[KB6792] Configure an ESET endpoint product to function as a Mirror server (7.x)

Issue

Required user permissions

This article assumes that you have the appropriate access rights and permissions to perform the tasks below.

If you use the default Administrator user or are unable to perform the tasks below (the option is unavailable), create a second administrator user with all access rights.

ESET PROTECT users: Create a second administrator user in ESET PROTECT
ESET PROTECT Cloud users: Create a second administrator user in ESET PROTECT Cloud
ESET Security Management Center (ESMC) users: Create a second administrator user in ESET Security Management Center 7.x

Configure ESET Endpoint Antivirus (EEA), ESET Endpoint Security (EES), or ESET File Security for Microsoft Windows Server (EFSW) to function as a mirror server

Solution

Use Apache HTTP Proxy to configure a mirror on large networks

To minimize Internet traffic and maximize security on networks where ESET Security Management Center 7 is used to manage a large number of clients, we recommend that you use Apache HTTP Proxy, rather than configure a client as a mirror. Apache HTTP Proxy can be installed with ESET Security Management Center Server (ESMC Server) using the all-in-one installer, or as a standalone component if you have already installed the ESMC Server.

Differences between Apache HTTP Proxy, Mirror Tool and direct connectivity

Each solution has a different effectivity based on number of client machines. For detailed information, see our ESMC Online Help page.

I. Enable the mirror feature on your client workstation

On the client workstation where you are creating a mirror server, open the main program window of your ESET Windows product.
Press the F5 key to open Advanced setup.
Click Update and expand Profiles → Update Mirror.
Click the toggle next to Create update mirror to enable it. We recommend that you also set a Username and Password for clients to access the update mirror. Click OK when you are finished.

Copy the IP address or fully qualified domain name (FQDN) of the client computer where you created the update mirror. You will use this information to configure policy settings so that other clients will download updates from this mirror. Proceed to part II when you have copied this information.

II. Configure policy settings so that clients download updates from the mirror

Open ESET Security Management Center Web Console (ESMC Web Console) in your web browser and log in.
Click Policies and select the check box next to the policy assigned to client workstations that will receive updates from the mirror you created in part I.

Click Actions and select Edit.

Click Settings, then click Update and expand Profiles → Updates.

Under Modules Updates, deselect the check box next to Choose automatically. In the Custom server field, type the IP address of the client where you created a mirror, followed by a colon and the port used (for example, http://10.30.50.110:2221). If you defined a username and password for clients to access the mirror, type them into the appropriate fields.
Click Finish when you are finished making changes. Client computers assigned this policy will receive the new settings next time they check in (by default, clients check in every 20 minutes).

Figure 2-4

Last Updated: Apr 24, 2023