HTTP Proxy

What is HTTP Proxy and how can it be useful?

HTTP Proxy is forwarding communication from Agents to ESMC Server in environments where Agent machines cannot reach the Server.

What was ERA 6.x Proxy and why it was removed?

ERA Proxy allowed you to concentrate traffic from client Agents. It allowed multiple Agents to connect to the ERA Proxy, which then distributed traffic to the ERA Server. ESMC 7 uses a new replication protocol that allows to forward replication over the new Proxy. ERA 6.x Proxy cannot read this protocol and therefore it cannot be used with ESET Management version 7 Agents.

Can ERA 6.x Proxy be used with ESMC 7?

To a limited extent, yes. ERA 6.x Proxy can forward the communication from 6.x Agents to ESMC 7 Server, but ESET Management Agents cannot connect to the ERA 6.x Proxy. Agents of version 7 cannot connect to ERA 6.x Server. Take this change into consideration while upgrading your infrastructure from the 6.x version.

How does the Proxy work in ESET Security Management Center?

ESMC 7 uses a customized version of Apache HTTP Proxy as the Proxy component. After a proper configuration, Apache HTTP Proxy can act as a Proxy for ESET Management Agents. The Proxy does not cache or open the communication; it only forwards it.

Can I use a Proxy other than Apache HTTP Proxy?

Any proxy solution which fulfills the following conditions can be used with ESET Management Agent:

can forward SSL communication

supports HTTP CONNECT

does not use a username and password

How is the new replication protocol different?

The new replication protocol uses TLS and HTTP2 protocols so it can go through Proxy servers. There are also new self-recovery features and a persistent connection which improves overall communication performance.

What is the effect on performance?

Using HTTP Proxy has no significant impact on performance.

When should I use the Proxy?

We recommend that you use a Proxy if your infrastructure meets one or more of the following conditions:

If your Agent machines cannot directly connect to the ESMC Server.

If you have a remote location or branch office and want to use Proxy to handle communication:

obetween ESMC Server and Proxy

obetween Proxy and client computers in a remote location

How to set up the HTTP Proxy

To use the proxy, HTTP Proxy hostname must be set up in the Agent policy (Advanced settings > HTTP Proxy). You can use different proxies for caching and forwarding; see the policy settings below:

Global Proxy - you will use a single proxy solution for both caching downloads and for forwarding Agent communication.

Different Proxy Per Service -you will use separate proxy solutions for caching and for forwarding communication.

 

details_hoverNOTE

What are other functions of Apache HTTP Proxy?

How to upgrade an infrastructure with ERA 6.x Proxy to ESMC 7?

scheme_proxy_sm