As the main owner of enterprise intranet maintenance, the biggest fear of our network administrators is the proliferation of Intranet viruses. Of course, a good anti-virus software can usually block viruses out of employees' computer systems, however, have you ever been troubled by the slow speed of Anti-Virus Software downloading the virus database for a long time? Do you feel it difficult to update the antivirus software virus database in an internal network that prohibits Internet connection? Have you ever wanted to build an upgrade server yourself? These problems have always plagued our network administrators. Today I will teach you how to build an intranet Kaspersky upgrade server.
I. Principle of upgrading Kaspersky Anti-Virus Software:
Kaspersky, as a famous antivirus software, has a strong scanning and removal capability and outstanding performance in upgrading. His virus library is updated most frequently among all anti-virus software I have come into contact, up to a dozen times a day. Generally, when the Kaspersky Antivirus software is upgraded, it automatically connects to the server named "Kaspersky Lab Update Server", which is automatically allocated to servers in different regions based on the user's IP address, recently, Kaspersky has activated upgrading servers in China. Basically, the addresses of upgrading servers in China are similar.
Ii. Obtain the Update file:
To successfully build a Kaspersky upgrade server, first we need to find the upgrade patch and Upgrade Program. Kaspersky officially provides us with an FTP, and the latest patch programs are stored on this FTP, the FTP address is ftp.kaspersky.com. You do not need to enter any username or password to log on anonymously. Since there are many large files to download, I suggest you use Professional FTP download tools such as flashfxp. (1)
Log on to ftp.kaspersky.com and find the following directories:/updates_x,/index,/index/6,/index/6b/,/bases_new /. Of course, to Upgrade Kaspersky 7, you only need to download the Bases, index, and updates_ext directories. It takes a long time to download the file. It may take six hours because the number of files to be updated is too large. (2)
After the download is complete, we can see that the total file capacity under the upgrade directory is more than 300 MB, and the number of files is more than 6000. (3)
3. Check the patch download accuracy:
After downloading it to a local hard disk, we must first check its accuracy. Otherwise, if these patches are installed on other machines, the normal use of anti-virus software will be poor. Kaspersky Anti-Virus Software provides us with multiple patch upgrade methods, you only need to find the answer in "Settings"> "Update"> "update settings"> "configuration. (4)
In the update settings window, click the "add" button on the right to specify the upgrade folder. (5)
Since I downloaded all the patch packages to the C: 11 directory, I can directly specify this directory and then confirm it. (6)
Then click the update button to upgrade the virus database. If there is no problem, our Kaspersky will automatically go to the c: 11 directory to find the upgrade file. The whole upgrade process is much faster than through the official server. (7)
When we confirm that the downloaded patch and Upgrade Program have no problems, we can start to build Kaspersky to upgrade the server.Iv. Establishment of Kaspersky upgrading Server:
Kaspersky's own upgrades Support HTTP and local directories as well as FTP transmission. Therefore, we can build an FTP server to complete the so-called upgrade of the server, here, I use the ftpserv tool to build the FTP service.
Step 1: Start the ftpserv tool and click the "Add User" option. In the user settings window, specify the directory that anonymous users can access as the directory where the patch package is downloaded, for example, the c: 11 directory, then, specify the "Download" permission for anonymous users and set the maximum number of simultaneous connections to multiple. Save and exit. (8)
Step 2: Start the FTP tool to enable the FTP service on the current server. (9)
Step 3: Open the IE browser and access the ftp server through FTP: // ip address/. If there is no problem, we should be able to see the previously downloaded Kaspersky upgrade patch directory. (10)
Step 4: confirm that the patch is correct and the FTP service runs as usual. Then, we can upgrade the virus database by specifying the Kaspersky server address on any host in the network. In the "update settings" window, click the Add button to select an update source and enter the previously created ftp server address, note that the FTP server address writing method should be ftp: // ip/, and the last "/" must not be less. (11)
Step 5: confirm to save and click the Upgrade button in Kaspersky Anti-Virus Software again. The software will automatically connect to the configured FTP to download the virus database and patch. The upgrade speed has been greatly improved. (12)
Step 6: During the upgrade and download process, we can see the transmission status in the FTP build gadgets window in real time, so as to further understand the upgrade status of each Intranet client. (13)
If the i0607g cannot be found during the upgrade. xml, then we need to set the corresponding/index/6/i0607g from the official FTP. download the xml file. If not, download the blacklist in the updates_x directory. clear the lst file. In addition, the Kaspersky upgrade server can be set to user-verified FTP. We can use the user name and password to enhance its security and prevent hackers from using anonymous accounts for intrusion.
Of course, for careful network administrators, we can set up a batch file so that the server can regularly download patches and upgrade packages from the official FTP, in this way, you can ensure the timeliness of upgrading the server of Kaspersky created on the Intranet.
V. Summary:
Through the methods described in this article, we can create a Kaspersky upgrade server on the Intranet, which solves the problem of slow upgrade speed and effectively utilizes the network bandwidth to avoid network congestion caused by repeated downloads. You can use this method to upgrade the anti-virus software of Kaspersky for network segments that prohibit Internet connection. The experiment was successful on Kaspersky 6 and 7.