The default settings are to update from the AES server first, and to fall back to the internet servers if the AES server is not available.
Note that if you have more than one mirror, such as a 2nd level mirror at a remote site, you can select which mirror a client should use. Again the default is the single AES server which is both the management server and mirror.
First step is to make sure your mirror is up to date. Check this by choosing Show EAS Mirror status from the view menu.
If you want to force clients to only update from EAS, you can. Go to the computer group preferences. Under Policies:Avast antivirus choose updates. Then remove the check from the box "if mirror is unreachable, update from the internet". However, if you do this you must make sure the EAS server is reachable otherwise the clients will not get new database updates. From this same screen you can specify a different mirror for that group if desired.
In very distributed or very large environments it may be beneficial to have the 2nd level mirror. For example, Main site has 300 clients, and Branch office has 75. It would be better to have a 2nd level mirror at the branch office instead of having all 75 communicate over the WAN/VPN links to the EAS server for updates.
Cheers,
Mac
