (started or stopped, managed by a Kaspersky Security Center policy) and the update schedule. Kaspersky Embedded Systems Security continues protecting your device during the application update procedure. During the update, application settings and the application log file are migrated to the new version of the application. After the update, Kaspersky Embedded Systems Security needs to be restarted.

    If the transfer of application settings fails for any reason, the application is set to the default values.

    Changes to the application settings made after the update is complete and before the application restarts are not saved.

    After updating the application using an autopatch, the mechanism for interacting with the operating system firewall changes: the rules are managed using the iptables and iptables-restore system utilities.

    If the application does not work properly after the update, it automatically rolls back to the previous version. A message about the application rollback is displayed. It is recommended to contact Kaspersky Technical Support.

During an update, the application modules and databases on your device are compared with the up-to-date version at the update source. If your current databases and application modules differ from their respective up-to-date versions, the missing portions of the updates will be installed on your device.

If the databases are obsolete, the update package may be large, which may cause additional Internet traffic (up to several dozen MB). The amount of the disk space can be up to 3 GB.

In this Help section

About update sources

Update task settings

Page top
[Topic 234821]

About update sources

An update source is a resource that contains updates for Kaspersky Embedded Systems Security databases and application modules. Update sources can be FTP, HTTP, or HTTPS servers (such as Kaspersky Security Center and Kaspersky update servers), as well as local or network directories mounted by the user.

The default update sources for the predefined Update task are Kaspersky update servers. The update servers contain databases and application module updates for many Kaspersky applications. Updates are downloaded via HTTPS protocol.

If, for some reason, you cannot use Kaspersky update servers as the update source, you can receive updates from a custom update source such as a specified local or network directory (SMB/NFS) mounted by the user, or an FTP, HTTP, or HTTPS server. You can specify a custom update source in Update task settings.

Page top
[Topic 197978]

Update task settings

The table describes all available values and default values of all the settings that you can specify for the Update task.

Update task settings

Setting

Description

Values

SourceType

Source from which the application receives updates.

KLServers (default value) — The application receives updates from one of the Kaspersky update servers. Updates are downloaded via HTTPS protocol.

SCServer — the application downloads updates to the protected device from Kaspersky Security Center Administration Server installed in your organization. You can select this update source if you use Kaspersky Security Center for centralized administration of device protection in your organization.

Custom — The application downloads updates from a custom source specified in the [CustomSources.item_#] section. You can specify directories on FTP, HTTP, and HTTPS servers or directories on any device mounted on the protected client device, including directories on remote devices mounted via the Samba or NFS protocols.

UseKLServersWhenUnavailable

The application's access to Kaspersky update servers if all custom update sources are unavailable.

Yes (default value) — The application will connect to Kaspersky update servers if all custom update sources are unavailable.

No — The application will not connect to Kaspersky update servers if all custom update sources are unavailable.

ApplicationUpdateMode

Application update download and installation mode.

Disabled — Do not download or install application updates.

DownloadOnly (default value) — Download application updates, but do not install them.

DownloadAndInstall — Automatically download and install application updates.

ConnectionTimeout

Response timeout (in seconds) of an update source while attempting to connect to it. If an update source does not respond within the specified time interval, the application contacts the next update source in the list.

You can use only integers within the range from 0 to 120.

Default value: 10.

The [CustomSources.item_#] section contains the following settings:

URL

Address of the custom update source on the local area network or the Internet.

The default value is not defined.

Examples:

URL=http://example.com/bases/ – address of the HTTP server with the directory that contains updates.

URL=/home/bases/ – directory on the protected computer that contains application databases.

 

Enabled

Enables the use of the update source specified as the value of the URL setting.

To run the task, at least one update source needs to be enabled.

Yes – the application uses the update source.

No – The app doesn't use the update source.

The default value is not defined.

Page top

[Topic 197979]