ESET DEM Plug-ins DEM Owner's manual

ESET Direct Endpoint Management

plugin for N-able N-central

User guide

Click here to display the online version of this document

ESET Direct Endpoint Management plugin for N-able N-central was developed by ESET, spol. s r.o.

For more information visit https://www.eset.com.

in any form or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise without

permission in writing from the author.

ESET, spol. s r.o. reserves the right to change any of the described application software without prior notice.

Technical Support: https://support.eset.com

REV. 3/20/2023

1 Introduction 1 .......................................................................................................................................

2 System Requirements 1 .......................................................................................................................

3 Integrating and Using Direct Endpoint Management 2 ........................................................................

3.1 Automation Policies 2 ....................................................................................................................

3.1 Install Automation Manager 2 ............................................................................................................

3.1 Assign a scheduled task to an endpoint 5 ...............................................................................................

3.2 ESET Tasks 10 ..............................................................................................................................

3.2 Deploy ESET Management Agent 10 ....................................................................................................

3.2 Deploy ESET endpoint products for Windows 13 .......................................................................................

3.2 Activate endpoints for Windows 18 ......................................................................................................

3.2 Update modules for Windows 24 ........................................................................................................

3.2 Scan endpoints for Windows 29 .........................................................................................................

3.2 Tasks for ESET products for macOS 34 ..................................................................................................

3.3 Custom Services 42 .......................................................................................................................

3.3 Create a custom service 43 ..............................................................................................................

3.3 Assign service to endpoints 44 ..........................................................................................................

3.3 Create a service template 46 ............................................................................................................

3.3 Automatically assign template to endpoints 48 ........................................................................................

4 Support and Troubleshooting 51 ..........................................................................................................

4.1 Feedback 52 .................................................................................................................................

4.2 Known issues 52 ...........................................................................................................................

4.3 Changelog 52 ...............................................................................................................................

1

Introduction

The ESET Direct Endpoint Management plugin for N-able N-central is a Remote Management and Monitoring

(RMM) tool that makes monitoring and management easy for ESET Managed Service Providers (MSPs). RMM

tools typically monitor system information as well as patch status, Antivirus status and other computer health

issues. RMM tools also provide a certain level of automation to fix any health issues that arise or create a support

ticket for the MSP to resolve when the issue cannot be resolved through automation.

Managing ESET endpoint products from ESET PROTECT

The ESET PROTECT console offers additional functionality such as reporting, dynamic groups and specific client

tasks policies. If you would like to take advantage of these additional functionalities, you will also need to install

the ESET Management Agent on the endpoints you are managing.

Integrating with ESET endpoint products

ESET Direct Endpoint Management plugin for N-able N-central provides MSPs with the ability to verify the ESET

endpoint product installation status and monitor the protection status and the scan/threat logs of endpoint

machines using Automation Policies and Custom Services. The DEM components of this integration require ESET

endpoint for Windows products version 6.6 and later and ESET File Security for Windows version 6.5 and later.

Automation Policies refer to one-time tasks. Custom Services refer to the monitoring features. Custom Services

leverage Automation Policies so that they can be run on an interval, and depending on the return value, it can flag

an endpoint in need of attention.

Tasks

ESET Direct Endpoint Management plugin for N-able N-central implements the daily tasks necessary to manage

ESET endpoint products. Common tasks include deployment of ESET products to endpoints, Activation,

Configuration and Scanning. ESET Direct Endpoint Management plugin for N-able N-central utilizes N-able N-

central automation policies to perform routine tasks.

Custom Services

Check that ESET endpoint products are installed, monitor the protection status of endpoints and the scan and

threat logs.

Service Templates

Custom Services can be grouped into templates. Templates allow you to setup self-healing actions for cases

where the monitor results are not acceptable and need to be addressed automatically. For example, if an

endpoint machine is not activated, self-healing could execute an activation task.

System Requirements

• ESET Direct Endpoint Management plugin for N-able N-central runs entirely on the N-able N-central server.

Your endpoints must meet the requirements for ESET endpoint products and the N-able N-central agent, if

used.

2

• N-able N-central Agent version 11.1.x or later

Integrating and Using Direct Endpoint Management

This section includes the following topics:

• Automation Policies

• ESET Tasks

• Custom Services

Automation Policies

The available automation policies include the following:

• ESET Task - Activate: Activates the ESET endpoint security product. You will need to specify the License Key

(XXXX-XXXX-XXXX-XXXX-XXXX) or the ELA/EMA2 ESET business account (email password licensepubid).

• ESET Task - Configure: Configures the ESET endpoint product (scan frequency, target, exceptions, etc.).

You will need to specify the configuration file path.

• ESET Task - Deactivate: Deactivates the ESET endpoint security product and disables the ESET protection.

This task should only be used on endpoints that you no longer need to monitor. No additional parameters are

required to run this task.

• ESET Task - Deploy Activate: Deploys the ESET endpoint security product and activates it. This policy can

also be used to uninstall the product. You will need to specify the product (EEA, EES, EFSW, EMSX or

uninstall), the License Key (XXXX-XXXX-XXXX-XXXX-XXXX) or the ELA/EMA2 ESET business account (email

password licensepubid) and the uninstall password if the product was password-protected.

• ESET Task - On Demand Scan: Initiates an on-demand scan on the endpoint. You will need to specify the

scan target (one or more of the following: ${DriveAll} ${DriveAllBoot} ${Memory}, separated by "|" ) and the

scan profile (@Smart scan).

• ESET Task - Update Module: Performs a modules update. No additional parameters are required to run

this task.

• ESET Task - Upgrade: Downloads and installs the latest version of the ESET endpoint security product. If

the product was activated before upgrading, it will remain activated after the upgrade. You will need to

specify the product (EEA, EES, EFSW, EMSX ).

Before you can use automation policies, you must install automation manager and load automation scripts

into N-able N-central.

Install Automation Manager

3

Note

The ESET download package is correct despite some filenames or paths that may still refer to the old plugin

name (SolarWinds N-central) instead of N-able N-central due to the ongoing re-branding campaign.

The plugin consists of one bash script that enables you to create: Install, Uninstall, Activate, Deactivate,

Upgrade, Update, Scan and Monitor tasks.

ESET provides to download of a bundle of tasks and monitors scripts in the form of a .zip file containing .amp or

.sh files, a changelog, an end-user license agreement (EULA) and the user guide.

Unpack the bundle to upload the various .amp or .sh scripts to N-able N-central.

Scripts with names that start with "ESET Task - " allow you to perform tasks (jobs) on the endpoint.

Scripts with names that start with "ESET Mon - " are used for Monitors.

They are executed on a recurring basis, and return PASS/FAIL statuses. They can be associated to endpoints

and/or combined into service templates (in which case corrective actions can be attempted in case of failure -

“self-healing”)

1. From the left menu, select Actions > Start Automation Manager. If Automation Manager is not already

installed, follow the on-screen instructions.

Load automation scripts into N-able N-central

2. From the main menu, click File > Open or press the CTRL + O keys and select the AMP file you want to

upload. Or click Open Policy File from the main panel of Automation Manager.

4

3. When the AMP file is open, select File > Upload from the main menu to upload and save it to N-able N-

central.

You can customize the AMP file before uploading it (for example, supply default values to input

parameters)

5

4. When all the scripts are loaded, click Configuration > Scheduled Tasks > Script/Software Repository to

verify that the scripts are there.

With the scripts in the Script/Software Repository you can assign a scheduled task to an endpoint.

Assign a scheduled task to an endpoint

1. Click Views > All Devices and select the check box next to each endpoint that will have a task scheduled.

2. Click Add Task > Run an Automation Policy.

6

3. In the Details section, rename the task in the Task Name window if necessary.

4. To select Repository Item, type ESET and select the policy you want to apply. Depending on the task

selected you may need to type additional information such as the product type or License Key. If you are

setting up an Activate automation policy, you can type your ESET Business Account (EBA) username, password

and public ID of the license instead of the license key. Separate each element with a space in the following

format: [email protected] password XXX-XXX-XXX

7

5. Click the Schedule tab to select a time for the task to run. The default is set to Now. The task will run as

soon as it is saved.

8

6. Click the Notifications tab to select a notification type and recipients of status reports for the task

execution.

7. Click Save.

Check task progress

As soon as the task is scheduled, The Scheduled Tasks view will be displayed.

9

You can also monitor the task progress and results in the Job status view. From the main menu, click Views > Job

Status and select your task.

In the Automation Policy Task page you can monitor the progress and the results.

If your target consists of more than one endpoint, scroll down from one endpoint result to the next. If the status

is longer than 20 lines, you can download a ZIP file of the complete execution log.

10

ESET Tasks

This section demonstrates some suggested automations (self-healing) you can build using N-able N-central service

templates to automate the process of running tasks on endpoints. You must complete the Create a service

template section before you can create an automation.

• Deploy ESET Management Agent

• Deploy ESET endpoint products for Windows

• Activate endpoints for Windows

• Update product modules for Windows

• Scan endpoints for Windows

• Tasks for ESET products for macOS

Deploy ESET Management Agent

Deploy ESET Mangement Agent to manage ESET endpoints with ESET PROTECT. To manage ESET endpoints only

with N-able N-central console, do not deploy the ESET Management Agent.

1. Click Configuration > Scheduled Tasks > Script/Software Repository.

2. Click Add > Scripting.

3. Type a name and description (optional) for the script.

4. Click Browse and select the ESET PROTECTAgentInstaller.bat file.

11

6. Expand the Actions tab and select Run a Script.

7. Select the Repository Item for the script added.

8. Click the Targets tab and add the preferred device(s) or filter(s) and click Save.

12

9. Click the Schedule tab and select the date and time for the task to run. Click Save.

13

Deploy ESET endpoint products for Windows

Use automation to ensure that all endpoints are running ESET endpoint products.

Combine the ESET Monitor - Product Installed custom service with the automation policy ESET Task - Deploy w

Activate to ensure that any time the custom service returns with a failure, a deployment will trigger in response.

1. Open the ESET - Service Template you have created in the creating a service template section.

2. In the Details tab next to Service, select ESET Monitor - Product Installed from the drop-down menu and

click Add Service.

14

3. In the ESET Monitor - Product Installed window, click the Self-Healing tab to navigate to the Trigger

section.

4. Select Failed in the From status column and click the single arrow pointing to the right to move Failed to the

To status column.

15

5. Scroll down to the Self-healing section and select the Execute Self-Healing action check box to enable self-

healing.

6. Next to After executing Self-Healing wait, type 20. This is to allow the Automation policy enough time to

download the product installer and install the product.

7. Click the Action tab, scroll down to the Self-Healing Action section and select Execute Automation Policy

from the drop-down menu.

8. Type ESET into the Select Automation Policy drop-down menu and select ESET Task - Deploy w Activate.

9. Specify the correct product you are deploying next to Product (EEA, EES, EFSW, EMSX).

16

10. Type your ESET License Key to use for deploying and activating your ESET product next to License.

If you specify EEA or EES in the Product field, EFSW will automatically be installed on server operating

systems.

17

11. To be notified whenever this self-healing action takes place, click the Notification tab and configure your

desired settings.

12. Click Save.

Page is loading ...

ESET DEM Plug-ins DEM Owner's manual

ESET DEM Plug-ins DEM Owner's manual

Related papers