How to set up a local update server for Cloud Security for Endpoints

Regular updates are essential in order for Cloud Security for Endpoints to keep computers safe against the latest threats. By default, the client installed on protected computers (Endpoint Client) automatically checks for and downloads updates every hour from the Bitdefender update servers on the Internet.

For customers with slow Internet connection or limited bandwidth, having all clients update from the Internet might be inconvenient. To optimize Cloud Security for Endpoints update distribution and related Internet traffic in local networks, you can use Update Server.

Update Server allows you to set up a Bitdefender update location within the local network. Having a local update server, you can configure and assign policies to Bitdefender clients so that they update from the local mirror instead of updating from the Internet.

By using a local Bitdefender update location, you can reduce Internet traffic (only one computer connects to the Internet to download updates) and achieve faster updates.

Step 1 - Install and Set Up Update Server

Consider the following when choosing and preparing the computer on which to install Update Server:

• You can install Update Server on any computer running Windows XP or a newer Windows operating system. There are no particular system requirements, except to ensure permanent Internet connection (or at least during working hours) and minimum 2 GB of free hard disk space for downloading updates.
• Update Server can and is recommended to be installed together with Endpoint Client.
• Update Server must be able to communicate with the Bitdefender clients. The default communication port is 7074. The Endpoint Client firewall is configured to allow communication between Endpoint Client and Update Server. If you use another firewall (such as Windows Firewall), you may need to configure it to allow the Update Server port.

To obtain the Update Server installation file:

1.    Connect to Cloud Security Console using your account.
2.    Go to the Computers > Installation Area page.
3.    Click the Installation Link button and choose View.
4.    Depending on the computer platform on which you install Update Server, choose the 32-bit or the 64-bit version of the setup file.

To install Update Server:

1.    Copy or download the installation file to the designated computer.
2.    Double-click the installation file to start the installation wizard.
3.    Click Next.
4.    Please read the License Agreement, select I accept the terms in the License Agreement and click Next.
5.    Choose Default for a straight forward installation. Default options are suitable for most situations. If you have reason to change the installation folder or the communication port, choose Custom.

Note
The updates download folder and the communication port can also be changed after installation.

If you opt for default installation, skip directly to step 8.

6.    Custom Installation! Update Server will be installed in ?:\Program Files\Bitdefender\Update Server. To change the installation folder, click Browse and choose another folder.
Click Next.
7.    Custom Installation! The default port is 7074. If you want to change the default port, type another value in the edit field.

Important
Please take the following into account:
•    Provide port values between 1 and 65535. Most ports under 1024 are used by common applications and services.
•    The Update Server port must not be used by other applications installed on the system.
•    Configure the local firewall to allow Update Server to use this port. This configuration is not needed when using the Endpoint Client firewall.

Click Next. If the port is in use, you will be prompted to set a new port. Otherwise, a new window will appear.

8.    Click Install to start installation.
9.    Wait until installation is completed and then click Finish.

After installation, some basic configuration and checks are required to ensure Update Server is up and running. Update Server has a web-based interface, which facilitates easy configuration and monitoring from any computer connected to the network.

To set up and ensure that Update Server is up and running:

1.    Access the Update Server web-based management panel.

•    On the computer on which Update Server is installed, go to the Windows Start menu and follow the path: Start > All Programs > Bitdefender Update Server > Bitdefender Update Server.
•    Open a web browser and enter the server address using one of these syntaxes:
http://update_server_ip:port
http://update_server_name:port

Use the default admin password to log in.

Note
Supported browsers: Internet Explorer 8 (+), Firefox 8 (+), Chrome 10 (+), Safari 4 (+).

2.    Change the default admin password to prevent unauthorized access. Choose Change Password from the Administrator menu in the upper-right corner of the management panel.

3.    On the Products page, add to the list the Bitdefender clients you want to update. Click the Add products button, select the products to update and then click the Save button. 

Add products

  Save

4.    On the Settings page, check the Update Server settings. It is recommended not to change default values. If the computer on which Update Server is installed connects to the Internet through a proxy server, you must configure the proxy settings.

5.    Confirm that Update Server can download updates from the Internet. On the Products page, click the Update now button. If update download fails, check the Internet and firewall configuration on the Update Server computer.

Update now
 

Step 2 – Configure Bitdefender Clients with the Local Update Address

Endpoint Client updates at installation time using the update address configured in the installation package. Afterwards, once a security policy has been applied, it updates using the update address configured in the policy. To update the Bitdefender clients from the local update server instead of the Internet, configure the installation packages and the policy with the address of the local update server.

The local update address that must be configured on the Bitdefender clients must follow one of these syntaxes:

•    update_server_ip:port
•    update_server_name:port

The default port is 7074.

To configure the installation packages with the address of the local update server:

1.    Go to the Computers > Installation Area page.
2.    Click the Customize Package button in the upper-right corner of the page.
3.    Replace the Internet update location with the address of the local update server.
4.    Click Save.

Note
Settings apply to all installation methods: web installer, full installation kit, remote installation.

To configure a policy with the address of the local update server:

1.    Go to the Policies > View Policies page.
2.    Click the policy name. This will open the policy page.
3.    Go to the General > Update settings.
4.    Use the last row of the Update Locations table to add the new update location. Enter the address of the local update server in the Add location field and then click the Add button.
5.    Use the Up/Down symbols in the Action column to set the local update address the first one in the list. Clients check update locations by order of priority. If the first location is unavailable, the second one is checked and so on.
6.    If client computers connect to the local update server through a proxy server, select the Use Proxy check box corresponding to the update location. You must also select Enable proxy and configure the proxy settings.
7.    Click Save.

Important
It is recommended not to remove the default Internet location from the list, as a fail-safe method in case the local update server is unavailable.
 

For the video tutorial of this article, please Click Here.

1. 9
2. 1
3. 0
4. 1
5. 0