Eset Endpoint Security 6 Policy Lock

[zulhilmi 0]

Hi, we use Eset endpoint security 6 at our end user, and there are some user been manage by ERA, and some user are outside of the networks. We use same installer for all user in the network and outside of the networks. the problem is in our policy we set all the user have to get a update from ERA Server. however we find user that not connect to the ERA server also use the policy that need them to get an update from the ERA Server.  And that make the client fail to get an update, we try to set a policy manually on the user outside of the networks to get an update from the internet but fail because the policy has been lock. Is there any ways to we unlock the policy for the client outside from our networks. Thanks

 

[Marcos 5,143]

You should do the following:

1, Create a secondary update profile for updates from outside of LAN. This profile will get updates from ESET's servers.
2, Edit an update task (ideally use the default Regular update task) and specify the primary and secondary update profile.
3, Edit a policy and under Tools -> Proxy server, enable "Use direct connection if proxy is not available".

Once applied on clients, both clients in LAN and outside of LAN should update fine.

Last but not least, we'd recommend abandoning the local mirror and using an HTTP proxy (e.g. Apache HTTP proxy bundled with the All-In-One ERA installer) to substantially reduce the traffic with ESET's servers.

[bbahes 29]

18 minutes ago, Marcos said:

You should do the following:

1, Create a secondary update profile for updates from outside of LAN. This profile will get updates from ESET's servers.
2, Edit an update task (ideally use the default Regular update task) and specify the primary and secondary update profile.
3, Edit a policy and under Tools -> Proxy server, enable "Use direct connection if proxy is not available".

Once applied on clients, both clients in LAN and outside of LAN should update fine.

Last but not least, we'd recommend abandoning the local mirror and using an HTTP proxy (e.g. Apache HTTP proxy bundled with the All-In-One ERA installer) to substantially reduce the traffic with ESET's servers.

Wouldn't just option 3 been enough?

[Marcos 5,143]

1 hour ago, bbahes said:

Wouldn't just option 3 been enough?

Not if they update from a local mirror which is not accessible from outside.

[zulhilmi 0]

Our user right now has no connection with our main serve and i think if we change anythung on server it will not effect the client.  And it should get an update from a internet. 

My question is how we want to change the update setting on the client and unlock the policy setting.