Kaspersky Security Center

Kaspersky Security Center is an administration console for Kaspersky Labs security solutions and systems management tools.

Types of Assets Fetched

This adapter fetches the following types of assets:

  • Devices
  • Software
  • SaaS Applications

Parameters

  1. Kaspersky Security Center Domain (required) - The hostname or IP address of the Kaspersky Security Center server.

  2. User Name and Password (required) - The credentials for an internal read-only user account that has the permissions to fetch assets.

  3. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

  4. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Kaspersky Security Center.png

APIs

Axonius uses the Kaspersky Security Center Open API. The following endpoints are called:

  • POST api/v1.0/login - Authenticates to Kaspersky Security Center.
  • POST api/v1.0/HostGroup.FindGroups - Retrieves the administration groups.
  • POST api/v1.0/HostGroup.FindHosts - Searches for the managed devices.
  • POST api/v1.0/HostGroup.GetHostProducts - Retrieves the software installed on each device.
  • POST api/v1.0/HostGroup.GetHostInfo - Retrieves detailed information about each device.
  • POST api/v1.0/ChunkAccessor.GetItemsCount - Retrieves the number of items in a result set.
  • POST api/v1.0/ChunkAccessor.GetItemsChunk - Retrieves the items of a result set in chunks.

The following endpoints are called only when Fetch BIOS serial number from hardware inventory is enabled:

  • POST api/v1.0/SrvView.ResetIterator - Opens the hardware inventory view (HWInvPCSrvViewName).
  • POST api/v1.0/SrvView.GetRecordCount - Retrieves the number of hardware inventory records.
  • POST api/v1.0/SrvView.GetRecordRange - Retrieves the hardware inventory records in ranges.
  • POST api/v1.0/SrvView.ReleaseIterator - Closes the hardware inventory view.

Required Ports

  • Port 13299

Advanced Settings

Note:

  1. Fetch BIOS serial number from hardware inventory (Default: disabled) - Select this option to retrieve BIOS serial numbers from the Kaspersky Security Center hardware inventory and add them to the device's Device Serial field when a non-empty BIOS serial number is available. This setting is shown in the Kaspersky Security Center Configuration section, under Hardware Inventory (BIOS Serial Number). Enabling it adds extra API calls to each fetch (the SrvView calls listed in APIs), which can increase fetch time in large environments.



Did this page help you?