Overslaan naar hoofdinhoud

Install Apache HTTP Proxy (6.x) - Kennisbank / Legacy / Legacy ESET Remote Administrator (6.x / 5.x / 4.x) / 6.x - ESET Tech Center

Install Apache HTTP Proxy (6.x)

Lijst van auteurs

https://support.eset.com/kb5950

Issue

    • Use Apache HTTP Proxy to distribute virus signature database and program module updates to client workstations and reduce Internet traffic generated by your network.

    • Use Apache HTTP Proxy to distribute ESET product installation packages to the ESET Remote Administrator Agent (ERA Agent).

  • Apache HTTP Proxy replaces the mirror server functionality from ESET Remote Administrator 5.x. Mirror Tool is available in ERA 6.x as an alternative, especially for offline environments.

Solution

Before you begin

If you already have ERA Server installed, follow the instructions below and then continue to the section create a policy for clients.


  • We recommend Method I for most users. Use Method II if Method I fails, or you want to install HTTP proxy manually. 

Method I: Install Apache HTTP Proxy using All-in-one installer

    1. Visit the ESET Remote Administrator Download Page and download the appropriate all-in-one installer for your system architecture.

  1. Double-click the installer file to run All-in-one installer.
  2. Select Install/Upgrade Apache HTTP Proxy (mirror replacement) and click Next.

Figure 1-1

    1. Click Next if you agree to the terms of the license agreement.

  1. Click Install. The message "Apache HTTP Proxy installation was successful" will be displayed. Click Finish to close the installer.

Figure 1-2


Method II: Install Apache HTTP Proxy manually

For instructions regarding the manual upgrade of Apache HTTP Proxy, scroll down.

Additional documentation available

Before you install Apache HTTP Proxy, we recommend that you review the text documentation (INSTALL.txt) that is included when you download Apache HTTP Proxy. You can find this documentation in the ApacheHttp folder after you have extracted it.

    1. On the server where you want to install Apache HTTP Proxy, click the link below to download the Apache HTTP Proxy installer file:

      DOWNLOAD APACHE HTTP PROXY

    2. Use a tool such as WinZip or 7Zip to extract the .zip file that you downloaded in step 1 to the directory C:\Program Files\Apache HTTP Proxy.

  1. Open an administrative command prompt and type the following commands in the order shown below to install Apache HTTP Proxy:

CD C:\Program Files\Apache HTTP Proxy\bin
httpd.exe -k install -n ApacheHttpProxy

    1. Navigate to C:\Program Files\Apache HTTP Proxy\conf, locate the httpd.conf file and open it using a text editor such as Notepad.

      When upgrading, original httpd.conf configuration cannot be applied because of presence of new settings. To apply custom changes (if any), open your original, backed-up httpd.conf file and append them to the new httpd.conf manually.

  1. At the bottom of the .conf file, add the following lines:

ServerRoot "C:\Program Files\Apache HTTP Proxy"
DocumentRoot "C:\Program Files\Apache HTTP Proxy\htdocs"
<Directory "C:\Program Files\Apache HTTP Proxy\htdocs">
Options Indexes FollowSymLinks
AllowOverride None
Require all granted
</Directory>
CacheRoot "C:\Program Files\
Apache HTTP Proxy\cache"

  1. Open an administrative command prompt and type the following command to start the Apache HTTP Proxy service.

sc start ApacheHttpProxy

  1. To verify that the Apache HTTP Proxy service is running, press the Windows key  + R, type Services.mscand make sure that the ApacheHttpProxy service is started. Select the service and click Stop before you continue to the next step.

Figure 2-1
Click the image to view larger in new window

    1. If you want to configure a username and password, navigate back to C:\Program Files\Apache HTTP Proxy\conf, open httpd.conf using a text editor such as Notepad, and then follow the steps below to configure a username and password for Apache HTTP Proxy.
        1. Verify the presence of the following modules loaded in httpd.conf:

          LoadModule authn_core_module modules/mod_authn_core.dll
          LoadModule authn_file_module modules/mod_authn_file.dll
          LoadModule authz_groupfile_module modules/mod_authz_groupfile.dll
          LoadModule auth_basic_module modules/mod_auth_basic.dll

        1. Add the following lines to httpd.conf under <Proxy *>:

          AuthType Basic
          AuthName "Password Required"
          AuthUserFile password.file
          AuthGroupFile group.file
          Require group usergroup

        1. Open an administrative command prompt and type the following commands to define your password for Apache HTTP Proxy:

          CD C:\Program Files\Apache HTTP Proxy\bin
          htpasswd.exe -c ..\password.file username

          You will be prompted to define the password that you want to use for Apache HTTP Proxy. Type your new password into the command prompt and press Enter.

      1. In the folder C:\Program Files\Apache HTTP Proxy, create a new text file named group.filewith the following contents:

        usergroup:username
    2. Press the Windows key  + R, type Services.msc select the ApacheHttpProxy service and click Start.

  1. Test the connection to HTTP Proxy by accessing the following URL in your browser:

    http://localhost:3128/index.html

    When troubleshooting, see the following file to find errors:

    C:\Program Files\Apache HTTP Proxy\logs\error.log
  1. Continue to Part II below to create a policy that will configure client computers and ESET Remote Administrator Agent to download updates and other files from Apache HTTP Proxy.

Manual upgrade of Apache HTTP Proxy

  1. Back up the following files:
    • C:\Program Files\Apache HTTP Proxy\conf\httpd.conf
    • C:\Program Files\Apache HTTP Proxy\password.file
    • C:\Program Files\Apache HTTP Proxy\group.file
  2. Stop the ApacheHttpProxy service by opening an administrative command prompt and executing the following command:

    sc stop ApacheHttpProxy

  3. Download the Apache HTTP Proxy installer file and extract its content to the directory of C:\Program Files\Apache HTTP Proxy\ overwriting the existing files.

    DOWNLOAD APACHE HTTP PROXY

  4. Navigate to C:\Program Files\Apache HTTP Proxy\conf\, right-click httpd.conf, from the context menu select Open with  Notepad.

  5. Add the following code at the bottom of that .conf file:

    ServerRoot "C:\Program Files\Apache HTTP Proxy"
    DocumentRoot "C:\Program Files\Apache HTTP Proxy\htdocs"
    <Directory "C:\Program Files\Apache HTTP Proxy\htdocs">
    Options Indexes FollowSymLinks
    AllowOverride None
    Require all granted
    </Directory>
    CacheRoot "C:\Program Files\Apache HTTP Proxy\cache"
  6. If you set username / password authentication to access your Apache HTTP Proxy earlier (step number 8 in the installation section above), then replace the following block of code:

    <Proxy *>
    Deny from all
    </Proxy>


    with the following (it can be found in your backed-up httpd.conf file):

    <Proxy *>
    AuthType Basic
    AuthName "Password Required"
    AuthUserFile password.file
    AuthGroupFile group.file
    Require group usergroup
    Order deny,allow
    Deny from all
    Allow from all
    </Proxy>

    • If you had any other custom modifications in the httpd.conf file of your previous installation of Apache HTTP Proxy, then you can copy over those modifications from the backed-up httpd.conf file to the new (upgraded) httpd.conf file.
  7. Save the changes and Start the the ApacheHttpProxy service by executing the following command in an administrative command prompt:

    sc start ApacheHttpProxy

  8. Test the connection to HTTP Proxy by accessing the following URL in your browser:

    http://localhost:3128/index.html


Configure policy settings for client computers

Policy settings can be applied in existing policies

  • In these instructions, we create new policies that define the location of Apache HTTP Proxy to client computers and ESET Remote Administrator Agents to ensure that settings are applied to all client computers.
  • If you have existing policies that apply to all agents and computers, you can apply these changes in those policies rather than creating new ones. For example, if you selected Apache HTTP Proxy using the ERA Installation Wizard, you can apply the Remote Administrator Agent - HTTP Proxy Usagepolicy. 

 

Permissions changes in ESET Remote administrator 6.5 and later

Before proceeding, please note important changes to user access rights and permissions in the latest versions of ESET Remote Administrator.

 

 

A user must have the following permissions for their home group.

Functionality Read Use Write
Policies

A user must have the following permissions for the group that contains the modified object.

Functionality Read Use Write
Computers & Groups

Once these permissions are in place, follow the steps below.

  1. Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in.
  2. Click Admin  → Policies → New Policy.

Figure 3-1

  1. Type a name for your new policy into the Name field. Optionally, you can type a description into the appropriate field.

Figure 3-2

  1. Expand Settings and select ESET Remote Administrator Agent from the drop-down menu.

Figure 3-3

    1. Expand Advanced Settings, enable Use proxy server under HTTP Proxy and then type the IP address or fully qualified domain name (FQDN) of the server where Apache HTTP proxy is installed into the Host field. Type the username and password that you configured above (Method II. step 8) into the appropriate fields.

  1. Click Finish.

Figure 3-4

  1. Select the policy that you just created and click Assign Group(s).

    Figure 3-5

  2. Select All (or select the group(s) that you want to receive updates from Apache HTTP Proxy) and click OK.

Figure 3-6

  1. Repeat steps 1-7 and select in step 4 with ESET Endpoint for Windows or ESET Endpoint for OS X & Linux (depending on which products are installed on your client computers). In step 5, click Tools → Proxy Server and configure the proxy settings there. Click Finish.

Figure 3-7

Reactie toevoegen

Log in of registreer om een reactie te plaatsen.

Heeft u een wachtwoordherinnering nodig?