Using F-Secure Endpoint Proxy with an F-Secure Elements EPP for Computers profile - F-Secure Community
<main> <article class="userContent"> <p> </p>Using F-Secure Endpoint Proxy with an F-Secure Elements EPP for Computers profile <p>F-Secure Endpoint Proxy, also known to as Policy Manager Proxy (PMP) is provided by F-Secure to minimize the bandwidth usage while downloading updates to the clients with F-Secure Elements Agent installed. </p> <p> This proxy caches GUTS2 updates -- the malware signature database. If the PMP is not available, the clients automatically fall back to accessing GUTS2 directly. </p> <p>To configure the Policy Manager Proxy and use it with F-Secure Elements EPP for Computers profiles: </p> <ol><li> Download and install the latest version of F-Secure Policy Manager Proxy. <ul><li>For Windows: <ol type="a"><li>Download the installer <a rel="nofollow" href="https://www.f-secure.com/en/web/business_global/downloads/policy-manager">here</a>. </li> <li>When asked for the Proxy Manager Server address, use 0.0.0.0. </li> <li>Check the client updates in the PMP logs:<code class="code codeInline" spellcheck="false" tabindex="0"> <installation_directory>/F-Secure/Management Server 5/logs</code> </li> </ol></li> <li>For Linux: <ol type="a"><li>Download the installer <a rel="nofollow" href="https://www.f-secure.com/en/web/business_global/downloads/policy-manager-for-linux">here</a>. <br><strong>Note:</strong> Before installing Policy Manager proxy, install the libstdc++ package by running these commands: <ul><li><pre class="code codeBlock" spellcheck="false" tabindex="0">yum install libstdc++.i686</pre> </li> <li><pre class="code codeBlock" spellcheck="false" tabindex="0">yum install libstdc++.x86_64</pre> </li> </ul></li> <li>Configure the proxy: <ol type="i"><li>Use the command: <pre class="code codeBlock" spellcheck="false" tabindex="0">/opt/f-secure/fspms/bin/fspms-config</pre>. </li> <li>When prompted, provide the server address as 0.0.0.0. </li> <li>Manage F-Secure Policy Manager Proxy manually by typing: <pre class="code codeBlock" spellcheck="false" tabindex="0">/etc/init.d/fspms {start|stop|restart|status}</pre> </li> </ol></li> <li>Check the client updates in the PMP logs: <code class="code codeInline" spellcheck="false" tabindex="0">/var/opt/f-secure/fspms/logs</code> </li> </ol></li> </ul> What the logs mean: <div><table><colgroup><col></col><col></col></colgroup><thead><tr><th>Log </th> <th>Explanation </th> </tr></thead><tbody><tr><td headers="id_113513__entry_60605E87E2224B71B7E101107866F961"> <code class="code codeInline" spellcheck="false" tabindex="0">request.log </code> </td> <td headers="id_113513__entry_B1BEB75330E643C8A3D6150AA815558B"> <p>This log lists the requests received from the clients with a response status; for example, a 503 status, means the update is not downloaded from GUTS2 yet, please try again later. </p> </td> </tr><tr><td headers="id_113513__entry_60605E87E2224B71B7E101107866F961"> <code class="code codeInline" spellcheck="false" tabindex="0">fspms-serve-updates.log </code> </td> <td headers="id_113513__entry_B1BEB75330E643C8A3D6150AA815558B"> <p>This log lists what was asked by clients. If some updates are missing and requests are received from the client end with a 503 status, the reasons for this are written in this log. </p> </td> </tr><tr><td headers="id_113513__entry_60605E87E2224B71B7E101107866F961"> <code class="code codeInline" spellcheck="false" tabindex="0">fspms-download-updates.log </code> </td> <td headers="id_113513__entry_B1BEB75330E643C8A3D6150AA815558B"> <p>This log lists the downloads from GUTS2. </p> </td> </tr></tbody></table></div> </li> <li> Configure a F-Secure Elements EPP for Computers profile to use the PMP: <ol type="a"><li> Go to <strong>Profiles</strong> > <strong>F-Secure Elements EPP for Computers</strong>. </li> <li> Select the profile that needs modifying, then under <strong>General settings</strong> find the <strong>F-Secure Endpoint Proxy</strong> setting. <br><img src="https://us.v-cdn.net/6032052/uploads/066/69EVG7OG2HLY.png" alt="image" class="embedImage-img importedEmbed-img"></img><p>This setting represents the local server address set in step 1. Once this profile is assigned to the computer, it can also be verified on the client. </p> </li> <li> Open the client, then in <strong>Settings</strong>, select <strong>Updates</strong>. <p><strong>Note:</strong> You need administrative rights to edit the settings. </p> </li> <li> Check the address in the <em>Update server</em> field. This should be an Endpoint Proxy value. </li> <li> Select <strong>Check now</strong> for updates. </li> </ol><p>The check should execute without any errors. </p> <p><strong>Note:</strong> The Policy Manager Proxy uses port 80 by default. Make sure this is not blocked by the Windows firewall. </p> </li> </ol><p>If you need to configure Software Updater to work with F-Secure Endpoint Proxy, refer to this <a rel="nofollow" href="https://community.f-secure.com/elements-epp-en/kb/articles/9167-how-to-use-f-secure-endpoint-proxy-with-software-updater">article</a>. </p> </article> </main>
