Deploying CIS on several computers at once – Request

I recently had to deploy CIS on several computers for a client. I hit upon a problem with the first update to the AV database: it takes ages – in one instance it required over an hour. This may be because the update server was overloaded, but in any case, it would be nice to be able to download the latest file just once, then deploy it locally.

Is it already possible? If so, how? If not, could it be considered for the near future?


Hello pszwarc,

Yes this is possible, you can change the download server by selecting Misc, Settings, Connection.
Then change updates host: to the ip address of the first “pc” that has the latest AV database.

From the Help file:

The connection settings interface also allows you to select the host from which the program updates are to be downloaded. CIS downloads the program updates only from the host specified in the 'Updates host' text box in this interface. By default, the URL of the Comodo Server is entered in this field.

If you want to download the program updates always from the Comodo servers, you can leave the setting as it is.

If you are connected to a local network and the CIS program updates are available any of the other computers in your network, you can type the IP address of the host in this text box. CIS will automatically check the host specified here and download the updates from the host even when you are offline.

Click ‘OK’ for your settings to take effect.

That’s a neat trick, many thanks :slight_smile:

Of course I never noticed this in the help file… :-[

It’s only just introduced in 3.10.x
Please let me know if it works, i have not tried it yet.

Doesn’t work for me
I’ve tried the plain IP address as instructed also with the http prefix eg http:\ and the machine name, with and without the proxy box ticked

The designated Master PC is running without a firewall (for the purposes of this test only)

Would really love this to work or failing that a script to mirror http:\\cis\updates… with wget would do :smiley:

Do I need to specify a port eg 192.168.0.x:2275 ??

Given we can’t read the source to find out ourselves
how about a little more detail on this valuable feature please.

BTW I’m not the only one having problems getting this to work

Many Thanks

I think, but I’m not certain, that this facility refers to a PC on your local LAN running Comodo Endpoint Security Manager (CESM). I’ll try and make time tonight or tomorrow night to check this out. I’ll post the results back here.

Ewen :slight_smile:

I have been testing with this, you can’t use this on a home network with an other “normal” PC.

It needs a web server running on the system you are entering in the Updates host box and that web server needs specific requirements, It could be that CESM has this in it, can you confirm Ewen ?

[at] Ronny, you can run CESM as a server on an XP Pro box in a workgroup, but it has to be XP PRO.

[at] vbenergy, I don’t have time tonight, but I’ll try and do the test tomorrow.

Ewen :slight_smile:

Sorry for the belated reply, but it doesn’t seem to work. Reading the intervening posts here, I see that I’m missing some prerequisites. Is there another quick-and-dirty solution, such as copying some file(s) from an up-to-date machine?

Thanks… :-\


Copy the file’s from %programfiles%\Comodo\Comodo Internet Security\Scanners\ to the other system an reboot it, now it should be on the same database version.

Probably the copy could be best made in Safe-Mode because then the files aren’t in use on the destination system.

Sorry about the delay, RL got in the way… :-[

Thanks! :-TU

No prob, RL goes first.

I’ve discovered some additional info on the subject of the update source

I installed Comodo End Point manager, the free 5 seat version

To see if that can act as an update source

Its help docs refer to an “offline updater”

According to the Comodo press release this will be demo’ed
“Comodo will present Comodo Offline Updater at the National Association of Government Webmasters conference in Galveston, Texas, September 16 to 18, 2009”

So using a source other then is not yet possible but soon will be, that is assuming the destination machines do not need to be managed directly by Endpoint ?

The offline updater has been released. Please see

Not certain if the website download has been updated with the latest version yet, though.

can’t be far off. :smiley: :-TU

Disabling Defense + temporarily, no reboot needed, is also reported to work. This is easiest done by clicking right on the CIS icon in the systray and then adjust the Defense + Security Level.

Doesn’t seem to be available for download yet, looking forward to it.

Check out CIS 3.11.552.05 For ESM Released.

Sorry how does the client for Endpoint Security Manager relate to
the offline updater for the home version of CIS ???

I was hoping for an updater source for the unmanaged version of CIS.

I’ve downloaded the ESM trial and it doesn’t include the offline updater yet, should I download it again ?


I had opportunity to try this late last week: no go :frowning:

You have to disable D+ first then kill cmdagent, then you can update the bases.cav and you have to restart the cmdagent by typing:

net start cmdagent

On a command-box, and i think you also have to reboot to make it load… regardless of the fact that the GUI is showing the correct version or not…