[KB7104] Offline updates for servers or client workstations with ESET products installed

Issue

  • Update client workstations in a closed environment (no Internet access)
  • Update client workstations that have no Internet access but still receive updates from a computer in the network

Solution

  1. Prerequisites
  2. Set the computer connected to the Internet as an update mirror

Prerequisites


I. Set the computer connected to the Internet as an update mirror

  1. Create folders for the Mirror tool operation:

  • A folder for the offline license file, for example: C:\mirror
  • A folder for intermediary files, for example: C:\mirror\temp
  • A folder for the downloaded files, for example: C:\mirror\out
  1. Copy the Mirror tool to the desired folder.

  2. Copy an offline license file (for example offline.lf) to the desired folder (for example C:\mirror).

  3. Open the Command Prompt, navigate to the Mirror tool folder and run the command with the following syntax:

    MirrorTool.exe --mirrorType regular --intermediateUpdateDirectory c:\mirror\temp --offlineLicenseFilename c:\mirror\offline.lf --outputDirectory C:\mirror\out

The download of module updates may take longer, depending on the Internet connection speed and size of the downloaded files.

  1. Enable the Update Mirror and HTTP Server.

    1. Open the main program window of your ESET endpoint product.

    2. Press the F5 key to access Advanced setup.

    3. Click Update and expand ProfilesUpdate Mirror. Click the toggle next to Create update mirror to enable it and click Edit next to Storage folder to set the path (in this example C:\mirror\out). Verify that the toggle next to Enable HTTP Server is enabled. Optionally, you can configure other HTTP Server parameters (username, password, port). Click OK.

      Figure 1-1

II. Create a Policy for offline computers managed by ESET PROTECT or ESET PROTECT On-Prem to download ESET security product module updates from the mirror

  1. Open ESET PROTECT or ESET PROTECT On-Prem in your web browser and log in. ppp

  2. Click PoliciesNew Policy.

    Figure 2-1
  3. Type a name of your policy to the Name field and click Continue.

    Figure 2-2
  4. Select the ESET security product from the drop-down menu (in the example, ESET Endpoint for Windows is selected). Click Update and expand ProfilesUpdates. Click the toggle next to Choose automatically to disable it. In the Custom server field, type the IP address of a mirror server created in section I. Use the following format for the IP address: http://xx.xx.xx.xx:xxxx. Click Continue.

    Managing both servers and endpoints

    If you manage ESET PROTECT servers and endpoints in the offline network, you need to create a separate policy for each type of ESET security product.

    Figure 2-3
  5. Click Assign.

    Figure 2-4
  6. Select the computers where you want to assign the policy and click OK.

    Figure 2-5
  7. Click Finish to apply the policy to the selected computers. As soon as the computers receive the policy, installed ESET security products will update their program modules offline from the mirror you have created in section I.