Configuring connection profiles for out-of-office users

Out-of-office users of laptops (hereinafter also referred to as "devices") may need to change the method of connecting to an Administration Server or switch between Administration Servers depending on the current location of the device in the enterprise network.

Connection profiles are supported only for devices running Windows.

Using different addresses of a single Administration Server

The following procedure is only applied to Kaspersky Security Center 10 Service Pack 1 and later.

Devices with Network Agent installed can connect to the Administration Server either from the organization's intranet or from the Internet. This situation may require Network Agent to use different addresses for connection to Administration Server: the external Administration Server address for the Internet connection and the internal Administration Server address for the internal network connection.

To do this, you must add a profile (for connection to Administration Server from the Internet) to the Network Agent policy. Add the profile in the policy properties (Network section, Connection subsection). In the profile creation window, you must clear the Use to receive updates only check box and select the Synchronize connection settings with Administration Server settings specified in this profile check box. If you use a connection gateway to access Administration Server (for example, in a Kaspersky Security Center configuration as that described in Internet access: Network Agent as connection gateway in DMZ), you must specify the address of the connection gateway in the corresponding field of the connection profile.

Switching between Administration Servers depending on the current network

The following procedure is only applied to Kaspersky Security Center  10 Service Pack 2 Maintenance Release 1 and any later versions.

If the organization has multiple offices with different Administration Servers and some of the devices with Network Agent installed move between them, you need Network Agent to connect to the Administration Server of the local network in the office where the device is currently located.

In this case, you must create a profile for connection to Administration Server in the properties of the policy of Network Agent for each of the offices, except for the home office where the original home Administration Server is located. You must specify the addresses of Administration Servers in connection profiles and select or clear the Use to receive updates only check box:

After that, you must set up the conditions of switching to the newly created profiles: at least one condition for each of the offices, except for the home office. Every condition's purpose consists in detection of items that are specific for an office's network environment. If a condition is true, the corresponding profile gets activated. If none of the conditions is true, Network Agent switches to the home Administration Server.

See also:

Providing Internet access to the Administration Server

Internet access: Network Agent as connection gateway in DMZ

Page top