To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Re: FS Policy Manger 13 Proxy - AUA updates

Rob-K
Rob-K Posts: 33 Contributor
in Business Suite

I have a similar problem,

 

Clients are set to use the FSPMProxy13 but there are no pattern updates loaded over the proxy.

The folder "C:\Program Files (x86)\F-Secure\Management Server 5\data\guts2\updates" stays empty.

The clients report an error when trying to get updates from the policy proxy. they do a fallback to the PM on our main site

 

btw - in the documentation seems to be an error ...

 

"By default the proxy is installed in forward proxy mode. To switch to reverse mode, set the following
additional Java argument in the fspms.conf configuration file, after the additional_java_args parameter:
-DreverseProxy=true"

 

there is no such file - there is only a fspms.proxy.config file 

 

Edit: Title

Comments

  • A_Grinkevitch
    A_Grinkevitch Posts: 169

    Hello Rob-K,

    Tomczaki asked about Software updates while you are talking about Anti-virus definitions 😉
    The folder "C:\Program Files (x86)\F-Secure\Management Server 5\data\guts2\updates" at the Policy Manager indeed might be empty if nobody requested updates and if only CS 13 clients exist in the domain tree. If older clients are still used, PM downloads all “Backweb” updates, of course if c:\Program Files (x86)\F-Secure\Management Server 5\config\channels.json was not modified to skip those. Policy Manager Proxy downloads all “Backweb” updates unless you manually change channels.json.
    Please check log file c:\Program Files (x86)\F-Secure\Management Server 5\logs\fspms-download-updates.log to identify the reason why PM fails to download Anti-virus definitions.
    Please check that HTTP port is specified in the Policy Manager Proxy address if you use non-default 80 and firewall at PMP host allows connections to both HTTP and HTTPS ports. Also please tell me the error message which causes clients to fall back to the PM if ports and firewall are not the reason.

    As for documentation, seems you are referring to Linux instructions where specified config file exists: /etc/opt/f-secure/fspms/fspms.conf. If you are using Windows, reverseProxy argument should be specified in the registry: HKLM\SOFTWARE\Wow6432Node\Data Fellows\F-Secure\Management Server 5\ additional_java_args

     

    Alexander

  • Rob-K
    Rob-K Posts: 33 Contributor

    hi,

     

    I found the reason ... the documentation is wrong or for an other version

     

    two things can be done:

     

    1) Enter a proxy server in the file fspms.proxy.conf and the updates will be fetched from the F-Secure Internet site

     

    when you do not want to fetch the patterns directly and want to fetch them from the main Policy manager you need to insert the -DreverseProxy=true Argument - but not in a fspms.conf as the documentation stated

     

    2) do not enter a proxy in the config file - Enter the -DreverseProxy=true in the registry 

     

        [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Data Fellows\F-Secure\Management Server 5]

    "java_args"="-XX:+UseG1GC -DupstreamPmHost=policymanager.domain.company -DupstreamPmPort=443 -DadminPubLocation=\"C:\\Program Files (x86)\\F-Secure\\Management Server 5\\data\\admin.pub\"  -DreverseProxy=true"

     

    restart both PMP services

     

    and then the PMProxy get all the updates from the main site and works like a charme

     

  • Rob-K
    Rob-K Posts: 33 Contributor

    its in the FS Policy Proxy Admin Manual English - page 6

     

    5. Complete the installation wizard.
    Note: By default the proxy is installed in forward proxy mode. To switch to reverse mode, set the following
    additional Java argument in the fspms.confconfiguration file, after the additional_java_args parameter:
    -DreverseProxy=true

  • A_Grinkevitch
    A_Grinkevitch Posts: 169

    Thank you, will ask to add clear explanation.

This discussion has been closed.

Categories