Installation manual

30
ESET Gateway Security
7.1. ESETS update utility
To maintain the eectiveness of ESET Gateway Security, the virus signature database must
be kept up to date. The esets_update utility has been developed for this purpose (see the
esets_update (8) man page for details). To launch an update, the conguration options ‘av_
update_username‘ and ‘av_update_password‘ must be dened in the [global] section of the
ESETS conguration le. In the event that your server accesses the Internet via HTTP proxy, the
additional conguration options ‘proxy_addr‘, ‘proxy_port‘ must be dened. If access to the HTTP
proxy requires a username and password, the ‘proxy_username‘ and ‘proxy_password‘ options
must also be dened in this section. To initiate an update, enter the following command:
  @SBINDIR@/esets_update
To provide the highest possible security for the end user, the ESET team continuously collects
virus denitions from all over the world–new patterns are added to the virus signature database
in very short intervals. For this reason, we recommend that updates be initiated on a regular
basis. To specify the update frequency, the ‘av_update_period‘ option must be dened in the
[global] section of the ESETS conguration le. The ESETS daemon must be up and running in
order to successfully update the virus signature database.
7.2. ESETS update process description
The update process consists of two stages: First, the precompiled update modules are
downloaded from the ESET server. If the option ‘av_mirror_enabled‘ is set to ´yes´ in the [global]
section of the ESETS conguration le, copies (or mirror) of these update modules are created in
the following directory:
  @BASEDIR@/mirror
If desired, the Mirror directory path can be redened using the ‘av_mirror_dir‘ option in the
[global] section of the ESETS conguration le. The newly created Mirror can then serve as a fully
functional update server and can be used to create lower (child) Mirror servers. See section 7.3
for details.
The second stage of the update process is the compilation of modules loadable by the ESET
Gateway Security scanner from those stored in the local mirror. Typically, the following ESETS
loading modules are created: loader module (em000.dat), scanner module (em001.dat), virus
signature database module (em002.dat), archives support module (em003.dat), advanced
heuristics module (em004.dat), etc. The modules are created in the following directory:
  @BASEDIR@
This is the directory where the ESETS daemon loads modules from and thus can be redened
using the ‘base_dir‘ option in the [global] section of the ESETS conguration le.