Setting up a mirror with an appliance server

[RCD_Matt 0]

I am currently migrating away from ERA v5 installed on a windows 2003 server to a ERA v7 appliance.

On the old server there was a windows share used as a mirror. from reading the documentaion it looks as if to have a mirror on version 7 (which is needed as a lot of the PC's do not have internet access) I need to setit up on another client PC (which does have internet access). Is this correct?

I was going to install enpoint protection on a server and set the mirror up on that but it seems to need a different version (Windows server 2012 compared to Windows 7 clients) so not sure if it will mirror the correct files for the client installs?

Is there another way of doing this? Haveing the mirror running off a random client PC seems a little off..... (Says the guy running out of date windows versions but still!)

Matt

[Marcos 5,074]

If at least one machine has Internet access (e.g. the ESMC server), I'd recommend installing HTTP proxy and pointing other machines in the network to update through it. It won't only save a lot of traffic but will also enable taking advantage of LiveGrid, streamed updates, antispam and Web Control.

[RCD_Matt 0]

Hi Marcos,

I'm using a VMware appliance as the server so I don;tt hink I can have the mirror on that?

I can use a spare PC but that will a) tie up a license and b) if there's an issue with the updates I won;t necessarily know as I won;t be using thatt PC very often (choosing another PC woould mean that no updates would come down if that PC was turned off due to annual leave etc...).

It just seems like using the appliance hamstrings the mirror process a bit so I was wondering if there was another way.

Matt

[Marcos 5,074]

You can enable HTTP Proxy on the ESMC virtual appliance by following these instructions:

https://help.eset.com/esmc_deploy_va/72/en-US/enable_apache_http_proxy.html

Of course, it's also possible to alternatively use a mirror but it doesn't support streaming updates, ie. it could take a few hours for clients to be able to recognize new threats.

[RCD_Matt 0]

Ah ok that sounds like a better solution. I have gone through that but I'm not sure the following command has worked:

 

htcacheclean -d60 -t -i -p/var/cache/httpd/proxy -l10000M

 

I just get the tail end of the man page which makes me think something is wrong (see attached)

 

 

[Marcos 5,074]

Probably you made a typo, however, the command you've posted seems to be ok.

[RCD_Matt 0]

Ah OK, tried it again and it's worked so probably a typo... onlydifference was the -l1000M instead of the -l10000M still working now!

Thanks.

Matt