Issue

Solution

Home product users

Your ESET product communicates with resources on the internet over standard HTTP protocol on Port 80, or over HTTPS on Port 443.

To resolve your issue, the following hosts in each ESET component must be made accessible:

• Download detection engine and module updates
• Download pico updates
• Download product installers, updates
• Expiration date
• Support requests
• ESET Secure Authentication Provisioning Server
• ESET LiveGrid®
• Advanced Machine Learning
• Anonymous statistics
• Web Control/Parental Control
• Password Manager
• Antispam
• GUI
• Mobile Security
• ESET Data Framework (Anti-Theft, ESET Business Account, Parental control, Web control)
• ERA 6/ ESMC 7/ ESET PROTECT
• ESET PROTECT Cloud
• ESET Inspect Cloud
• ESET Push Notification Service
• ESET LiveGuard Advanced
• Services
• Online Help and Knowledgebase
• MSP
• DNS load balancers
• Telemetry
• Certificate Revocation Checks (OCSP)
• Syslog security restrictions and limits
• Receiving emails from ESET systems

To download detection engine updates:

To download detection engine updates, use this hostname:

• update.eset.com

To download detection engine updates only from servers located in a specific region, select one of these hostnames:

• Europe: eu-update.eset.com
• US: us-update.eset.com

To download pico updates:

To download product installers, updates:

To see the expiration date:

To send support requests using the Support request function:

To allow communication with ESET Secure Authentication Provisioning Server (two-factor authentication):

Servers:

To use the online reputation database (ESET LiveGrid®):

• Ensure the following ports are open for all IP addresses listed below: TCP 80, TCP 53535, UDP 53535
• The IP addresses below have to be enabled for HTTP port 80
• Users on ESET Endpoint version 7.x and earlier, access to your local DNS server is required for DNS queries on UDP/TCP port 53 
• Users on ESET Endpoint version 8.0 and later, access to your local DNS server is required for DNS queries and must be able to resolve hostnames

Domains used by ESET LiveGrid®:

These IP addresses need to be enabled for HTTP port 80. Also, access to your local DNS server is required for DNS queries on UDP/TCP port 53.

Advanced Machine Learning:

To submit suspicious files and anonymous statistical information to ESET's Threat Lab:

To use the Web control/Parental Control module:

• Base domain for DNS queries: e5.sk
• Make sure to open UDP port 53535 for the addresses in the table below and allow requests to your local DNS server (ESET Endpoint version 8.0 and later must be able to resolve hostnames. ESET Endpoint version 7.x and earlier UDP/TCP port 53).

To use ESET Password Manager (version 10+):

To use the Antispam module:

• Version 5 and later: You need to allow requests to your local DNS server (ESET Endpoint version 8.0 and later must be able to resolve hostnames. ESET Endpoint version 7.x and earlier UDP/TCP port 53).
• Base domain for DNS queries: e5.sk

• Version 4: You only need to allow requests to your local DNS server (port 53)

• Version 3:

Domains used by the Antispam module:

To use the Antispam module:

These IP addresses need to be enabled for HTTP port 80 (used for downloading updates of the Antispam database). Also, access to your local DNS server is required for DNS queries on UDP/TCP port 53 (ESET Endpoint version 8.0 and later must be able to resolve hostnames. ESET Endpoint version 7.x and earlier UDP/TCP port 53).

To ensure proper functionality of linking and redirection from your ESET product's main program window:

To activate ESET Mobile Security:

ESET Data Framework (Anti-Theft, ESET Business Account, Parental control, Web control):

ESET Repository–repository.eset.com (ESET Remote Administrator 6.x, ESET Security Management Center 7.x and ESET PROTECT):

The IP address of the ESET repository server in China: 161.189.152.208
Some locations (such as Japan, Australia, or New Zealand) might have different IP addresses because of using CDN.
Use repositorynocdn.eset.com to connect ESET repository servers only; however, in this case, the best internet connection cannot be guaranteed.

Make sure you have HTTP 1.1 enabled when accessing the repository or ESET update servers via third-party proxy. This applies to all products that have access to the ESET repository.

For more information see:

• ESET Security Management Center repository is not working (7.x)
• ESET PROTECT repository is not working

ESET Endpoint Security and ESET Endpoint Antivirus auto-updates

ESET Endpoint Security and ESET Endpoint Antivirus also connect to repository.eset.com when the Micro PCU is executed.

Network configuration for ESET PROTECT Cloud

Network configuration for ESET Inspect Cloud

ESET Push Notification Service

ESET Push Notification Service (EPNS) sends Wake-Up calls between ESET Management Agents and ESMC/ESET PROTECT/ESET PROTECT Cloud server.

ESET LiveGuard Advanced:

Users need to whitelist both addresses for each hostname.

Services (activation, expiration, IP location, trace, version check, redirector, in-product images & messages, SSL certificate check):

Linking and redirection:

Activation:

Trace - Installation statistics:

In-product images & messages:

SSL Certificate check:

Online help and Knowledgebase:

ESET MSP Utility (EMU)

DNS load balancers

ESET DNS service for eset.com domains is often used for optimal distribution of requests to ESET’s resources.

Telemetry

Telemetry services:

Certificate Revocation Checks (OCSP)

Some third-party applications (for example, web browsers) check the revocation status of SSL/TLS certificates via Online Certificate Status Protocol (OCSP).

Syslog security restrictions and limits

Additional security settings:

Administrators should configure their Syslog server's firewall to allow incoming Syslog Export events only from the following IP ranges:

• Outgoing IP addresses from ESET PROTECT Cloud in the Europe region:
  51.136.106.164/30
• Outgoing IP addresses from ESET PROTECT Cloud in the USA region:
  40.81.8.148/30
• Outgoing IP addresses from ESET PROTECT Cloud in the Japan region:
  20.78.10.184/30

See our online help article for more information on Syslog security restrictions and limits.

Back to top

Receiving emails from ESET systems

To receive emails from EBA, EMA, ESET HOME, etc., make sure the following sender IP address is allowed on your mail server and all related systems:

Back to top