My Account

Knowledge Center

Get support for FireEye products

Update AMCore content on standalone systems within a DMZ

Technical Articles ID: KB92427
Last Modified: 2021-12-30 19:29:18 Etc/GMT

Environment

Endpoint Security (ENS) Threat Prevention 10.x
DMZ systems without internet and ePolicy Orchestrator (ePO) connectivity

Summary

This article describes options to update AMCore content on standalone ENS systems within a DMZ.

Problem

Servers and workstations are isolated on the same DMZ without internet or an ePO repository connection. The systems can't automatically update the AMCore content. You want to install AMCore content updates once and distribute them for the other systems in the same DMZ.

Solution

Below are options to update AMCore content on standalone ENS systems within a DMZ.

Contents
Click to expand the section you want to view:

Update AMCore content using the ENS mirror task

The preferred and most efficient method to update AMCore content is the ENS mirror task. The mirror task replicates the update files from the first accessible repository, defined in the repository list, to a mirror site on your network. Using a replicated site is more efficient. Your systems communicate with a server that is closer than a McAfee Enterprise internet site, which economizes access and download time.

For more information, see the "Configure, schedule, and run mirror tasks" section of the Endpoint Security 10.7 Product Guide.

Connect the isolated network to an existing ePO server

Install an Agent Handler in the DMZ. Then, manage the configurations and the update repositories from an ePO server on-premises already installed in your environment. Also, you can create a Super Agent that connects to ePO and works as a Distributed Repository.

For more information, see the following resources:

ePolicy Orchestrator Product Guide. See the following sections:
- Best practice: SuperAgent repositories
- How Agent Handlers work
Introduction to ePO: Super Agents YouTube video
KB66797 - ePolicy Orchestrator port requirements for firewall traffic
KB59218 - How to use ePolicy Orchestrator in a DMZ or NAT environment

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Update AMCore content on standalone systems within a DMZ

Environment

Summary

Problem

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Update AMCore content on standalone systems within a DMZ

Environment

Summary

Problem

Solution

Affected Products

Languages:

Choose your region

Title

Title