Customized Update Sources for Update Agents

Aside from the Apex One server, Update Agents can update from custom update sources. Custom update sources help reduce agent update traffic directed to the Apex One server. Specify the custom update sources on the Customized Update Source List, which can accommodate up to 1024 update sources. See Customized Update Sources for Security Agents for steps to configure the list.

Note:

Ensure that the Update Agents update components, domain settings, and agent programs and hot fixes, only from the Apex One server option is disabled on the Update Source for Agents screen (Updates > Agents > Update Source) in order for Update Agents to connect to the customized update sources.

After you have set up and saved the list, the update process proceeds as follows:

  1. The Update Agent updates from the first entry on the list.

  2. If unable to update from the first entry, the agent updates from the second entry, and so on.

  3. If unable to update from all entries, the agent checks the following options under the Security Agents update the following items from the Apex One server if all customized sources are unavailable or not found heading:

    • Components: If enabled, the agent updates from the Apex One server.

      If the option is disabled, the agent then tries connecting directly to the Trend Micro ActiveUpdate server if any of the following are true:

      Note:

      You can only update components from the Active Update server. Domain settings, programs and hot fixes can only be downloaded from the server or Update Agents.

      • In the assigned Security Agent policy in Apex Central, go to Privileges and Other Settings > Other Settings > Update Settings, the option Security Agents download updates from the Trend Micro ActiveUpdate Server is enabled.

      • The ActiveUpdate server is not included in the Customized Update Source List.

    • Domain settings: If enabled, the agent updates from the Apex One server.

    • Security Agent programs and hot fixes: If enabled, the agent updates from the Apex One server.

  4. If unable to update from all possible sources, the Update Agent quits the update process.

The update process is different if the option Standard update source (update from Apex One server) is enabled and the Apex One server notifies the agent to update components. The process is as follows:

  1. The agent updates directly from the Apex One server and disregards the update source list.

  2. If unable to update from the server, the agent tries connecting directly to the Trend Micro ActiveUpdate server if any of the following are true:

    • In the assigned Security Agent policy in Apex Central, go to Privileges and Other Settings > Other Settings > Update Settings, the option Security Agents download updates from the Trend Micro ActiveUpdate Server is enabled.

    • The ActiveUpdate server is the first entry in the Customized Update Source List.

    Tip:

    Place the ActiveUpdate server at the top of the list only if you experience problems updating from the Apex One server. When Security Agents update directly from the ActiveUpdate server, significant bandwidth is consumed between the network and the Internet.

  3. If unable to update from all possible sources, the Update Agent quits the update process.