Kaspersky Administration Kit 6.0 MP1/MP2

	Useful links
	Interaction between a client computer and the Administration Server. Secure connection with the Administration Server What does Update Agent do? How can I view the list of open ports? How to configure ISA Server to allow interaction of Administration Agent and Server

To provide work of the logical network on the Administration Server the following ports should be opened:

on the Administration Server 

• TCP 13000 – to connect client computers, Network Agents and slave Administration Servers using secure connection (SSL). 
• TCP 14000 – to connect client computers, Update Agents and slave Administration Servers to the Administration Server without secure connection.

When connecting to the Administration Server a client computer gives to the Server statistics information how Kaspersky Lab installed applications function, their events, etc., synchronizes the application settings, tasks, etc.

By default, the Network Agent tries to connect to the Server every 15 minutes. This value can be changed in the Network Agent’s policy. 

• UDP 13000 – to get information when client computers are turned off. 
• TCP 18000 – for the Administration Server to get the data from the authentication server Cisco NAC.

on the computer defined by the Update Agent: 

• TCP 13000 should be opened to connect client computers to the Update Agent using secure connection (SSL).

• TCP 13001 should be opened to connect client computers to the Update Agent using secure connection (SSL) if a computer- Administration Server is defined by the Update Agent. 

• TCP 14000 should be opened to connect client computers to the Update Agent without the secure connection. 

• TCP 14001 should be opened to connect client computers to the Update Agent without the secure connection if a computer- Administration Server is defined by the Update Agent.

on a client computer 

• UDP 60000 – to realize in the network the Wake-On-LAN function.
• UDP 15000 port should be opened: 
• for the Administration Server to get information about the client computer in real time (for example, when viewing statistics). In this case the Administration Server will try to connect to the Network Agent. 

Example, the Synchronize command from the Console will not work if 15000 UDP-port is closed on a Client. But at the same time the Network Agent will be able to establish connection with the Server to get policies, send reports, etc.

	Useful links
	The default dynamic port range for TCP/IP changed in Windows Vista and Windows server 2008

For outgoing connections of client computers with the Administration Server and Update Agents the ports range 1024-5000 is used. The default dynamic port range for TCP/IP has changed in Windows Vista and in Windows Server 2008: 49152-65535.

• TCP 139 
• TCP 445 
• UDP 137 
• UDP 138

If Microsoft Windows Firewall is enabled, in order to open the specified ports do the following:

1. Make sure the Don’t Allow Exceptions box is cleared:

2. check File and Printer Sharing in the list of allowed exclusions: