No Updates to DMZ Clients w/ Load Balance

[ROkum 0]

I have two (2) boxes in our DMZ, the correct Port is open and Firewall guys can see traffic over this port.
These two (2) boxes are not getting Signature Updates nor Module Updates.

These boxes are using Windows Network Load Balancing; and in the ESET RA; they both appear; however, the both appear with the NLB vIP, not there individual IP's.
I'm wondering is this the problem.

I've tried uninstalling/reinstalling to ensure clean; and all that went well, Agent gets installed and can communicate with ESET RA, but again, no updates...
Any Help appreciated....

 

[Marcos 5,074]

Is ESET Endpoint 6.6 installed on these machines? What error are you getting when attempting to update?

[ROkum 0]

Client = ESET File Security v6.5.12014.1
RA = ESET Remote Administrator (Server) v6.5.522.0

But I'm unable to Activate the License as well, does it not use RA for this or does it have to get to Internet.
I installed from a All-In-One package built in the RA which included a valid license....

 

[Marcos 5,074]

Quote

But I'm unable to Activate the License as well, does it not use RA for this or does it have to get to Internet.

Unless you use an offline license on completely isolated machines that never connect to the Internet, it's Endpoint itself that connects to activation servers and performs activation. Try installing Endpoint using the msi installer and then use your license key to activate it. With correct proxy server setup and firewall permitting access to ESET's activation servers (see https://support.eset.com/kb332/), activation should succeed. Should it fail, an ACT error code should be displayed.

If that all works, we can look into the issue with activation of all-in-one installers.

[ROkum 0]

Well - All is good.
Firewall guy didn't have the Load Balance IP provision within the Firewall correctly.
Once he fixed that - Activation occurred, then Updates went on their marry way.

However, a few questions:
1. Each box will still access the internet to verify license (True/False)
2. If above is True, then I assume that the RA is just a mechanism to push & monitor, it actually doesn't verify...

[MichalJ 434]

Hello @ROkum

1-true (unless activation was done using offline file was done, but even then it will attempt to reach the licensing servers, but if it does not, client will function normally). 

2-correct, ERA just delivers the token, but the client gets verified against our cloud licensing servers. 

[ROkum 0]

Well thanks for all the assistance.
All issues resolved at the moment!!!