I have been testing ERA6 and came across the same issue. We have installed ERA server in Azure and we have an ERA proxy and ERA HTTP(tomcat) proxy installed at our test site. Communications between the ERA server <--> ERA Proxy <--> Client endpoints work fine, however clients fail to activate unless we allow the client out to the internet. We have set the end point policy to use the tomcat proxy for both updates and internet access but it still doesn't work. To me it looks like the ESET HTTP proxy doesnt allow comms to the servers ESET are using to activate.