We have ERA setup on an internal server on our LAN, and agents from inside the office can currently connect to the ERA over the LAN. However, since most endpoints are laptops and many users work remotely, we also want to set things up so agents can connect to ERA over the internet. I'm hoping someone can outline the steps necessary to accomplish this?
I understand that I need to open port TCP 2222 in the firewall, so internet traffic can reach ERA: hxxp://support.eset.com/kb3304/
It also looks like I can configure the policy to point to more than one address for the ERA server, so agents would first try the local LAN IP of the ERA server, then try the public internet IP: hxxp://help.eset.com/era_admin/65/en-US/index.html?admin_pol_planed_for_migration.htm
What else would I need to do? Would I need to create a different certificate, or would I need two certificates (one for LAN, one for internet)?
Any advice would be much appreciated!