Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Hosting Deep Security Relay and OfficeScan/Apex One Update Agent on the same machine

    • Updated:
    • 11 Feb 2020
    • Product/Version:
    • Apex One All
    • Deep Security All
    • Deep Security As A Service
    • OfficeScan All
    • Platform:
    • Windows
Summary

Use the same machine to host the Deep Security Relay and OfficeScan/Apex One Update Agent.

Details
Public

To host both the Deep Security Relay and OfficeScan/Apex OneUpdate Agent:

  1. Enable the relay functionality on the Deep Security agent.
  2. Disable the Anti-Malware (AM) on the relay.
  3. Configure the OfficeScan agents to act as Update Agents.
     
    The client port cannot be 4122, which is the default service port of relay.
     
  4. Enable the Real-time Scan on the Update Agent.
  5. Configure the firewall based on the following conditions:
    • If firewall is enabled on the Update Agent, create a rule to bypass the following ports used by Relay when updating from iAU, and communicate with Manager:
      80, 443, 4119, 4120, 4118, 4122, 4123.
    • If firewall is enabled on the Relay, create a rule to bypas the following ports used by Update Agent during update, communicate with the OfficeScan/Apex One server:
      {OfficeScan client port}, {OfficeScan server port}
    • If Windows Firewall or any third-party firewall is enabled, add a firewall rule to bypass ports used by Relay and Update Agent:
      80, 443, 4119, 4120, 4118, 4122, 4123, {OfficeScan client port}, {OfficeScan server port}

Deep Security Relay can be enabled on Windows x64 platform only. Below are the recommended platforms:

  • Windows Server 2012(64-bit)
  • Windows Server 2012 R2(64-bit)
  • Windows Server Core 2012 (64-bit)
  • Windows Server Core 2012 R2 (64-bit)
  • Windows 8.1 (64-bit)
  • Windows 8 (64-bit)
  • Windows 7 (64-bit)
  • Windows Server 2008 R2 (64-bit)
  • Windows Server 2008 (64-bit)
  • Windows Vista (64-bit)
  • Windows Server 2003 SP1 (64-bit) with patch
  • Windows Server 2003 SP2 (64-bit)
  • Windows Server 2003 R2 SP2 (64-bit)

For OfficeScan/Apex One, an Update Agent running on a 64-bit platform will not be able to generate incremental patterns. Therefore, the Update Agent always downloads all incremental patterns available in the ActiveUpdate server, regardless of how many of these patterns it has previously downloaded.

Premium
Internal
Partner
Rating:
Category:
Configure
Solution Id:
1112369
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.