Kaspersky Security

for Virtualization
Virtualization is all about maximizing your investment through optimizing your IT
infrastructure. If your anti-malware solution requires both software and a signature
database to be installed on each of your virtual machines, the object of the exercise is
partly defeated your protection is compromising your productivity.
And security needs to cover your entire virtual configuration too not just endpoints,
but servers and particularly virtual networks.
Kaspersky Security for Virtualization provides agentless, award-winning anti-malware
protection and network security for VMware based virtual environments.
As an agentless solution, Kaspersky Security for Virtualization protects your virtual
infrastructure machines, servers and data centers more efficiently. The application
is straightforward, flexible, and includes advanced management features that simplify
security tasks across all your physical, mobile and virtual computing assets.
With Kaspersky Security for Virtualization, you benefit from superior protection
improving your system utilization rates, reducing the burden on IT administration and
security, and increasing your overall return on investment (ROI).

Network-level protection. Kaspersky technology provides powerful protection for network traffic on your
hypervisor, through a combination of Intrusion Prevention (IPS) and Intrusion Detection (IDS) Systems.
Kaspersky is the first security vendor to provide this critical network-level functionality, supporting the latest
VMware vCloud Networking and Security technology.
File-level anti-malware protection. Kasperskys award-winning anti-malware engine provides automatic realtime, agentless protection for every active virtual machine, on-access and on-demand.
Cloud-assisted protection from zero-day threats. The cloud-based global Kaspersky Security Network
(KSN) identifies and protects against new and suspected threats, even zero-day threats, with a response time
as low as 0.02 seconds.
Shared Cache. Files are scanned just once before being shared by any virtual machine, rather than separately
by each individual machine accessing them. This approach delivers clear efficiency savings and enhanced
performance without compromising protection.
Centralized Management Console. Kaspersky Security Center provides a single-pane-of-glass view of all
protected devices; virtual, physical and mobile. The protection status of each endpoint can assessed at a
glance, and any remedial action swiftly undertaken from a central point.
Extremely easy to deploy and manage. Security is delivered as a virtual appliance, available to every virtual
machine on the physical server. Users simply create their new virtual machine and copy over a one-file image.
Different security settings can easily be applied to different groups of virtual machines.

Agentless Security Deployment

VM

VM

APP

APP

OS

OS

Virtual
Appliance
File Level
Protection

VM

Agentless Security Deployment

APP

APP

OS

APP

Virtual
Appliance

VMware vShield

OS

OS

VMware ESXi

APP

APP

OS

OS

vShield

Virtual Machine Layer

With Kaspersky Protection

Virtual
Appliance
Network
Protection

vCloud Networking and Security

VMware Layer

ESXi

Physical
Physical Host
Host

Hardware Layer

Kaspersky machine and network protection interfaces directly with your VMware environment.

Single Platform Architecture

Kaspersky solutions, including Kaspersky Security for Virtualization, are all designed specifically to work seamlessly together and built inhouse from the same codebase, using a single platform architecture. This means no gaps, conflicts or inefficient overlaps in your IT security.
Instead, an efficient, fully-integrated security platform delivers outstanding protection which is easy to manage and highly cost-effective.
Mobile Workstations

File Server

Agent-based Virtual Deployment

Agentless Virtual Deployment

APP

APP

APP

OS

OS

APP

APP

OS

OS

OS

Virtual
Appliance

APP

APP

OS

OS

APP

APP

APP

APP

OS

OS

OS

OS

UNIFIED ADMINISTRATION CONSOLE

(Kaspersky Security Center)

+VMware vShield
Workstations

Mobile Devices

Protection for virtual machines is managed, together with all other endpoints, through a single unified console.

Flexible Licensing for IaaS PROVIDERS

General Requirements:

For some businesses, including data centers and IaaS suppliers,

it is difficult to calculate the number of virtual machines needed
at any one time, as machine requirements fluctuate according to
demand. In these cases, where hardware resources are known
but virtual machine numbers are fluid, a per virtual machine
licensing model may be unhelpful.

VMware ESXi 4.1 or later

VMware vCenter Server 4.1 or later
VMware vShield Endpoint 5.0 or later (VMware vShield Endpoint license is
included in VMware ViewPremier and VMware vShield App. Also VMware
vShield Endpoint license is included in VMware vSphere 5.1 or higher)

Kaspersky Security for Virtualization now offers a new, additional

way of licensing based on a per core hardware model rather
than traditional per CPU licensing. Thats good news for IaaS
providers, who will find it even easier to offer valuable data protection
reassurance to their customers.

File Anti-Virus

Network Protection

VMware ESXi 5.1 or later

VMware vCenter Server 5.1 or later
VMware vCloud Networking and Security 5.1 or later

Software requirements for the guest operating

system of the virtual machines:
Desktop operating systems:

How to buy

Windows Vista (32 bit)

Windows 7 (32- or 64-bit)
Windows XP SP3 or later (32- or 64-bit)

Kaspersky Security for Virtualization can be

purchased from Kaspersky Labs partners.
The list of Kaspersky Lab partners is available at:
www.kaspersky.com

Windows Server 2003 SP2 or later (32- or 64-bit)

Windows Server 2003 R2 (32- or 64-bit)
Windows Server 2008 (32- or 64-bit)
Windows Server 2008 R2 (64 bit)

Server operating systems:

Kaspersky Security Center 10

KS-VIRT/Version 2.0/Feb13/Global
2013 Kaspersky Lab ZAO. All rights reserved. Registered trademarks and service marks are the property of their respective owners.
Windows Server is a registered trademark of Microsoft Corporation in the United States and other countries.