UTM vs ESET PROTECT

Ahoj Jiri,

What do you see in the Web Filtering log related to this?

Cheers - Bob

Nothing. It does not appear in web filtering log. 

Hoi Rob - I think you're right that that's what he did, but that he doesn't want to use 'Allow HTTP/S traffic for listed hosts/net'.

Jiri, what happens if you make a firewall rule like '{192.1638.1.12} -> Web Surfing -> {repository.eset.com} : Allow'?

Cheers - Bob

Firewall rule works, but I prefer to use proxy instead of eset. ESET has a lot of IPs.

I added to these groups but it allows a lot of trafic I would like to use proxy :/.

I would use firewall but when you look at hostnames on their webpage: https://support.eset.com/en/kb332-ports-and-addresses-required-to-use-your-eset-product-with-a-third-party-firewall?locale=sk_SK&viewlocale=en_US, there is so many hostnames, this proxy seems easier.

Do you want to proxy the traffic to scan it or to cache it?

My point is that I want Server 192.168.1.12 can reach only eset websites. But when I put it in Skip Transparent Mode Source Hosts/Nets and Skip Transparent Mode Destination Hosts/Nets i can reach a lot more than ESET hostnames.

Jiri, you will have to create either a firewall rule with the FQDNs supplied or a Web Filtering Exception that skips everything.  Even then, you may find some that require skipping and an Exception.

I'll move this back to the Web Protection forum if you solve this with Web Protection.

Cheers - Bob

Hello, so I figured it out yesterday. The problem was not in sophos but in Apache. If you want to use proxy for all eset trafic, you have to set Remote Proxy in Apache. Maybe this will help Rob Crommentuijn too. I am now on phone  but if you want, I can send exception list with remote proxy for apache too.

we tried this with another application that uses httpget request to download updates, but the only way we got it to work properly was to skip the utm http proxy altogether (even with a proper web filtering exception in place).  

Don't worry, use Apache http which in All-in-one instlalation package. And then edit 'httpd.conf' file in path -> 'C:\Program Files\Apache HTTP Proxy 2.4.46\conf' and add on botton ProxyRemote * http://<YOUR-IP-ADDRESS>:<YOUR-PORT>

This is accrding to this tutorial on ESET website: https://help.eset.com/esmc_install/70/en-US/http_proxy_installation_linux.html the part what are u looking fore in on botton of page and it is called 'Proxy chaining'. 

Don't worry, use Apache http which in All-in-one instlalation package. And then edit 'httpd.conf' file in path -> 'C:\Program Files\Apache HTTP Proxy 2.4.46\conf' and add on botton ProxyRemote * http://<YOUR-IP-ADDRESS>:<YOUR-PORT>

This is accrding to this tutorial on ESET website: https://help.eset.com/esmc_install/70/en-US/http_proxy_installation_linux.html the part what are u looking fore in on botton of page and it is called 'Proxy chaining'.