ESET Online Help

Search English
Select the category
Select the topic

Apache HTTP Proxy

Apache HTTP Proxy is a proxy service that can be used to distribute updates to client computers.

To install Apache HTTP Proxy, read the instructions for Windows, Linux, or Virtual Appliance.

Apache HTTP Proxy functions

Function

Proxy solution that provides this function

Caching of downloads and updates

Apache HTTP Proxy or other proxy solution

Caching of ESET LiveGuard Advanced results

Only configured Apache HTTP Proxy

Replication ESET Management Agents' communication with ESET PROTECT Server

Apache HTTP Proxy or other proxy solution

Caching function

Apache HTTP Proxy downloads and caches:

ESET module updates

Installation packages from repository servers

Product component updates

Cached data is distributed to endpoint clients on your network. Caching can significantly decrease internet traffic on your network.

In contrast to the Mirror Tool, which downloads all available data on the ESET update servers, Apache HTTP Proxy reduces the network load by only downloading the data requested by ESET PROTECT components or ESET endpoint products. If an endpoint client requests an update, Apache HTTP Proxy downloads it from the ESET update servers, saves the update to its cache directory and then serves it to the individual endpoint client. If another endpoint client requests the same update, Apache HTTP Proxy serves the download to the client directly from its cache, so there is no additional download from ESET update servers.

Caching for ESET Endpoint product

Caching settings of ESET Management Agent and Endpoint are not identical. ESET Management Agent can manage settings for ESET security products at client devices. You can set up proxy for ESET Endpoint Security:

locally from GUI

from ESET PROTECT Web Console, using a policy (the recommended way to manage client devices settings).

Caching results from ESET LiveGuard Advanced

Apache HTTP Proxy can also cache results provided by ESET LiveGuard Advanced. Caching requires specific configuration which is included in the Apache HTTP Proxy distributed by ESET. It is recommended to use caching with ESET LiveGuard Advanced if possible. See the service's documentation for more details.

Using Apache as HTTP Proxy for Agent - Server communication

When correctly configured, Apache HTTP Proxy can be used to collect and forward data from ESET PROTECT components in a remote location. One proxy solution can be used for caching updates (Apache HTTP Proxy is recommended) and another proxy for Agent - Server communication. You can use Apache HTTP Proxy for both functions at the same time, but it is not recommended for networks with more than 10,000 client machines per proxy machine. In enterprise environments (more than 1,000 managed computers), we recommend that you use a dedicated Apache HTTP Proxy server.

Read more about the Proxy function.

How to set up the HTTP Proxy

To use the proxy, HTTP Proxy hostname must be set up in the Agent policy (Advanced settings > HTTP Proxy). You can use different proxies for caching and forwarding; see the policy settings below:

Global Proxy - you will use a single proxy solution for both caching downloads and for forwarding Agent communication.

Different Proxy Per Service - you will use separate proxy solutions for caching and for forwarding communication.

Apache HTTP Proxy in the infrastructure

The following diagram illustrates a proxy server (Apache HTTP Proxy) that is being used to distribute ESET cloud traffic to all ESET PROTECT components and ESET endpoint products.

scheme_http_proxy_noRemoteLocation

scheme_http_proxy


important

You can use a proxy chain to add another proxy service to a remote location. Note that ESET PROTECT does not support proxy chaining when the proxies require authentication. You can use your own transparent web proxy solution, however that may require additional configuration beyond what is mentioned here.

scheme_http_proxy_chaining


note

For offline detection engine updates, use the Mirror Tool (available for Windows and Linux) instead of Apache HTTP Proxy.