Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Hosting Deep Security 9.6 Relay and OfficeScan (OSCE) Update Agent on the same machine

    • Updated:
    • 17 Oct 2016
    • Product/Version:
    • Deep Security 9.6
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • Windows 2008 Enterprise 64-bit
    • Windows 2008 Server R2
    • Windows 2008 Standard 64-bit
    • Windows 2012 Enterprise
    • Windows 2012 Enterprise R2
    • Windows 7 64-bit
    • Windows 8 64-bit
    • Windows 8.1 64-bit
Summary

Use the same machine to host the Deep Security Relay and OfficeScan Update Agent.

Details
Public

To host both Deep Security Relay and OSCE Update Agent:

  1. Enable the relay functionality on the Deep Security agent.
  2. Disable the Anti-Malware (AM) on the relay.
  3. Configure the OfficeScan agents to act as Update Agents.
     
    The client port cannot be 4122, which is the default service port of relay.
  4. Enable the Real-time Scan on the Update Agent.
  5. Configure the firewall based on the following conditions:
    • If firewall is enabled on the Update Agent, create a rule to bypass the following ports used by Relay when updating from iAU, and communicate with Manager:
      80, 443, 4119, 4120, 4118, 4122, 4123.
    • If firewall is enabled on the Relay, create a rule to bypas the following ports used by Update Agent during update, communicate with the OSCE server:
      {OfficeScan client port}, {OfficeScan server port}
    • If Windows Firewall or any third-party firewall is enabled, add a firewall rule to bypass ports used by Relay and Update Agent:
      80, 443, 4119, 4120, 4118, 4122, 4123, {OfficeScan client port}, {OfficeScan server port}

Deep Security Relay can be enabled on Windows x64 platform only. Below are the recommended platforms:

  • Windows Server 2012(64-bit)
  • Windows Server 2012 R2(64-bit)
  • Windows Server Core 2012 (64-bit)
  • Windows Server Core 2012 R2 (64-bit)
  • Windows 8.1 (64-bit)
  • Windows 8 (64-bit)
  • Windows 7 (64-bit)
  • Windows Server 2008 R2 (64-bit)
  • Windows Server 2008 (64-bit)
  • Windows Vista (64-bit)
  • Windows Server 2003 SP1 (64-bit) with patch
  • Windows Server 2003 SP2 (64-bit)
  • Windows Server 2003 R2 SP2 (64-bit)

For OSCE, an Update Agent running on a 64-bit platform will not be able to generate incremental patterns. Therefore, the Update Agent always downloads all incremental patterns available in the ActiveUpdate server, regardless of how many of these patterns it has previously downloaded.

Premium
Internal
Rating:
Category:
Configure
Solution Id:
1112369
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.