Upgrade from ERA 5 To ESMC7 in Offline Environment

[Ali Sp 0]

Hi

we are looking forward to upgrade our eset remote administrator 5 to ESMC 7 in offline environment. would you please help me about :

1. after installing esmc7, how i can activate the console and eset product in our network without connecting our network to internet? should i create offline license and create activation task ?

2.how to deploy update through esmc 7 offline ?

####we used to copy the mirror file of the one of our clinet that connected to internet into the USB Flash and move it in a shared folder in offline network and by configuring the era 5 to this folder we deploy the update in the network #######

3. how to upgrade eset product in our offline environment ? 

[Marcos 4,705]

1, Generate an offline license file through eba.eset.com (https://help.eset.com/eba/en-US/downloading-offline_legacy-licenses.html) and use it to activate Endpoints from ESMC (https://help.eset.com/esmc_admin/70/en-US/offline_license.html).

2, You can download an installation file, share it withing the offline network and use the URI in a software installation task (https://help.eset.com/esmc_admin/70/en-US/client_tasks_software_install.html)

3, To update modules in a completely offline network, you have two possibilities:
i. Use the command-line Mirror tool to create an offline mirror
ii. Use an ESET security product to create an offline mirror

If there's at least one computer with Internet connection in the network, you can use HTTP Proxy to update the offline clients through it.

For general instructions on migrating from ERA v5 to ESMC, please read https://help.eset.com/esmc_install/70/en-US/migration_from_era5.html.

[Ali Sp 0]

Thanks for  your helpful links  Marcos. i solved most of the issues. i created offline license and i could activate the esmc 7 and eset product. Also i upgraded the products from version 5.x to 7.x by using client task >  software installation > direct package URL . But only issue that remain is client modules update failed.

what i did is :

1.I updated one of the eset client that has direct connection to the internet and copy the files of mirror folder to USB Flash and move it to our offline network and created a folder in esmc 7 offline server machine and pasted the mirror files in it and i shared it. Also i configured the esmc 7 to use this shared folder for deploying update to clients instead of autoselect as you can see in the picture that i attached  .

2.I created two policies for ESET Endpoint for windows  and ESET Management Agent  for connecting to proxy and downloading the updates as you can see in the attachment .ESET Endpoint Client received the polices but unfortunately still modules update failed. would you please help me in this case ?

 

 

 

 

 

Edited February 18, 2019 by Ali Sp

[MichalJ 430]

If you are updating from mirror, you should not set the address in "proxy settings", but instead in "update server" setting under "update" section of your policy.

Proxy server will work only in case, you actually install proxy component on the machine with direct internet connection, so all machines on your network will try to reach ESET with traffic diverted over your proxy, From what you have said, this is not your setup. So you have to edit your policies, and set the mirror server address in the "update server" setting, instead of default "AUTOSELECT" or "CHOOSE AUTOMATICALLY". 

[Ali Sp 0]

Thanks MichalJ 

1.would you please tell me what should i set in My profile >MODULES UPDATE  > Custom server and username and password?

2.And what should i set under CONNECTION OPTIONS > WINDOWS SHARES > Connect to LAN as and username and password ?

what i set is :

address of local mirror shared folder is \\172.16.0.12\mirror and clients can access it without authentication required and also they have read/write permission . In custom server i set the local address of mirror shred folder and  domain administrator credential in username & password part and in Connect to lan as i chose Specified user and i set same credential.but still server not found error displayed .

 

 

Edited February 24, 2019 by Ali Sp

[MichalJ 430]

I am sorry, but I do not know how to help you. Maybe @Marcos will have some ideas, as he has better experience with the mirror operation. 

[Marcos 4,705]

Unfortunately, it is not clear to me why you are getting a Server not found message if " \\172.16.0.12\mirror" opens in a browser alright. I'd rather expect an authentication failure if no username/password to access the share was specified.

To avoid issues, I'd recommend sharing mirrored files via http and then using the update server "http: \\172.16.0.12\mirror" (or whatever the path is) on clients.

[Marcos 4,705]

If the machine 172.16.0.12 is connected to the Internet and other clients can access it, I'd strongly recommend using HTTP Proxy instead of mirror in order to take advantage of streamed updates and LiveGrid which is not possible when computers are offline and update from a mirror.