Install Apache HTTP Proxy on your network to automatically distribute detection engine updates and program component updates to client workstations. This arrangement allows for an additional layer of security—clients that are protected by a firewall and/or cannot download updates directly from ESET servers can download normal updates from a protected server configured to communicate securely with ESET servers. This arrangement limits exposure to threats for client workstations. For client computers on your network to receive updates from Apache HTTP Proxy, their update settings must be edited.
It is recommended to install Apache HTTP Proxy when more than 37 workstations are managed on your network by ESET Remote Administrator.
Currently, setting up Apache HTTP Proxy is the primary method for caching detection engine update files. Users who attempt to set up a local repository on the ESET Remote Administrator (ERA) Server may receive the following error:
Until this option is supported in a future version of ESET Remote Administrator, the instructions in this article are recommended.
If you already have ESET Remote Administrator (ERA) Server installed, follow the instructions below, and then create a policy for clients.
Visit the ESET Remote Administrator Download Page and download the appropriate All-in-one installer for your system architecture and save it in your preferred location.
Double-click the installer file to run the All-in-one installer.
Select Install/Upgrade Apache HTTP Proxy (mirror replacement) and click Next.
Figure 1-1
Click Next if you agree to the terms of the license agreement.
Click Install. The message "Apache HTTP Proxy installation was successful" will be displayed. Click Finish to close the installer.
Figure 1-2
Click to jump to the instructions to manually upgrade Apache HTTP Proxy
Use a tool such as WinZip or 7Zip to extract the .zip file that you downloaded in step 1 to the directory C:\Program Files\Apache HTTP Proxy.
Open an administrative command prompt and execute the following commands in the order shown below to install Apache HTTP Proxy:
CD C:\Program Files\
Apache HTTP Proxy
\bin
httpd.exe -k install -n ApacheHttpProxy
C:Program FilesApache HTTP Proxyconf
, locate the httpd.conf
file and open it using a text editor such as Notepad.When upgrading, the original httpd.conf
configuration cannot be applied because of the presence of new settings. To apply custom changes (if any), open your original, backed-up httpd.conf
file and append the custom changes to the new httpd.conf
manually.
At the bottom of the .conf file, add the following lines:
ServerRoot "C:\Program Files\
Apache HTTP Proxy
"DocumentRoot "C:\Program Files\
Apache HTTP Proxy
\htdocs"
Options Indexes FollowSymLinks
AllowOverride None
Require all granted
CacheRoot "C:\Program Files\Apache HTTP Proxy
\cache"
sc start ApacheHttpProxy
Figure 2-1
Click the image to view larger in new window
If you want to configure a username and password, navigate back to C:\Program Files\Apache HTTP Proxy\conf, open httpd.conf
using a text editor such as Notepad, and then follow the steps below to configure a username and password for Apache HTTP Proxy.
Verify the presence of the following modules loaded in httpd.conf:
LoadModule authn_core_module modules/mod_authn_core.dll
LoadModule authn_file_module modules/mod_authn_file.dll
LoadModule authz_groupfile_module modules/mod_authz_groupfile.dll
LoadModule auth_basic_module modules/mod_auth_basic.dll
Add the following lines to httpd.conf under :
AuthType Basic
AuthName "Password Required"
AuthUserFile password.file
AuthGroupFile group.file
Require group usergroup
Open an administrative command prompt and execute the following commands to define your password for Apache HTTP Proxy:
CD C:\Program Files\
Apache HTTP Proxy
\bin
htpasswd.exe -c ..\password.file username
You will be prompted to define the password that you want to use for Apache HTTP Proxy. Type your new password into the command prompt and press the Enter key on your keyboard.
In the folder C:\Program Files\Apache HTTP Proxy
, create a new text file named group.file with the following contents:
usergroup:username
Press the Windows key + R on your keyboard, type
Services.msc
, select the ApacheHttpProxy service and click Start.
Test the connection to HTTP Proxy by accessing the following URL in your browser:
http://localhost:3128/index.html
When troubleshooting, see the following file to find errors:
C:\Program Files\Apache HTTP Proxy\logs\error.log
Stop the ApacheHttpProxy service by opening an administrative command prompt and executing the following command:sc stop ApacheHttpProxy
Download the Apache HTTP Proxy installer file and extract its content to the directory of C:\Program Files\Apache HTTP Proxy\ overwriting the existing files.
Download Apache HTTP Proxy
Navigate to C:\Program Files\Apache HTTP Proxy\conf\, right-click httpd.conf, from the context menu select Open with → Notepad.
Add the following code at the bottom of that .conf file:
ServerRoot "C:\Program Files\Apache HTTP Proxy"
DocumentRoot "C:\Program Files\Apache HTTP Proxy\htdocs"
Options Indexes FollowSymLinks
AllowOverride None
Require all granted
CacheRoot "C:\Program Files\Apache HTTP Proxy\cache"
If you set username / password authentication to access your Apache HTTP Proxy earlier (step number 8 in the installation section above), then replace the following block of code:
Deny from all
with the following (it can be found in your backed-up httpd.conf file):
AuthType Basic
AuthName "Password Required"
AuthUserFile password.file
AuthGroupFile group.file
Require group usergroup
Order deny,allow
Deny from all
Allow from all
Save the changes and Start the the ApacheHttpProxy service by executing the following command in an administrative command prompt:
sc start ApacheHttpProxy
Test the connection to HTTP Proxy by accessing the following URL in your browser:
http://localhost:3128/index.html