Mindflux 1 Posted July 13, 2016 Share Posted July 13, 2016 Where in ERA 6 do you find when the last time the SERVER fetched the virus definitions?I can't find anything about what definitions it has downloaded and when the last attempt was. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted July 14, 2016 Administrators Share Posted July 14, 2016 ERA does not download the virus signature database, only certain modules that it needs for proper functioning. Link to comment Share on other sites More sharing options...
bbahes 29 Posted July 14, 2016 Share Posted July 14, 2016 Where in ERA 6 do you find when the last time the SERVER fetched the virus definitions? I can't find anything about what definitions it has downloaded and when the last attempt was. That's the "problem" with ERA 6. It transfers this responsibility to clients. Pretty risky if you ask me. However this won't be changed as ESET pointed this several times. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted July 14, 2016 Administrators Share Posted July 14, 2016 Why risky? If update was failing on clients, an administrator would be alerted about this in the ERA console. Link to comment Share on other sites More sharing options...
bbahes 29 Posted July 14, 2016 Share Posted July 14, 2016 Why risky? If update was failing on clients, an administrator would be alerted about this in the ERA console. If I have security escalation I will ban all clients from internet access and have only ERA push latest security updates to clients. Waiting for client to do this by him self, and hopefully report back to me, is, if you ask me very risky, especially in security escalation situations. I know you won't change your approach to this subject, but you have to understand implications of your design. Link to comment Share on other sites More sharing options...
Mindflux 1 Posted July 14, 2016 Author Share Posted July 14, 2016 (edited) Well back to V5 I go. That's a pretty dumb move especially for the VMware appliance. It's dedicated solely to running the administration but can't also host the definitions? That's pretty ridiculous. Since I'm now stuck at V5 until ESET wises up I'll have to investigate a new AV product when it's time to renew. Edited July 14, 2016 by Mindflux Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted July 14, 2016 Administrators Share Posted July 14, 2016 There must be some kind of misunderstanding. The only difference between ERA v5 and ERA v6 in terms of serving updates to clients is that ERA v5 had the mirror feature included. With ERA v6 we recommend using an http proxy for caching updates or using the Mirror tool for creating a local mirror. Link to comment Share on other sites More sharing options...
bbahes 29 Posted July 14, 2016 Share Posted July 14, 2016 Well back to V5 I go. That's a pretty dumb move especially for the VMware appliance. It's dedicated solely to running the administration but can't also host the definitions? That's pretty ridiculous. Since I'm now stuck at V5 until ESET wises up I'll have to investigate a new AV product when it's time to renew. They are improving by each release...hopefully they will bring back mirror feature back to ERA where it belongs. Link to comment Share on other sites More sharing options...
Mindflux 1 Posted July 14, 2016 Author Share Posted July 14, 2016 (edited) There must be some kind of misunderstanding. The only difference between ERA v5 and ERA v6 in terms of serving updates to clients is that ERA v5 had the mirror feature included. With ERA v6 we recommend using an http proxy for caching updates or using the Mirror tool for creating a local mirror. And the mirror should be able to be hosted on the DEDICATED VM containing the ERA6 server. I don't want to rely on a client mirror or a windows based caching proxy. Edited July 14, 2016 by Mindflux Link to comment Share on other sites More sharing options...
bbahes 29 Posted July 14, 2016 Share Posted July 14, 2016 There must be some kind of misunderstanding. The only difference between ERA v5 and ERA v6 in terms of serving updates to clients is that ERA v5 had the mirror feature included. With ERA v6 we recommend using an http proxy for caching updates or using the Mirror tool for creating a local mirror. And the mirror should be able to be hosted on the DEDICATED VM containing the ERA6 server. I don't want to rely on a client mirror or a windows based caching proxy. Actually it's Apache proxy they use, even in their appliance, however it's missing the point and that is that ERA should be in charge of downloading and distributing updates. Link to comment Share on other sites More sharing options...
Mindflux 1 Posted July 14, 2016 Author Share Posted July 14, 2016 (edited) There must be some kind of misunderstanding. The only difference between ERA v5 and ERA v6 in terms of serving updates to clients is that ERA v5 had the mirror feature included. With ERA v6 we recommend using an http proxy for caching updates or using the Mirror tool for creating a local mirror. And the mirror should be able to be hosted on the DEDICATED VM containing the ERA6 server. I don't want to rely on a client mirror or a windows based caching proxy. Actually it's Apache proxy they use, even in their appliance, however it's missing the point and that is that ERA should be in charge of downloading and distributing updates. I realize it's Apache, but their only download package for it is specifically for Windows, it contains windows binaries, not Linux. I'm sure if I wanted to I could take the apache.conf from the HTTP proxy and drop it onto some Linux box (fixing the module paths) and make it work but that would be 'unsupported'. It really should be containerized with the ERA6 server so that when something goes wrong you don't have to go look at multiple systems to find the culprit. Edited July 14, 2016 by Mindflux Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted July 14, 2016 Administrators Share Posted July 14, 2016 There must be some kind of misunderstanding. The only difference between ERA v5 and ERA v6 in terms of serving updates to clients is that ERA v5 had the mirror feature included. With ERA v6 we recommend using an http proxy for caching updates or using the Mirror tool for creating a local mirror. And the mirror should be able to be hosted on the DEDICATED VM containing the ERA6 server. I don't want to rely on a client mirror or a windows based caching proxy. That's not a problem - you can run the Mirror tool on the same server that is running ERA v6 and update clients from the mirror created by it. Link to comment Share on other sites More sharing options...
Mindflux 1 Posted July 14, 2016 Author Share Posted July 14, 2016 There must be some kind of misunderstanding. The only difference between ERA v5 and ERA v6 in terms of serving updates to clients is that ERA v5 had the mirror feature included. With ERA v6 we recommend using an http proxy for caching updates or using the Mirror tool for creating a local mirror. And the mirror should be able to be hosted on the DEDICATED VM containing the ERA6 server. I don't want to rely on a client mirror or a windows based caching proxy. That's not a problem - you can run the Mirror tool on the same server that is running ERA v6 and update clients from the mirror created by it. There's a linux version of the mirror tool? where? Then I assume you have to host this via CIFS or some manner accessible by the clients since it's not http based? Link to comment Share on other sites More sharing options...
bbahes 29 Posted July 14, 2016 Share Posted July 14, 2016 (edited) There must be some kind of misunderstanding. The only difference between ERA v5 and ERA v6 in terms of serving updates to clients is that ERA v5 had the mirror feature included. With ERA v6 we recommend using an http proxy for caching updates or using the Mirror tool for creating a local mirror. And the mirror should be able to be hosted on the DEDICATED VM containing the ERA6 server. I don't want to rely on a client mirror or a windows based caching proxy. That's not a problem - you can run the Mirror tool on the same server that is running ERA v6 and update clients from the mirror created by it. Yes. But still it is not commanded by ERA. It's configured with command line utility so the whole process is unknown to ERA. Also it's won't download PCU's. Edited July 14, 2016 by bbahes Link to comment Share on other sites More sharing options...
Mindflux 1 Posted July 14, 2016 Author Share Posted July 14, 2016 WOW. What a mess. The mirrortool documentation doesn't mention where to even get the mirror tool (is it already on the VMware OVF?). How do you get a username/password for your converted license to make an offline license file? This really should be integrated into ERA. Link to comment Share on other sites More sharing options...
bbahes 29 Posted July 14, 2016 Share Posted July 14, 2016 WOW. What a mess. The mirrortool documentation doesn't mention where to even get the mirror tool (is it already on the VMware OVF?). How do you get a username/password for your converted license to make an offline license file? This really should be integrated into ERA. Here you get offline license file https://ela.eset.com/ Here you download MirrorTool https://www.eset.com/int/business/remote-management/remote-administrator/#standalone Link to comment Share on other sites More sharing options...
Mindflux 1 Posted July 14, 2016 Author Share Posted July 14, 2016 WOW. What a mess. The mirrortool documentation doesn't mention where to even get the mirror tool (is it already on the VMware OVF?). How do you get a username/password for your converted license to make an offline license file? This really should be integrated into ERA. Here you get offline license file https://ela.eset.com/ Here you download MirrorTool https://www.eset.com/int/business/remote-management/remote-administrator/#standalone Thanks. Still looks like a headache since you have to have a way to share the definitions too (CIFS or otherwise). Please fix this ESET. This should really have a mirror config in the UI. I cannot imagine it would be that difficult to preconfigure the mirror on the appliance. Link to comment Share on other sites More sharing options...
bbahes 29 Posted July 14, 2016 Share Posted July 14, 2016 WOW. What a mess. The mirrortool documentation doesn't mention where to even get the mirror tool (is it already on the VMware OVF?). How do you get a username/password for your converted license to make an offline license file? This really should be integrated into ERA. Here you get offline license file https://ela.eset.com/ Here you download MirrorTool https://www.eset.com/int/business/remote-management/remote-administrator/#standalone Thanks. Still looks like a headache since you have to have a way to share the definitions too (CIFS or otherwise). Please fix this ESET. This should really have a mirror config in the UI. I cannot imagine it would be that difficult to preconfigure the mirror on the appliance. I was not able to share via CIFS. Had to install Apache anyway and share via HTTP. Be aware you don't get product updates via this MirrorTool. Link to comment Share on other sites More sharing options...
Mindflux 1 Posted July 14, 2016 Author Share Posted July 14, 2016 (edited) WOW. What a mess. The mirrortool documentation doesn't mention where to even get the mirror tool (is it already on the VMware OVF?). How do you get a username/password for your converted license to make an offline license file? This really should be integrated into ERA. Here you get offline license file https://ela.eset.com/ Here you download MirrorTool https://www.eset.com/int/business/remote-management/remote-administrator/#standalone Thanks. Still looks like a headache since you have to have a way to share the definitions too (CIFS or otherwise). Please fix this ESET. This should really have a mirror config in the UI. I cannot imagine it would be that difficult to preconfigure the mirror on the appliance. I was not able to share via CIFS. Had to install Apache anyway and share via HTTP. Be aware you don't get product updates via this MirrorTool. How are you sharing via HTTP? Also when I go into the license portal there's no option for offline license file. https://i.imgur.com/bLo2Il9.png Edited July 14, 2016 by Mindflux Link to comment Share on other sites More sharing options...
bbahes 29 Posted July 14, 2016 Share Posted July 14, 2016 WOW. What a mess. The mirrortool documentation doesn't mention where to even get the mirror tool (is it already on the VMware OVF?). How do you get a username/password for your converted license to make an offline license file? This really should be integrated into ERA. Here you get offline license file hxxp://IP_ADDRESS:PORT https://help.eset.com/ela/en-US/index.html?downloading_offline_legacy_licenses.htm Link to comment Share on other sites More sharing options...
Mindflux 1 Posted July 14, 2016 Author Share Posted July 14, 2016 WOW. What a mess. The mirrortool documentation doesn't mention where to even get the mirror tool (is it already on the VMware OVF?). How do you get a username/password for your converted license to make an offline license file? This really should be integrated into ERA. Here you get offline license file hxxp://IP_ADDRESS:PORT https://help.eset.com/ela/en-US/index.html?downloading_offline_legacy_licenses.htm Yes I found the offline documentation, but if you look at my screen grab there's not even an "OFFLINE" column header. Link to comment Share on other sites More sharing options...
bbahes 29 Posted July 14, 2016 Share Posted July 14, 2016 https://help.eset.com/ela/en-US/index.html?downloading_offline_legacy_licenses.htm Yes I found the offline documentation, but if you look at my screen grab there's not even an "OFFLINE" column header. Under settings you have Offline license files - Show offline license file download option Link to comment Share on other sites More sharing options...
Mindflux 1 Posted July 14, 2016 Author Share Posted July 14, 2016 https://help.eset.com/ela/en-US/index.html?downloading_offline_legacy_licenses.htm Yes I found the offline documentation, but if you look at my screen grab there's not even an "OFFLINE" column header. Under settings you have Offline license files - Show offline license file download option https://help.eset.com/ela/en-US/index.html?downloading_offline_legacy_licenses.htm Yes I found the offline documentation, but if you look at my screen grab there's not even an "OFFLINE" column header. Under settings you have Offline license files - Show offline license file download option Alright. Got it. Thanks. Still not sure I wanna go with ERA6/AV6. What a pita. Link to comment Share on other sites More sharing options...
bbahes 29 Posted July 14, 2016 Share Posted July 14, 2016 https://help.eset.com/ela/en-US/index.html?downloading_offline_legacy_licenses.htm Yes I found the offline documentation, but if you look at my screen grab there's not even an "OFFLINE" column header. Under settings you have Offline license files - Show offline license file download option https://help.eset.com/ela/en-US/index.html?downloading_offline_legacy_licenses.htm Yes I found the offline documentation, but if you look at my screen grab there's not even an "OFFLINE" column header. Under settings you have Offline license files - Show offline license file download option Alright. Got it. Thanks. Still not sure I wanna go with ERA6/AV6. What a pita. I'm still "testing" it since it came out, but I won't take it to production. 6.5 sounds promising, they mentioned it will be released in December. Link to comment Share on other sites More sharing options...
Mindflux 1 Posted July 14, 2016 Author Share Posted July 14, 2016 https://help.eset.com/ela/en-US/index.html?downloading_offline_legacy_licenses.htm Yes I found the offline documentation, but if you look at my screen grab there's not even an "OFFLINE" column header. Under settings you have Offline license files - Show offline license file download option https://help.eset.com/ela/en-US/index.html?downloading_offline_legacy_licenses.htm Yes I found the offline documentation, but if you look at my screen grab there's not even an "OFFLINE" column header. Under settings you have Offline license files - Show offline license file download option Alright. Got it. Thanks. Still not sure I wanna go with ERA6/AV6. What a pita. I'm still "testing" it since it came out, but I won't take it to production. 6.5 sounds promising, they mentioned it will be released in December. They're so far behind the AV version (9?). I know business versions rely on reliability but it seems we're really lagging behind here. Link to comment Share on other sites More sharing options...
Recommended Posts