Every single unit is connecting to edf.eset.com:443

[deszynda 0]

Every single unit with EFS or EEA v6 that was activated is connecting to edf.eset.com:443 via our server proxy all the time. It's because every licence is being verified by ESET. I've already talked with polish ESET support and there is no way to avoid it.

It is causing a traffic on our server proxy. We have ERA installed so we really don't need to go outside our LAN. I can turn off server proxy and everything works fine but than licence information is not being updated in ELA console.

Is it a way to turn on server proxy settings for a specific period of time? For example daily during night so licences could be refreshed in ELA?

[Marcos 5,070]

Is it a way to turn on server proxy settings for a specific period of time? For example daily during night so licences could be refreshed in ELA?

 

That's not possible. Do you mean that the communication with ESET's EDF servers generates too much traffic? It shouldn't happen as Endpoint connects to the servers every few hours and only little data is transmitted. Could you be more specific as to how many clients you have and how much traffic is generated?

[deszynda 0]

Hello again,

There is around 1200 clients in my company. The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

[bbahes 29]

Hello again,

There is around 1200 clients in my company. The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

 

With new ERA V6 clients connect to Internet independently of ERA server.

You could install http proxy on ERA server and point clients to that proxy but that's all.

In my company we have situation where not small number of computers have no access to Internet at all but we do not see acceptable "solution" from ESET.

Edited July 28, 2015 by bbahes

[Marcos 5,070]

The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

Basically with ERA creating a local mirror, much more data will be downloaded compared to the scenario when clients update regularly via an http proxy server. The difference can be 100-200 MB in favor of updates via an http proxy.

[rcocchiararo 0]

 

The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

Basically with ERA creating a local mirror, much more data will be downloaded compared to the scenario when clients update regularly via an http proxy server. The difference can be 100-200 MB in favor of updates via an http proxy.

 

 

That seems false in my setup.

 

I have a server and less than 30 computers.

 

The proxy cache folder is larger than 700mb since installation, and definition downlaods seems AS slow as over the internet. (the proxy is being used, if i turn it off, updates fail straight away).

 

If i make a mirror on any of my computers, and point the rest to it, definition downloads are lightning fast, and the mirror folder is less than 400mb.

[bbahes 29]

 

 

The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

Basically with ERA creating a local mirror, much more data will be downloaded compared to the scenario when clients update regularly via an http proxy server. The difference can be 100-200 MB in favor of updates via an http proxy.

 

 

That seems false in my setup.

 

I have a server and less than 30 computers.

 

The proxy cache folder is larger than 700mb since installation, and definition downlaods seems AS slow as over the internet. (the proxy is being used, if i turn it off, updates fail straight away).

 

If i make a mirror on any of my computers, and point the rest to it, definition downloads are lightning fast, and the mirror folder is less than 400mb.

 

 

My guess is that you will have to change policy for clients to stop using proxy if you stop proxy service...they are trying to download updates via proxy which, tries to connect to ESET servers on their behalf and is now down...

But in that case, they will, naturally, connect directly to ESET servers.

Edited August 21, 2015 by bbahes

[rcocchiararo 0]

 

 

 

The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

Basically with ERA creating a local mirror, much more data will be downloaded compared to the scenario when clients update regularly via an http proxy server. The difference can be 100-200 MB in favor of updates via an http proxy.

 

 

That seems false in my setup.

 

I have a server and less than 30 computers.

 

The proxy cache folder is larger than 700mb since installation, and definition downlaods seems AS slow as over the internet. (the proxy is being used, if i turn it off, updates fail straight away).

 

If i make a mirror on any of my computers, and point the rest to it, definition downloads are lightning fast, and the mirror folder is less than 400mb.

 

 

My guess is that you will have to change policy for clients to stop using proxy if you stop proxy service...they are trying to download updates via proxy which, tries to connect to ESET servers on their behalf and is now down...

But in that case, they will, naturally, connect directly to ESET servers.

 

 

I was just saying the the proxy is indeed in use, but it serves no acceleration purpose, not that i want to set machines to use it, turn it off and have them update anyway.

 

I seem to be alone in this, but the proxy seems useless, setting up a mirror gives me the same fast LAN speeds i had in ERAv5, for definition updates.

Setting the proxy does nothing, it is still "wan speed" downloads.