Ricky Martin 1 Posted December 12, 2019 Posted December 12, 2019 Hi, Recently we've deployed ERA 7.0 successfully but we found it all the clients are getting updates though we've configured to connect to the server in order for the updates, kindly advice what went wrong?
Administrators Marcos 5,467 Posted December 12, 2019 Administrators Posted December 12, 2019 Quote but we found it all the clients are getting updates Please clarify what's wrong with that the clients are getting updates. That's how it should be; clients must get updates in order to be able to protect from new borne malware.
Most Valued Members ewong 8 Posted December 12, 2019 Most Valued Members Posted December 12, 2019 10 minutes ago, Ricky Martin said: Hi, Recently we've deployed ERA 7.0 successfully but we found it all the clients are getting updates though we've configured to connect to the server in order for the updates, kindly advice what went wrong? I think what you're trying to say is that while you've installed ERA successfully, the clients were getting updates directly from ESET's server instead of the server you specified? As far as I understand, what you need to do is to deploy a policy to the clients that changes the repository url path. If I remember correctly, it'd be under Policies->New Policy-><select the ESET product> -> change the updates repository to whatever you have setup. That said, I think another way of understanding your query is that while I believe you've set up ERA properly, the updates are set up from the MirrorTool. The ERA server doesn't store any of the updates at all. Edmund
Administrators Marcos 5,467 Posted December 12, 2019 Administrators Posted December 12, 2019 The question is if the machines are completely offline or if they have access to a machine with a proxy server running. It's a much better solution to update through an http proxy than from a mirror created by the mirror tool. Using a proxy saves a lot of network traffic and also enables machines to communicate with LiveGrid servers and receive streamed updates and thus improve protection against new borne malware.
Ricky Martin 1 Posted December 12, 2019 Author Posted December 12, 2019 Hi Marcos & ewong, Clients are getting updates directly from the Internet. The reason being asking is, we've site connected via Data link no internet to them and all the clients in that site are not able to get the updates from Internet and always gives error notification of those PC. So My query is to how I can configure so that all clients contact to ESET server Manager on the LAN to get the updates. Hope it is clear for you
Administrators Marcos 5,467 Posted December 12, 2019 Administrators Posted December 12, 2019 If the computers have no Internet connection (as you wrote " no internet to them"), you can set up a proxy server and configure it in an Endpoint policy so that the clients connect through the proxy. Alternatively you can create a mirror and install an http proxy to serve updates to clients via http. However, as mentioned before we prefer using a proxy to a mirror for good reasons.
Ricky Martin 1 Posted December 12, 2019 Author Posted December 12, 2019 Thank you Marcos, Can you pls. share me the link /documents to accomplish the goal. Thanks in advance
Administrators Marcos 5,467 Posted December 13, 2019 Administrators Posted December 13, 2019 If you're looking for installation steps for Apache HTTP proxy, read https://help.eset.com/era_install/65/en-US/http_proxy_installation_windows.html Apache HTTP Proxy can be installed with the ESMC All-In-One installer; in that case it's already pre-configured in policies. Otherwise you'll need to create a policy that will enable and configure the proxy server, separately for agent and security products.
Recommended Posts