ESET Bridge and OS X

[j-gray 37]

Are there any plans to add OS X support for the Bridge? Or is there an alternate solution that allows caching for OS X clients?

We had this functionality with Apache HTTP Proxy, but looks like that's being sunsetted and the functionality is removed from the new version.

[Peter Randziak 1,160]

Hello @j-gray,

ESET Bridge is indeed a successor for the Apache HTTP Proxy.

What exactly do you mean by support for OS X?

The ESET Bridge is able to cache the http traffic (like caching of module updates) and to pass the httpS traffic to most of the ESET's services listed at https://support.eset.com/tr/kb332-ports-and-addresses-required-to-use-your-eset-product-with-a-third-party-firewall

Peter

[j-gray 37]

@Peter Randziak Thanks for the reply. The document you linked looks like firewall info, so does not appear to be relevant.

ESET's bridge documentation, lists support only for Windows platforms and states specifically, "ESET Bridge does not support HTTPS traffic caching for ESET security products (and their versions) not listed above—Linux/macOS security products and earlier Windows security products."

I'm primarily interested in caching downloads and updates, but from everything I read, only Windows and Linux clients are supported. Meaning that we can't cache anything for OS X clients.

[Peter Randziak 1,160]

Hello @j-gray,

18 hours ago, j-gray said:

Thanks for the reply. The document you linked looks like firewall info, so does not appear to be relevant.

You are welcome, well yes it covers services which needs to be allowed on 3.rd party firewall.
It lists the services to which the ESET products connect to (vast majority of them) and those need to be allowed in the ESET Bridge ACLs as well...

18 hours ago, j-gray said:

ESET's bridge documentation, lists support only for Windows platforms and states specifically, "ESET Bridge does not support HTTPS traffic caching for ESET security products (and their versions) not listed above—Linux/macOS security products and earlier Windows security products."

yes that is for the HTTPS traffic as that needs to be intercepted by the ESET Bridge in order to be cache-able.

18 hours ago, j-gray said:

I'm primarily interested in caching downloads and updates, but from everything I read, only Windows and Linux clients are supported. Meaning that we can't cache anything for OS X clients.

The module updates are by default served over HTTP so they can be cached by ESET Bridge.
By Downloads I assume you mean those served from Repository, right?
I assume that yes, those are being served by HTTP as well, for example the latest agent for macOS is being downloaded from http://repository.eset.com/v1/com/eset/apps/business/era/agent/v10/10.1.3267.0/agent_macosx_x86_64.dmg so it can be cached by ESET Bridge / standard caching proxy as well.

Peter

[j-gray 37]

@Peter Randziak Ok, if I understand correctly, you're saying that the Bridge can cache updates (modules, product updates), etc.) for OS X as long as the requests are via HTTP and not HTTPS? If that's the case, then great.

The documentation is a bit confusing, then, as there's no mention of HTTP traffic and the only list of supported products I could find were Windows and specifically not OS X.

Thanks again for you help. I appreciate your presence here, as well as the other ESET folks.

[Peter Randziak 1,160]

Hello @j-gray,

19 hours ago, j-gray said:

@Peter Randziak Ok, if I understand correctly, you're saying that the Bridge can cache updates (modules, product updates), etc.) for OS X as long as the requests are via HTTP and not HTTPS? If that's the case, then great.

Yes the ESET Bridge or any standard proxy with the caching enabled.

19 hours ago, j-gray said:

The documentation is a bit confusing, then, as there's no mention of HTTP traffic and the only list of supported products I could find were Windows and specifically not OS X.

Well the documentation stats what is supported for the HTTPS traffic caching, I admit that the behavior for http / macOS might be not that obvious from it 🙂 

It is stated as 
"•Cache and distribute updates to client computers and installation packages to ESET Management Agent."

I submitted an improvement request for the Docu team to make the info more easy to understand.

19 hours ago, j-gray said:

Thanks again for you help. I appreciate your presence here, as well as the other ESET folks.

Thank you for your very positive feedback provided, really appreciated.
We are also glad to have you, as a very active and cooperative user on the forum.

Peter

[j-gray 37]

@Peter Randziak I see that the documentation has been updated already. That's awesome! 👍

[Peter Randziak 1,160]

Hello @j-gray,

the Docu team was really fast, kudos go to them.
I passed your feedback to them, thank you.

Peter