Offline Repository

Since the release of ERA version 6.5, the Mirror Tool can also be used to create an offline repository (on Windows). Usually this is needed for closed computer networks or networks with limited internet access. The Mirror Tool can be used to create a clone of the ESET repository in a local folder. This cloned repository can be afterward moved (for example, onto an external disk) to a location in the closed network. You can copy the repository to a secure location in the local network and make it available via HTTP server.

To update the offline repository, run the same command with the same parameters as used for offline repository creation. Previous data in the intermediary folder will be used and only outdated files will be downloaded.

validation-status-icon-warning IMPORTANT

Be aware that the size of the repository is growing and the intermediary directory will be the same size. Make sure you have at least 600 GB of free space before starting this procedure.

Example scenario for Windows

Part I.: Create repository clone

1.Download the Mirror Tool.

2.Extract the Mirror Tool from the downloaded .zip file.

3.Prepare (create) folders for:

intermediary files

final repository

4.Open command prompt and change the directory to the folder where the Mirror Tool is extracted (cd command).

5.Run the following command (change the intermediary and output repository directories to the folders from step 3):

MirrorTool.exe --repositoryServer AUTOSELECT ^
--intermediateRepositoryDirectory C:\Intermediary ^
--outputRepositoryDirectory C:\Repository

6.After the repository is copied to the outputRepositoryDirectory folder, move the folder and its contents to another machine where your closed network is accessible.

Part II.: Set up HTTP server

7.You need an HTTP server running on the machine in the closed network. You can use:

Apache HTTP Proxy from the ESET download site (this scenario)

a different HTTP server

8.Open apachehttp.zip and extract the files to C:\Program Files\Apache HTTP Proxy

9.Open an administrative command prompt and change the directory to C:\Program Files\Apache HTTP Proxy\bin (cd command).

10.Execute the following command:

httpd.exe -k install -n ApacheHttpProxy

11.Using a simple text editor, open the conf/httpd.conf file and add the following lines at the bottom of the file:

Listen 80
ServerRoot "C:\Program Files\Apache HTTP Proxy"
DocumentRoot "C:\Program Files\Apache HTTP Proxy\htdocs"
<Directory "C:\Program Files\Apache HTTP Proxy\htdocs">
Options Indexes FollowSymLinks
AllowOverride None
Require all granted
</Directory>
CacheRoot "C:\Program Files\Apache HTTP Proxy\cache"

12. Start the ApacheHttpProxy service using the following command:

sc start ApacheHttpProxy

13. Test if the service is running by opening http://YourIPaddress:80/index.html in your web browser (replace YourIPaddress with IP address of your computer).

 

Part III.: Run the offline repository

14. Create a new folder for the offline repository, for example, C:\Repository.

15. In the httpd.conf file, replace the following lines

DocumentRoot "C:\Program Files\Apache HTTP Proxy\htdocs"
<Directory "C:\Program Files\Apache HTTP Proxy\htdocs">

with the address of the repository folder, as follows:

DocumentRoot "C:\Repository"
<Directory "C:\Repository">

16. Copy the downloaded repository into C:\Repository .

17. Restart the ApacheHttpProxy service using the following command:

sc restart ApacheHttpProxy

18. Now your offline repository is running on the address http://YourIPaddress (for example, http://10.1.1.10).

19. Set the new repository address:

a.In ESMC Server, open the ESMC Web Console and click Admin > Server Settings.

b.For all ESET Management Agents, click Admin > Policies.