• You used a mirror server with ESET Remote Administrator 5 and want to replicate that functionality using ESET Remote Administrator 6.
• You want to install and configure a proxy solution
• ESET Remote Administrator Proxy
• Apache HTTP Proxy vs. Web Proxy
• Set up a proxy solution

This article provides a comparison of three different proxy solutions. Different proxies can be used alone and also in a combination.

ESET Remote Administrator (ERA) version 6 and later can be used with three different proxy servers:

• ESET Remote Administrator Proxy (ERA Proxy)
• Apache HTTP Proxy (a third-party component)
• Web Proxy

Both ERA Proxy and Apache HTTP Proxy can be installed using the ESET Remote Administrator all-in-one or standalone installers; however, they perform very different roles in your network environment. A transparent forward proxy is not included in the ERA installer files but can be included. See below for a definition of each technology and how it should be used:

ESET Remote Administrator Proxy

ERA Proxy can be used on larger networks to help distribute load from client computers to the ERA Server. ERA Proxy is used as the “middle man” between remote branches and the ERA Server. For example, in an enterprise network (10,000 or more clients) you might install multiple instances of ERA Proxy on server machines to distribute network traffic and reduce the load on the ERA Server. Additionally, you can use ERA Proxy to manage communication between a remote office that does not have a high-bandwidth link to the ERA Server, or between a remote office behind a firewall. This configuration offers better communication because the ERA Proxy accepts all communication from local client computers, compiles the data, and uploads it to the ERA Server. This configuration can accommodate more clients without compromising network performance.

• Click here for step-by-step instructions to install ERA Proxy.
• See the sizing guide for more information on scaling.
• Note that the feature Wake-up call is not available on clients connected via ERA Proxy.
• If you have branched network infrastructure (more distant offices), one ERA Proxy per branch is recommended.

Comparison of Apache HTTP Proxy and ERA Proxy solutions
Figure 1-1

Apache HTTP Proxy vs. Web Proxy

The primary purpose of Web Proxy is to tunnel communication and cache certain files (such as installers and updates). It is possible to use proxy chaining with this option, but for remote location, it is recommended to use a dedicated proxy server. Such a solution must be configured by the customer.

Apache HTTP Proxy is a service that can be used in combination with ESET Remote Administrator 6 and later to distribute updates to client computers and installation packages to the ESET Remote Administrator Agent. Apache HTTP Proxy performs a similar role to the mirror server feature popular in ESET Remote Administrator 5 and earlier. Using Apache HTTP Proxy serves the following purposes:

• Tunneling of communication with ESET Update Servers, and caching of updates for ESET Endpoint, ERA Agent, and ERA Server. One proxy instance is needed for each branch (location).
• Tunneling of communication with ESET Repository Servers and:
  • ERA Server – caching of installers, used with the Agent Deployment task and for the creation of Installers
  • ERA Agent – caching of installers, used with the Software install task. One proxy is needed for each branch (location).
• Tunneling of communication with ESET LiveGrid, used to cache data for ESET security products
• Tunneling of communication with ESET Licensing Servers, caching of data used for:
  • ERA Server
  • ERA Agent, to allow activation of older products
  • ESET Security Products of version 6.x and later.

A key benefit of using the Apache HTTP Proxy is decrease of the data transfer from ESET servers to the local network.

Comparison of Apache HTTP Proxy and Transparent web proxy
Figure 1-2

When to start using Apache HTTP Proxy?

Based on our practice tests, we recommend you deploy Apache HTTP Proxy if you have a network of 37 or more computers. Review the simple comparison below of downloaded update data in a month using the direct internet connection in comparison to Apache HTTP Proxy:

Apache HTTP Proxy can be installed as part of the ESET Remote Administrator (ERA) Server installation process using the all-in-one installer. If you already have ERA Server installed, install and configure Apache HTTP Proxy using the standalone installer.

Set up a proxy solution

Install ERA Proxy

• From All-in-one installer
• From Standalone installer
• On Linux machine

Configuration of ERA Proxy

• Configure endpoint clients to connect to the ERA Proxy
• ERA Proxy policy settings

Install Apache HTTP Proxy

• From All-in-one installer
• From Standalone installer
• On Linux machine

Configuration of Apache HTTP Proxy

• Configure ERA Agent and Endpoint to use Apache HTTP Proxy

If you have installed Apache HTTP Proxy from the standalone installer, it is not automatically enabled on the ERA Server. You have to enable it manually:

1. Login to Web Console.
2. Navigate to Admin  → Server Settings.
3. Click Advanced Settings.
4. Enable Use proxy server under HTTP Proxy section.
5. Type the IP address or fully qualified domain name (FQDN) of the server where Apache HTTP proxy is installed into the Host field. Type the username and password if you have set them before (more in Method II. step 8).
6. Click Save.