Mac Antivirus Basic Setup, Configuration and Installation
Core Definition Download
The core downloads definition updates for Macs just like it does for Windows PCs Antivirus. These in-turn get downloaded to the Mac clients based on the agent settings you define for your clients. To start downloading Mac Antivirus Updates Definitions on the core select Tools > Security and Compliance > Patch and Compliance and double-click on the Download Updates icon located on the menu bar.
This will open the Download Updates interface, ensure the Updates tab is selected.
Mac Antivirus Definition are located under Mac > Security > Antivirus. You will see the Ivanti AntivirusUpdates checkboxes. Check the definition version(s) you need and Apply at the bottom of the dialog to make the selection applicable.
You can also download the definitions manually on the Landesk Antivirus tab by clicking the Get Latest Definitions button, making the selections and clicking Ok.
Installation and Removal
Installation and removal of the Mac Antivirus agent can be configured on the core. Mac Antivirus can be installed when the agent gets installed by selecting the Landesk Antivirus option in the agent configuration. This security feature will only be available if you are licensed for it.
Mac Antivirus can also be installed or removed through a security change task in the Security Activity tool. The Security Activity tool can be found by selecting Tools > Security and Compliance > Security Activity.
These items create a scheduled task that you can add devices to individually or by scope or query.
Agent Settings
Mac Antivirus settings are configured in Agent Settings > Security > Landesk Antivirus – Mac. Here, you can open an existing antivirus agent setting or create a new one.
The following section will outline the properties of the Mac Antivirus agent settings. To view the settings right click on an agent setting and select Properties.
The General area just allows you to name your setting. The Protection area allows you to specify what protection runs on the end clients and options on how they run. Protection Scope here allows you to set what gets monitored through the drivers detected. By checking a box in this dialog, it enables monitoring on devices that use those drivers on the Mac.
You can also add exclusions to the Network Attack Blocker. This is done by clicking the Exclusion button and entering the IP addresses that you want to exclude from being monitored
The Virus Scan area allows you to setup and configure Full Scans and Critical Area Scans, how they behave on the devices and schedule when they run. The Help button can be accessed here for more detailed information on each item in the window to help you determine what options you want enabled or disabled on the clients.
The Threats area gives you options as to what malware is detected. Again, the Help button gives greater detail as to each of the options available.
In the Update area lets you define how and where you get definition updates, ether from the Core, Preferred Server or Internet directly. Checking the Update box and clicking the Change Schedule allows you to define when and how often the clients update definitions.
Important: Due to the way the local daemon runs on the Mac OS as designed by Apple, Mac Antivirus will only update if a user is logged in. The device can be locked, but a user must be logged in, for Mac Antivirus to download updates.
The Reports area allows configuring of how many days’ items are kept in the reporting section on the clients. The Appearance area allows configuration of notifications and if you want an icon displayed on the menu bar on the mac clients.
Important: Some settings you configure with agent settings will not be displayed in the Kaspersky GUI on the Mac client. The most notable is the message that Automatic Updates are disabled. Updates on the Mac are handled through a different mechanism other than the Kaspersky GUI so our agent settings can get them from a core instead of the internet and as such automatic updates are disabled directly in the GUI itself.