[KB7839] Configure endpoints to use different update settings depending on the network they are connected to using ESET PROTECT

Alert: Use the latest ESET product versions. Find out if your ESET product is affected by End of Life (EoL)

Alert: ESA provisioning server outage due to planned maintenance on December 6, 2021

[KB7839] Configure endpoints to use different update settings depending on the network they are connected to using ESET PROTECT

Issue

Required user permissions

This article assumes that you have the appropriate access rights and permissions to perform the tasks below.

If you use the default Administrator user or are unable to perform the tasks below (the option is unavailable), create a second administrator user with all access rights.

ESET PROTECT users: Create a second administrator user in ESET PROTECT
ESET Security Management Center (ESMC) users: Create a second administrator user in ESET Security Management Center 7.x

Use dynamic groups automatically to determine the update settings for client workstations depending on the network they are connected to

Solution

Endpoint users: Perform these steps on individual client workstations

In the example below:

Download updates using a proxy server when connected to subnet A (referred to as "Company Network").
Download updates using the ESET update server when connected to subnet B (referred to as "Off Network").

For additional examples of using Dynamic Group templates, see Dynamic Group template - examples in ESET PROTECT Online Help and Related articles below.

I. Configure the Company Network Dynamic group

Open the ESET PROTECT Web Console in your web browser and log in.
Click Computers, click the gear icon next to a group and then select New Dynamic Group from the context menu.

Figure 1-1
Enter a Name for the new group. If necessary, click Change Parent Group to change the parent group.

Figure 1-2
Click Template and click New.

Figure 1-3
Type a name into the Name field.

Figure 1-4
Click Expression, select AND (All conditions have to be true) from the Operation drop-down menu, and then click Add Rule.

Figure 1-5
Expand Network IP addresses, select IP subnetwork, and then click OK.

Figure 1-6
Select = (equal) from the drop-down menu, enter the IP address of the subnet into the blank field and then click Finish. The subnet format is: x.x.x.x (for example: 10.1.112.0).

More on this can be found in our Online Help topic.

Figure 1-7
Click Finish.

II. Configure an Off Network Dynamic Group

Open the ESET PROTECT Web Console in your web browser and log in.
Click Computers, click the gear icon next to a group and then select New Dynamic Group from the context menu.

Enter a name for the new group. If necessary, click Change Parent Group to change the parent group.

Figure 2-2
Click Template and click New.

Figure 2-3
Type a name into the Name field.

Figure 2-4
Expand Expression, select NOR (All conditions have to be false) from the Operation drop-down menu and then click Add Rule.

Figure 2-5
Expand Network IP addresses, select IP subnetwork, and then click OK.

Figure 2-6
Select is one of from the drop-down menu, enter the IP address of the secondary subnet into the blank field and then click Finish. The subnet format is: x.x.x.x (for example: 10.1.113.0).

More on this can be found in our Online Help topic.

Figure 2-7
Click Finish.

III. Create Company Network and Off Network policies and assign them to groups

Example policies

The policies below are sample policies—we recommend building out more detailed policies based on the needs of your environment. In addition, you can also modify existing policies based on the proxy server settings below if you have already created policies you would like to use.

A. Company Network Policy

Open the ESET PROTECT Web Console in your web browser and log in.
Click Policies → New Policy.

Figure 3-1
Type a name for the policy into the Name field.

Figure 3-2
Click Settings and select the appropriate product from the drop-down menu (in this example, the policy will be applied to client computers running Microsoft Windows operating systems, so ESET Endpoint for Windows is selected).

Figure 3-3
Expand Tools and click Proxy server.
Select Use proxy server, enter the IP address of the proxy server that client computers will download updates from.

Figure 3-4
Click Assign and click Assign.

Figure 3-5
Select the check box next to the Company Network dynamic group you created in part I and then click OK.

Figure 3-6
Click Finish and proceed to part B.

B. Off Network Policy

Open the ESET PROTECT Web Console in your web browser and log in.
Click Policies → New Policy.

Figure 3-7
Type a name for the policy into the Name field.

Figure 3-8
Click Settings and select the appropriate product grouping from the drop-down menu (in this example, the policy will be applied to client computers running Microsoft Windows operating systems, so ESET Endpoint for Windows is selected).

Figure 3-9
Expand Tools and click Proxy server.
Make sure that Use proxy server is not enabled, and that the setting is applied by the Policy - the blue dot is selected (in this example, we are leaving all other settings in their default state).

Figure 3-10
Click Assign and click Assign.

Figure 3-11
Select the check box next to the Off Network dynamic group you created in part II and then click OK.

Figure 3-12
Click Finish.