ESET Push Notification Service

ESET Push Notification Service (EPNS) serves for receiving messages from the ESMC Server, if the server has a notification for the client. The connection is running so that ESMC can send a (push) notification to a client immediately. When the connection is broken, client tries to reconnect. The main reason for the permanent connection is to make clients available to receive messages.

A Web Console user can send Wake-Up calls via EPNS between the ESMC Server and ESET Management version 7.x Agents. Each Wake-Up call also sends a Wake on LAN call. You can set up multicast addresses for Wake on LAN in Server Settings.

Connection details

To configure your local network to allow communication with EPNS, both the ESET Management Agent and the ESMC Server need to be able to connect to the EPNS server. If you cannot establish a connection with EPNS for your Agents, only Wake-Up calls are affected.

Connection details

Transport security

SSL

Protocol

MQTT (machine-to-machine connectivity protocol)

Port

primary: 8883

fallback: 443 and the proxy port set by the ESET Management Agent policy

Port 8883 is preferred, as it is an MQTT port. The 443 is only a fallback port and it is shared with other services. Also, a firewall can abort the connection on port 443 because of inactivity or maximum opened connections limit for the HTTP Proxy server.

Host address

epns.eset.com

Proxy compatibility

If you use HTTP Proxy for forwarding communication, Wake-Up calls are also sent through HTTP Proxy. Authentication is not supported. Make sure to configure HTTP Proxy in Agent policy on computers where you want to send the Wake-up calls. In case HTTP Proxy is not working, Wake-up calls are sent directly.

Compatibility with ERA 6.x

ERA 6.x Agents cannot receive Wake-Up calls from ESMC 7 and later. ERA 6.x Agents can receive only Wake on LAN signal, which wakes up computers on the same network. Wake on LAN does not enforce the replication of ESET Management Agent.

ESET Management Agents can receive Wake-Up calls only via EPNS, not from ERA 6.x Server.
 

Agents are therefore not cross-compatible with newer or older versions of ESET Security Management Center server.

Troubleshooting

Make sure your firewall is set to allow the connection to EPNS (see the details above).

Make sure both Agent and Server can connect directly to the EPNS server.