[KB3641] Configure an ESET endpoint product to function as a Mirror server (6.x)

Alert: End of Life (EOL) issues requiring your immediate attention

Alert: Windows PrintNightmare Remote Code Execution (RCE) (CVE-2021-34527 / CVE-2021-1675)

Alert: Kaseya VSA and MSP supply-chain attack

[KB3641] Configure an ESET endpoint product to function as a Mirror server (6.x)

Issue

Configure ESET Endpoint Antivirus (EEA), ESET Endpoint Security (EES), or ESET File Security for Microsoft Windows Server (EFSW) to function as a mirror server

Solution

ESET business product no longer supported

This article applies to an ESET product version that is currently in End of Life status and is no longer supported. The content in this article is no longer updated.

For a complete list of supported products and support level definitions, review the ESET End of Life policy for business products.

Upgrade ESET business products.

Differences between Apache HTTP Proxy, Mirror Tool and direct connectivity

Each solution has a different effectivity based on number of client machines. For detailed information, see our ESMC Online Help page.

I. Enable the mirror feature on your client workstation

On the client workstation where you want to create a mirror server, open the main program window of your Windows ESET product.
Press F5 on your keyboard to access Advanced setup.
Click Update and expand Profiles → Mirror.

ERA 6.4 users

Click Update and expand Mirror.

Click the slider bar next to Create update mirror to enable it. We recommend that you define a Username and Password for clients to access the update mirror. Click OK when you are finished.

EFSW users: click here to view a screenshot

Figure 1-1

Note the IP address or fully qualified domain name (FQDN) of the client computer where you created the update mirror. You will use this information to configure policy settings so that other clients will download updates from this mirror. Proceed to part II when you have this information.

II. Configure policy settings so that clients download updates from the mirror

ERA 6.5 User Permissions

This article assumes that your ERA user has the correct access rights and permissions to perform the tasks below.

If you are still using the default Administrator user, or you are unable to perform the tasks below (the option is grayed out), see the following article to create a second administrator user with all access rights (you only need to do this once):

Create a second administrator user in ESET Remote Administrator 6.5

View permissions needed for least privilege user access

A user must have the following permissions for the group that contains the modified object:

*Functionality*	*Read*	*Use*	*Write*
Policies	✓	✓	✓

A user must have the following permissions for each affected object:

*Functionality*	*Read*	*Use*	*Write*
Groups & Computers	✓	✓	✓

Once these permissions are in place, follow the steps below.

Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in.
Click Admin → Policies and select the policy assigned to client workstations that will receive updates from the mirror you created in part I.
Click Policies → Edit.

Figure 2-1
Click the image to view larger in new window
Expand Settings, click Update and expand Profiles → Basic. Deselect Choose automatically under Update Server. Type the IP address of the client where you created a mirror, followed by a colon and the port used, into the Update server field (for example, http://10.30.50.110:2221).
If you defined a username and password for clients to access the mirror, type them into the appropriate fields under Updating From Mirror.
Click Finish when you are finished making changes. Client computers assigned this policy will receive the new settings next time they check in (by default, clients check in every 20 minutes).

Figure 2-2
Click the image to view larger in new window

Last Updated: Dec 29, 2020