roga 2 Posted April 28, 2016 Share Posted April 28, 2016 The purpose behind my question is trying to workout the best way to do a push install of EAV & EFSW to remote sites which have a limited bandwidth vpn connection to the central site, however they do have a reasonable general internet connection. If I was to set up a proxy ERA server would that also act as a proxy for push install, i.e. would the software also reside on the proxy server so that e.g. the subnet that the proxy was serving would receive its packages from the local machine? (I am assuming that the main era server holds a copy of the packages and then pushes these to the clients) Alternatively I see that there are policy settings for "Install by direct package URL" could this point to repository either in the cloud or a machine in the local subnet? regards roga Link to comment Share on other sites More sharing options...
ESET Staff Solution MartinK 383 Posted April 28, 2016 ESET Staff Solution Share Posted April 28, 2016 (I am assuming that the main era server holds a copy of the packages and then pushes these to the clients) Actually this assumption is not correct. Package to be installed by software installation task is downloaded on client machine, by AGENT itself directly from internet ESET repositories. This can be avoided using HTTP proxy. If I understood you correctly, for your case would be best if AGENTs on targeted clients are not using any HTTP proxy and thus downloading packages directly from internet. Alternative is to install HTTP Proxy in targeted sub-network to avoid extensive bandwidth usage during packages download, as it may be huge (installer size * number of client computers at least). Link to comment Share on other sites More sharing options...
ESET Staff MartinK 383 Posted April 29, 2016 ESET Staff Share Posted April 29, 2016 (edited) If I was to set up a proxy ERA server would that also act as a proxy for push install, i.e. would the software also reside on the proxy server so that e.g. the subnet that the proxy was serving would receive its packages from the local machine? In case you meant ESET Remote Administrator Proxy it won't help. Both software installation task and remote installation are downloading packages on client, i.e. so called "push" installation is not supported. Alternatively I see that there are policy settings for "Install by direct package URL" could this point to repository either in the cloud or a machine in the local subnet? Yes, you can set up your own "mirror" for this packages to be sure no traffic leaves sub-network. In case you are in windows-only environment, even file on network share should be sufficient. Edited April 29, 2016 by MartinK Link to comment Share on other sites More sharing options...
roga 2 Posted April 29, 2016 Author Share Posted April 29, 2016 (I am assuming that the main era server holds a copy of the packages and then pushes these to the clients) Actually this assumption is not correct. Package to be installed by software installation task is downloaded on client machine, by AGENT itself directly from internet ESET repositories. Thanks for that, looks like I don't need to think about setting a mirror or proxy on the remote sub-net as they do have decent internet download capability. Link to comment Share on other sites More sharing options...
roga 2 Posted May 5, 2016 Author Share Posted May 5, 2016 I just posted at the end of this thread the result of my rollout Link to comment Share on other sites More sharing options...
Recommended Posts