Proxy Server

[Trooper311 0]

Hi all,

I want to setup a Proxy server for endpoints that are not currently connected to our domain/vpn.  I only have one standalone ERA server in my enviroment.  Is it ok to setup the Proxy on my existing server or do I need to spin up a new vm just to handle this issue?

Just looking for some advice/best practices.

Thanks!

 

[MichalJ 434]

It mainly depends on your network setup, and the amount of clients, that will be connecting from the outside.

If you will install it on the same machine, make sure, that you use a different port for connection, as both proxy / agent are by default listening on port 2222 (you can simply open that port to the public internet in that case).

if your network is bigger, then a dedicated machine might be a better case.

[Trooper311 0]

My network is not huge, at the moment there are only about 80 machines connected.  I would say the max would be up to 130 or so.

By default, proxy is not enabled correct?  Though it does seem that clients are getting updates from the server on site.  I see in the Update under HTTP PROXY the default setting is Use global proxy server settings.  Assme that has to change?  

I also see there is a "Use direct connection if proxy is not available"  Is that easier? I will only need this for a handful of laptops (sales) when they are on the road.  What would be the best way to set this up?

EDIT:  Basically this here:  hxxp://help.eset.com/ees/6/en-US/index.html?idh_config_connection.htm

Edited October 31, 2017 by Trooper311

[MichalJ 434]

Ok, so you have been talking about the HTTP Proxy, correct? Then, you can easily install it on the same machine. If you have installed the ERA by the All in one installer, Apache HTTP proxy is installed by default (you can check that, by navigating to "ADMIN / Policies" and checking if they are policies for "http proxy usage". By this, connected endpoints will by default attempt to update via the proxy, and if proxy is not available, directly from the internet.

Details: http://help.eset.com/era_install/65/en-US/index.html?apache_http_proxy.htm

Edited October 31, 2017 by MichalJ

[Trooper311 0]

14 minutes ago, MichalJ said:

Ok, so you have been talking about the HTTP Proxy, correct? Then, you can easily install it on the same machine. If you have installed the ERA by the All in one installer, Apache HTTP proxy is installed by default (you can check that, by navigating to "ADMIN / Policies" and checking if they are policies for "http proxy usage". By this, connected endpoints will by default attempt to update via the proxy, and if proxy is not available, directly from the internet.

Details: hxxp://help.eset.com/era_install/65/en-US/index.html?apache_http_proxy.htm

Ok great. So is the link I posted above how I would set that up?

[Trooper311 0]

Is this all I need to do?

[Trooper311 0]

Currently there is no HTTP Proxy Usage policy setup.

[SeasonPast 2]

If you need a good proxy server then check this one https://buy.fineproxy.org/eng/ . There you will find many packages with different IP adresses. Choose one that suits your needs. Overall good service.

Edited December 1, 2017 by SeasonPast