To create a new task in Kaspersky Security Center Administration Console:
1. Launch the task creation wizard for the required category of tasks:
To create a local task:
a. Expand the Managed computers node in the Administration Console tree and select a group to which the protected server belongs.
b. In the results pane, on the Computers tab, open the context menu on the string with information about the protected server and select Properties.
c. In the Tasks section, click the Add button.
To create a global task:
a. In the Administration Console tree select the group for which you wish to create a group task.
b. In the results pane, open the context menu on the Tasks tab and select New → Task.
To create a task for a custom set of computers, open the context menu on the Tasks for specific computers node in the Administration Console tree and select New → Task.
This will open the greeting window of the task creation wizard.
2. In the Specify task name window of the task wizard, enter a name for the task (no longer than 100 characters, not containing the symbols І * < > ? \ / | : ). It is recommended that the task type is added to its name (for example, "On-demand scan of shared folders").
3. In the Task type window, under the Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition header, select the type of the task to be created.
4. If you have selected any task type, except Database update rollback or Add key, the Settings window opens.
The two options are available:
New, to create a new task with default settings for newly created tasks of the type selected;
Import task from previous version of Kaspersky Virus, to use a previously created Kaspersky Anti-Virus 6.0 for Windows Server task.
Press the Browse button and select the configuration file into which you saved the existing task.
5. Depending on the type of task created, do one of the following actions:
To create an on-demand scan task:
a. Create scan scope in the Scan scope window.
By default, scan scope includes critical areas of the server. Scan scopes are marked in the table with the icon .
You can modify the scan scope: add specific preset scan scopes, disks, folders, network objects and files and assign specific security settings for each scope added.
To exclude all scan scopes from the scan, open the context menu on each of the lines and select Delete scope.
To include a predefined scan scope, disk, folder, network object, or file in the scan scope, right-click the Scan scope table and select Add scan scope. In the Add objects to the scan scope window, select a predefined scope in the Predefined scan scope list, specify a server disk, folder, network object, or file on a server or on another networked computer, and click the OK button.
AD M I N I S T R A T O R'S GU I D E
184
To exclude subfolders or files from the scan, select an added folder (disk) in the Scan scope window of the wizard, open the context menu and select Configure, then click the Settings button in the Security level window, and in the On-demand scan settings window, on the General tab, clear the Subfolders (Subfiles) check box.
To change scan scope security settings, open the context menu on the scope whose settings you wish to configure, and select Configure. In the On-demand scan settings window, select one of the predefined security levels, or click the Settings button to configure security settings manually.
Configuration is performed in the same way as in Kaspersky Anti-Virus Console.
To exclude embedded objects from the scan scope that you have added, open the context menu in the Scan scope table, select Add exclusion, and specify the objects that you want to exclude: select a predefined scan scope in the Predefined scan scope list, specify a server disk, folder, network object, or file on a server or on another networked computer, and click the OK button.
Excluded scan scopes are marked with the icon in the table.
b. Do the following in the Properties window.
Check the Apply trusted zone box, if you wish to exclude objects described in Kaspersky Anti-Virus trusted zone from the scan scope of the task.
If you plan to use the task created as a scan of critical areas task, select the Task performance is considered as scanning of critical areas check box in the Properties window. Kaspersky Security Center evaluates the security rating of the server (servers) by the performance results of tasks with the Scan critical areas status, and not only by the performance results of the Scan of critical areas system task. When creating a local on-demand scan task, this check box is not available.
To assign the base priority Low to the working process in which the task will be executed, select the Perform task in the background check box in the Properties window. By default, the working processes in which Kaspersky Anti-Virus tasks are run have the Medium (Normal) priority. Demoting the process priority increases the time required to execute the task, but it may have a beneficial effect on the execution speed of the processes of other active programs.
To create an update task, configure task settings based on your requirements:
a. Select updates source in the Update source window.
b. Click the LAN settings button. The Connection settings window opens.
c. On the Connection settings tab, perform the following actions:
Specify the FTP server mode for connecting to the protected server.
Modify the connection timeout when connecting to the update source, if required.
Configure proxy server access settings when connecting to the update source.
Specify protected server(s) location, to optimize update downloads.
MA N A G I N G AN T I- VI R U S U S I N G KA S P E R S K Y SE C U R I T Y CE N T E R
185
To create the Update application modules task, define the relevant settings for the update of application modules in the Settings for application software module updates window:
a. Select download and install critical updates for application modules or check for their availability only.
b. If you have selected Copy and install critical updates of application software modules: you may need to restart the server to apply the application modules that you have installed. If you want Kaspersky Anti-Virus to restart the server automatically upon the task completion, select the Allow system reboot check box. To disable automatic server restart upon task completion, clear the Allow system reboot check box.
c. To obtain information about Kaspersky Anti-Virus module upgrades, select Receive information about available maintenance updates for application software modules.
Kaspersky Lab does not publish planned update packages on the update servers for automatic installation; these can be downloaded manually from the Kaspersky Lab website. Administrator notification about the event Scheduled Kaspersky Anti-Virus updates available can be configured;
this will contain the URL of our site from which planned updates can be downloaded.
To create the Copying updates task, specify the updates set and the destination folder in the Update copying settings window.
To create the Add key task, specify the key file name (with .key extension) and the full path to it in the Key file field of the Add key window.
6. Configure the task schedule (you can configure a schedule for all task types except Database update rollback). take the following actions in the Schedule window:
a. select the Run by schedule check box to enable the schedule;
b. Specify the task launch frequency: In the Frequency list, select one of the following values: Hourly, Daily, Weekly, At application startup, After application databases update (in the Update of application databases, Update of application software modules, and Copying updates tasks, you can also select After Administration Server has retrieved updates):
if Hourly is selected, specify the number of hours in the Every <number> h in the Task start settings group;
if Daily is selected, specify the number of days in the Every <number> d in the Task start settings group;
if Weekly is selected, specify the number of weeks in the Every <number> w in the Task start settings group. Specify on which days of the week the task will be launched (on Mondays, by default).
c. In the Start time field, specify the time when the task will be launched; in the Start date field specify the date when the schedule will become effective.
d. If necessary, specify other settings of the schedule: click the Advanced button and perform the following actions in the Advanced schedule settings window:
Specify the maximum duration for the task run: enter the number of hours and minutes in the Duration field in the Task stop settings group.
Specify a time period within 24 hours for which the task run will be paused: in the Task stop settings group, enter the start and end values for the time period in the Pause from … until field.
Specify the date on which the schedule will become inactive: select the Cancel schedule from check box and, in the Calendar window, select the date on which the schedule will become inactive.
Enable running of skipped tasks: select the Run skipped tasks check box.
Enable the start time randomization setting: select the Randomize the task start time within the interval of check box and specify the setting value in minutes.
e. Click OK.
AD M I N I S T R A T O R'S GU I D E
186
7. If the task created is for sets of computers, select the network (group) computers on which this task will be executed.
8. In the Finish window of the Task creation wizard click the Ready button.
The task created is displayed in the Tasks window.