Jump to content

Every single unit is connecting to edf.eset.com:443


deszynda
 Share

Recommended Posts

Every single unit with EFS or EEA v6 that was activated is connecting to edf.eset.com:443 via our server proxy all the time. It's because every licence is being verified by ESET. I've already talked with polish ESET support and there is no way to avoid it.

It is causing a traffic on our server proxy. We have ERA installed so we really don't need to go outside our LAN. I can turn off server proxy and everything works fine but than licence information is not being updated in ELA console.

Is it a way to turn on server proxy settings for a specific period of time? For example daily during night so licences could be refreshed in ELA?

Link to comment
Share on other sites

  • Administrators

Is it a way to turn on server proxy settings for a specific period of time? For example daily during night so licences could be refreshed in ELA?

 

That's not possible. Do you mean that the communication with ESET's EDF servers generates too much traffic? It shouldn't happen as Endpoint connects to the servers every few hours and only little data is transmitted. Could you be more specific as to how many clients you have and how much traffic is generated?

Link to comment
Share on other sites

  • 3 weeks later...

Hello again,

There is around 1200 clients in my company. The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

Link to comment
Share on other sites

Hello again,

There is around 1200 clients in my company. The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

 

With new ERA V6 clients connect to Internet independently of ERA server.

You could install http proxy on ERA server and point clients to that proxy but that's all.

In my company we have situation where not small number of computers have no access to Internet at all but we do not see acceptable "solution" from ESET.

Edited by bbahes
Link to comment
Share on other sites

  • Administrators

The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

Basically with ERA creating a local mirror, much more data will be downloaded compared to the scenario when clients update regularly via an http proxy server. The difference can be 100-200 MB in favor of updates via an http proxy.

Link to comment
Share on other sites

  • 4 weeks later...

 

The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

Basically with ERA creating a local mirror, much more data will be downloaded compared to the scenario when clients update regularly via an http proxy server. The difference can be 100-200 MB in favor of updates via an http proxy.

 

 

That seems false in my setup.

 

I have a server and less than 30 computers.

 

The proxy cache folder is larger than 700mb since installation, and definition downlaods seems AS slow as over the internet. (the proxy is being used, if i turn it off, updates fail straight away).

 

If i make a mirror on any of my computers, and point the rest to it, definition downloads are lightning fast, and the mirror folder is less than 400mb.

Link to comment
Share on other sites

 

 

The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

Basically with ERA creating a local mirror, much more data will be downloaded compared to the scenario when clients update regularly via an http proxy server. The difference can be 100-200 MB in favor of updates via an http proxy.

 

 

That seems false in my setup.

 

I have a server and less than 30 computers.

 

The proxy cache folder is larger than 700mb since installation, and definition downlaods seems AS slow as over the internet. (the proxy is being used, if i turn it off, updates fail straight away).

 

If i make a mirror on any of my computers, and point the rest to it, definition downloads are lightning fast, and the mirror folder is less than 400mb.

 

 

My guess is that you will have to change policy for clients to stop using proxy if you stop proxy service...they are trying to download updates via proxy which, tries to connect to ESET servers on their behalf and is now down...

But in that case, they will, naturally, connect directly to ESET servers.

Edited by bbahes
Link to comment
Share on other sites

 

 

 

The thing is that our security policies requires as small traffic outiside company as possible. That's why we have ERA server so every client is connecting inside our LAN and only one server is downloading virus signatures from ESET servers. Best solution in this situation is to do it via ERA server. I think it should be change.

Basically with ERA creating a local mirror, much more data will be downloaded compared to the scenario when clients update regularly via an http proxy server. The difference can be 100-200 MB in favor of updates via an http proxy.

 

 

That seems false in my setup.

 

I have a server and less than 30 computers.

 

The proxy cache folder is larger than 700mb since installation, and definition downlaods seems AS slow as over the internet. (the proxy is being used, if i turn it off, updates fail straight away).

 

If i make a mirror on any of my computers, and point the rest to it, definition downloads are lightning fast, and the mirror folder is less than 400mb.

 

 

My guess is that you will have to change policy for clients to stop using proxy if you stop proxy service...they are trying to download updates via proxy which, tries to connect to ESET servers on their behalf and is now down...

But in that case, they will, naturally, connect directly to ESET servers.

 

 

I was just saying the the proxy is indeed in use, but it serves no acceleration purpose, not that i want to set machines to use it, turn it off and have them update anyway.

 

I seem to be alone in this, but the proxy seems useless, setting up a mirror gives me the same fast LAN speeds i had in ERAv5, for definition updates.

Setting the proxy does nothing, it is still "wan speed" downloads.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...