Trooper311 0 Posted October 31, 2017 Share Posted October 31, 2017 Hi all, I want to setup a Proxy server for endpoints that are not currently connected to our domain/vpn. I only have one standalone ERA server in my enviroment. Is it ok to setup the Proxy on my existing server or do I need to spin up a new vm just to handle this issue? Just looking for some advice/best practices. Thanks! Link to comment Share on other sites More sharing options...
ESET Staff MichalJ 434 Posted October 31, 2017 ESET Staff Share Posted October 31, 2017 It mainly depends on your network setup, and the amount of clients, that will be connecting from the outside. If you will install it on the same machine, make sure, that you use a different port for connection, as both proxy / agent are by default listening on port 2222 (you can simply open that port to the public internet in that case). if your network is bigger, then a dedicated machine might be a better case. Link to comment Share on other sites More sharing options...
Trooper311 0 Posted October 31, 2017 Author Share Posted October 31, 2017 (edited) My network is not huge, at the moment there are only about 80 machines connected. I would say the max would be up to 130 or so. By default, proxy is not enabled correct? Though it does seem that clients are getting updates from the server on site. I see in the Update under HTTP PROXY the default setting is Use global proxy server settings. Assme that has to change? I also see there is a "Use direct connection if proxy is not available" Is that easier? I will only need this for a handful of laptops (sales) when they are on the road. What would be the best way to set this up? EDIT: Basically this here: hxxp://help.eset.com/ees/6/en-US/index.html?idh_config_connection.htm Edited October 31, 2017 by Trooper311 Link to comment Share on other sites More sharing options...
ESET Staff MichalJ 434 Posted October 31, 2017 ESET Staff Share Posted October 31, 2017 (edited) Ok, so you have been talking about the HTTP Proxy, correct? Then, you can easily install it on the same machine. If you have installed the ERA by the All in one installer, Apache HTTP proxy is installed by default (you can check that, by navigating to "ADMIN / Policies" and checking if they are policies for "http proxy usage". By this, connected endpoints will by default attempt to update via the proxy, and if proxy is not available, directly from the internet. Details: http://help.eset.com/era_install/65/en-US/index.html?apache_http_proxy.htm Edited October 31, 2017 by MichalJ Link to comment Share on other sites More sharing options...
Trooper311 0 Posted October 31, 2017 Author Share Posted October 31, 2017 14 minutes ago, MichalJ said: Ok, so you have been talking about the HTTP Proxy, correct? Then, you can easily install it on the same machine. If you have installed the ERA by the All in one installer, Apache HTTP proxy is installed by default (you can check that, by navigating to "ADMIN / Policies" and checking if they are policies for "http proxy usage". By this, connected endpoints will by default attempt to update via the proxy, and if proxy is not available, directly from the internet. Details: hxxp://help.eset.com/era_install/65/en-US/index.html?apache_http_proxy.htm Ok great. So is the link I posted above how I would set that up? Link to comment Share on other sites More sharing options...
Trooper311 0 Posted October 31, 2017 Author Share Posted October 31, 2017 Is this all I need to do? Link to comment Share on other sites More sharing options...
Trooper311 0 Posted October 31, 2017 Author Share Posted October 31, 2017 Currently there is no HTTP Proxy Usage policy setup. Link to comment Share on other sites More sharing options...
SeasonPast 2 Posted December 1, 2017 Share Posted December 1, 2017 (edited) If you need a good proxy server then check this one https://buy.fineproxy.org/eng/ . There you will find many packages with different IP adresses. Choose one that suits your needs. Overall good service. Edited December 1, 2017 by SeasonPast Link to comment Share on other sites More sharing options...
Recommended Posts