ESMC Auto Upgrade

[kvngselassie 1]

Hello All,

 

Why is it that ESMC doesn't to an automatic update for it various components silent for the On-Prem Server and also all connected devices silent without have to prompt the customer to do so.

 

Sometimes its stressful to go through the pain of getting you infrastructure in order then later having to run the ESMC upgrade all over...

[Marcos 5,070]

ESMC is a complex mission-critical product and it's important for administrators that it runs reliably all the time. Upgrade should be performed after backing up the database and at the time when administrators can afford to solve possible issues should something go haywire during upgrade. Likewise administrators do not let server systems upgrade automatically and immediately after the OS maker releases updates not addressing critical vulnerabilities.

[kvngselassie 1]

On 6/26/2020 at 4:17 PM, Marcos said:

ESMC is a complex mission-critical product and it's important for administrators that it runs reliably all the time. Upgrade should be performed after backing up the database and at the time when administrators can afford to solve possible issues should something go haywire during upgrade. Likewise administrators do not let server systems upgrade automatically and immediately after the OS maker releases updates not addressing critical vulnerabilities.

Thanks for your response.

 

I have another concern with the Endpoint Security Product Version... Is there a way endpoints can automatically upgrade their versions when new ones are available.

Sometimes doing the manual upgrade from the console takes up a lot of time.

Additionally, does apache http proxy help with auto upgrades by distributing upgrades of endpoint product from maybe endpoint security Version 7.2 to maybe 7.3

[Marcos 5,070]

1, Automatic program update will be supported. While the differential so-called uPCU update has been implemented in our security products for a long time, ESMC is not prepared for it 100% yet. It is one of our top priorities to have this in the next version of ESMC also with regard to Windows 10 21H1 update which will require Endpoint 7.3 or newer.

2, Sending a software install task to clients and getting Endpoint updated shouldn't take long as long as you use a http proxy to cache updates and installers. What could happen is that you didn't use an http proxy and you sent a software install task to many clients at once. Then agent on each client started to download installers which congested your Internet bandwidth.

3, Http proxy generally helps with caching update files and installers. It helps save traffic when you send a software install task, when clients download updates and will also help minimize the traffic when we will release a uPCU program updates in the future as well.

[kvngselassie 1]

15 minutes ago, Marcos said:

1, Automatic program update will be supported. While the differential so-called uPCU update has been implemented in our security products for a long time, ESMC is not prepared for it 100% yet. It is one of our top priorities to have this in the next version of ESMC also with regard to Windows 10 21H1 update which will require Endpoint 7.3 or newer.

2, Sending a software install task to clients and getting Endpoint updated shouldn't take long as long as you use a http proxy to cache updates and installers. What could happen is that you didn't use an http proxy and you sent a software install task to many clients at once. Then agent on each client started to download installers which congested your Internet bandwidth.

3, Http proxy generally helps with caching update files and installers. It helps save traffic when you send a software install task, when clients download updates and will also help minimize the traffic when we will release a uPCU program updates in the future as well.

Thanks for your response. 

My last question;

Is it possible to have a high availability Apache Http Proxy in the ESMC environment to help reduce traffic to just one dedicated Apache Http Proxy with endpoints of over 6000 nodes?

If there is a possibility, what are the requirements and configurations to get it done. 

[Marcos 5,070]

For 6000 clients I would recommend using a dedicated server running the http proxy, especially if you would like to extend your license and take advantage of ESET Dynamic Threat Defense to substantially improve protection of your endpoints against ransomware and other malware.

[kvngselassie 1]

1 hour ago, Marcos said:

For 6000 clients I would recommend using a dedicated server running the http proxy, especially if you would like to extend your license and take advantage of ESET Dynamic Threat Defense to substantially improve protection of your endpoints against ransomware and other malware.

well noted... 

 

Thanks for your support. 

[kvngselassie 1]

Hi Marcos,

I have a little concern, can PCU files be distributed over mirror update which will in turn automatically update program versions when new versions are available.

And also how long will it take for version updates reflect on nodes in an Apache Http Proxy environment?

Edited July 21, 2020 by kvngselassie

[kvngselassie 1]

@Marcos,

I have a little concern, can PCU files be distributed over mirror update which will in turn automatically update program versions when new versions are available.

And also how long will it take for program versions reflect on nodes in an Apache Http Proxy environment?

[Marcos 5,070]

We have not released an uPCU application update for Endpoint yet. It should be ready for release after the upcoming update of ESMC in Q4/20. It's possible that the mirror tool will require an update to support uPCU.

[kvngselassie 1]

On 7/21/2020 at 5:50 PM, Marcos said:

We have not released an uPCU application update for Endpoint yet. It should be ready for release after the upcoming update of ESMC in Q4/20. It's possible that the mirror tool will require an update to support uPCU. 

@Marcos

unfortunately my clients do not use the Mirror Tool for their mirror updates, they use the inbuilt mirror function in the security products to implement the mirror update for their endpoints. 

 

Reasons I am asking this is because, traditionally ESET Home products can upgrade to latest versions when it's available without having to download from the ESET website to upgrade to latest versions.