Deployment of Proxy

How the Apache HTTP Proxy works and when to use it

The Apache HTTP Proxy can serve two purposes:

•Forwarding Agent / Server communications

•Caching communications between ESET servers and client computers.

We recommend using the Apache HTTP Proxy distributed by ESET since it contains the necessary settings.

Note  

By default HTTP Proxy uses port 3128, while Agents communicate with ESMC Server over port 2222. You can change these ports to another value, if necessary. Make sure to change the ports across all settings and policies.

HTTP Proxy for Agent - Server communication

HTTP Proxy forwards communication from Agents to ESMC Server in environments where Agent machines cannot reach the Server. The Proxy does not cache or open the communication; it only forwards it. The replication protocol uses TLS and HTTP2 protocols so it can go through Proxy servers, but it does not support authentication (username and password). Using an HTTP Proxy has no significant impact on performance.

HTTP Proxy hostname must be set up in the Agent policy (Advanced settings > HTTP Proxy).

The proxy keeps a permanent connection with the ESMC Server for each connecting Agent. It is not recommended to connect more than 1000 clients through one proxy machine.

To use the HTTP Proxy for Agent - Server communication you need to:

1.Install the Apache HTTP Proxy application

2.Configure the Apache HTTP Proxy application

3.Create a modified Live installer

4.Install the Agent using the modified installer

5.Optional: you can use the same proxy for caching of updates and installers (the setup below)

Caching communication between ESET servers and client computers

Apache HTTP Proxy is a proxy service that can be used to distribute updates to client computers. Apache HTTP Proxy performs a similar role to the mirror server feature popular in ERA 5 and earlier. It can be installed on the same machine as the ESMC Server.

Apache HTTP Proxy downloads and caches:

•Detection engine updates

•Activation tasks - communication with activation servers and caching of license requests

•ESMC repository data

•Product component updates

Proxy distributes cached data to endpoint clients on your network. Caching can significantly decrease internet traffic on your network

Read more about Apache HTTP Proxy functions and architecture.

To use the HTTP Proxy for caching communication between ESET servers and client computers

1.Install the Apache HTTP Proxy application

2.Configure your ESET Management Agents to use caching

3.Configure ESET security products to use caching