[KB7429] ESET Endpoint Encryption internet access

Solution

ESET Endpoint Encryption (EEE) Client and EEE Server are separate products from ESET Full Disk Encryption (EFDE)

The article below applies only to the EEE Client or EEE Server and not EFDE.

Visit What's new in ESET Full Disk Encryption to view EFDE content.

The ESET Endpoint Encryption (EEE) Server and Client software can sometimes require access to the EEE website. The following sections detail the locations used by the software. This will enable you to ensure any firewalls or filters provide the correct access.

Cloud

For workstations managed by an EEE Server, communications between the EEE Server and its managed Workstations are provided by the EEE Cloud. Commands are sent from the EEE Server to the cloud, where they wait for the workstations to collect them periodically when they check with the cloud. Similarly, responses from the workstations detailing command completion are stored in the cloud for the EEE Server to pick up.

All communication packets are encrypted before being uploaded to the EEE cloud.

Using the EEE Cloud means the machines involved only need access to the internet to be managed; this removes the extra effort of configuring firewalls and ports. if the clients had to connect directly. It also has the advantage that if the workstations or EEE Server are offline at any point, they will catch up with messages from the cloud when they are next online.

For the workstations or EEE Server to communicate with the EEE Cloud, they should be provided access to the following address: https://stratus.deslock.com/

If you want to verify communications from a workstation to the EEE Cloud are working correctly, visit the above link using Internet Explorer, where a landing page should be displayed. It is important that Internet Explorer is used for this check for it to be valid.

ESET Endpoint Encryption Server Update 

If enabled, the EEE Server will check http://update.deslock.com/ to display notifications of new EEE Server releases becoming available.

Client Software Update

For updates of the client software to be provided, access is required to the following sites:

Checking for availability of client software updates: http://update.deslock.com/

Downloading of client software updates: http://download.deslock.com/

Standalone Licencing

For standalone clients that an EEE Server does not manage, performing initial activation or renewing/upgrading a license with the Licence Wizard will require access to the following website: https://licensing.deslock.com/

ESET Endpoint Encryption Server Managed Licencing

When performing license operations in the EEE Server, such as resyncing licenses or generating a new user's first activation code, access to the following website will be required from the machine hosting the EEE Server: https://licensing.deslock.com/