Kaspersky Endpoint Security for Linux

Kaspersky Endpoint Security for Linux (KESL) protects Linux devices from various threats and attacks. For more information about KESL capabilities, see the official documentation.

KESL integration with the Shturval platform #

To ensure KESL works correctly with the Shturval platform, follow these recommendations:

1. Install KESL only after installing the Shturval platform. Installing it before the platform causes installation errors. This is due to incompatibility between simultaneous operation of the Kaspersky agent (klnagent) and kubelet startup.

2. If you install KESL in a client cluster, deploy the cluster first, then install and configure KESL on each cluster node.

3. After KESL is installed, disable the following policies in KESL:

• Network Threat Protection;
• Web Threat Protection;
• Web Control;
• Firewall Management.

4. If you need to reboot a cluster node with KESL installed, use one of the following options:

Option 1

• Disable Kaspersky agent autostart and enable it after the cluster node reboots.

# Disable the agent
systemctl disable klnagent klnagnt64
# Start the agent
systemctl start klnagent64

Option 2

• Locate the Kaspersky agent unit file and set a startup delay: ExecStartPre=/bin/sleep 60.

# Find the agent unit file location
systemctl status klnagent64

For example, on Astra Linux the unit file is located at /etc/systemd/system/klnagent64.service.

[Unit]
Description=Kaspersky Network Agent.[Service]
Environment="PATH=/bin:/sbin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin"
Type=simple
Restart=on-failure
TimeoutStopSec=30
User=root
ExecStartPre=/bin/sleep 60
ExecStart=/opt/kaspersky/klnagent64/sbin/klnagent -d -from_wd
KillMode=process
LimitNOFILE=32768:131072[Install]
WantedBy=multi-user.target
Alias=klnagent.service