ESET PROTECT On-Prem (PROTECT) 11.0—Administration Guide Owner's manual

ESET PROTECT On-Prem

Administration guide

Click here to display the online version of this document

ESET PROTECT On-Prem was developed by ESET, spol. s r.o.

For more information visit https://www.eset.com.

in any form or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise without

permission in writing from the author.

ESET, spol. s r.o. reserves the right to change any of the described application software without prior notice.

Technical Support: https://support.eset.com

REV. 1/8/2024

1 Introduction to ESET PROTECT On-Prem 1 ...........................................................................................

1.1 About Help 2 .................................................................................................................................

1.1 Icon legend 4 ..............................................................................................................................

1.1 Oﬄine help 6 ..............................................................................................................................

1.2 New features in ESET PROTECT On-Prem 8 .......................................................................................

1.3 Changelog 9 .................................................................................................................................

1.4 Supported Web browsers, ESET security products and languages 11 ..................................................

2 Getting started with ESET PROTECT On-Prem 13 .................................................................................

2.1 Opening the ESET PROTECT Web Console 14 ....................................................................................

2.2 ESET PROTECT Web Console 16 ......................................................................................................

2.2 Login screen 19 ..........................................................................................................................

2.2 ESET PROTECT On-Prem Tour 21 ........................................................................................................

2.2 User settings 22 ..........................................................................................................................

2.2 Filters and layout customization 24 .....................................................................................................

2.2 Tags 27 ...................................................................................................................................

2.2 Import CSV 30 ............................................................................................................................

2.2 Troubleshooting - Web Console 31 ......................................................................................................

2.3 How to manage Endpoint products from ESET PROTECT On-Prem 33 ...................................................

2.4 ESET Push Notiﬁcation Service 35 ...................................................................................................

3 VDI, cloning and hardware detection 36 ..............................................................................................

3.1 Resolving cloning questions 39 .......................................................................................................

3.2 Hardware identiﬁcation 42 .............................................................................................................

3.3 Master for Cloning 42 ....................................................................................................................

4 ESET Management Agent Deployment 45 ............................................................................................

4.1 Add computers using Active Directory synchronization 45 .................................................................

4.2 Add new devices manually 46 .........................................................................................................

4.3 Add computers using RD Sensor 49 .................................................................................................

4.3 ESET Rogue Detection Sensor policy settings 51 .......................................................................................

4.4 Local deployment 52 .....................................................................................................................

4.4 Create Agent and ESET security product installer 53 ...................................................................................

4.4 Create Agent script installer 58 ..........................................................................................................

4.4 Agent deployment - Windows 62 ........................................................................................................

4.4 Agent deployment - Linux 62 ............................................................................................................

4.4 Agent deployment - macOS 63 ..........................................................................................................

4.4 Download Agent from ESET website 65 .................................................................................................

4.5 Remote deployment 66 ..................................................................................................................

4.5 Agent deployment using GPO or SCCM 66 ..............................................................................................

4.5 Deployment steps - SCCM 68 ............................................................................................................

4.5 ESET Remote Deployment Tool 85 ......................................................................................................

4.5 ESET Remote Deployment Tool prerequisites 86 .......................................................................................

4.5 Select computers from Active Directory 86 .............................................................................................

4.5 Scan the local network for computers 88 ...............................................................................................

4.5 Import a list of computers 90 ............................................................................................................

4.5 Add computers manually 92 .............................................................................................................

4.5 ESET Remote Deployment Tool - troubleshooting 94 ...................................................................................

4.6 Agent protection 95 ......................................................................................................................

4.7 ESET Management Agent settings 96 ..............................................................................................

4.7 Create a Policy for ESET Management Agent connection interval 98 ..................................................................

4.7 Create a Policy for ESET Management Agent to connect to the new ESET PROTECT Server 102 ....................................

4.7 Create a Policy to enable ESET Management Agent Password protection 106 .......................................................

4.8 Troubleshooting - Agent connection 108 .........................................................................................

4.9 Troubleshooting - Agent deployment 109 ........................................................................................

4.10 Example scenarios of ESET Management Agent deployment 112 ......................................................

4.10 Example scenarios of ESET Management Agent deployment to targets not joined to domain 112 ................................

4.10 Example scenarios of ESET Management Agent deployment to targets joined to domain 114 ....................................

5 ESET PROTECT On-Prem Main Menu 115 .............................................................................................

5.1 Dashboard 116 .............................................................................................................................

5.1 Drill down 119 ...........................................................................................................................

5.2 Managed Customers 121 ...............................................................................................................

5.3 Computers 122 .............................................................................................................................

5.3 Computer Details 124 ...................................................................................................................

5.3 Computer Preview 130 ..................................................................................................................

5.3 Remove computer from management 131 .............................................................................................

5.3 Groups 133 ...............................................................................................................................

5.3 Group Actions 133 .......................................................................................................................

5.3 Group Details 135 .......................................................................................................................

5.3 Static Groups 136 ........................................................................................................................

5.3 Create a new Static Group 136 .........................................................................................................

5.3 Import clients from Active Directory 138 ...............................................................................................

5.3 Export Static Groups 138 ................................................................................................................

5.3 Import Static Groups 139 ................................................................................................................

5.3 Static Group tree for ESET Business Account / ESET MSP Administrator 141 .........................................................

5.3 Dynamic Groups 143 ....................................................................................................................

5.3 Create a new Dynamic Group 143 ......................................................................................................

5.3 Move Static or Dynamic Group 145 .....................................................................................................

5.3 Assign Client Task to a Group 147 ......................................................................................................

5.3 Assign Policy to a Group 148 ............................................................................................................

5.4 Detections 149 .............................................................................................................................

5.4 Manage Detections 152 .................................................................................................................

5.4 Detection Preview 153 ..................................................................................................................

5.4 Create Exclusion 154 ....................................................................................................................

5.4 ESET security products compatible with exclusions 157 ...............................................................................

5.4 Ransomware Shield 157 .................................................................................................................

5.4 ESET Inspect On-Prem 158 ..............................................................................................................

5.5 Reports 159 .................................................................................................................................

5.5 Create a new report template 161 ......................................................................................................

5.5 Generate report 165 .....................................................................................................................

5.5 Schedule a report 166 ...................................................................................................................

5.5 Outdated applications 167 ..............................................................................................................

5.5 SysInspector log viewer 167 ............................................................................................................

5.5 Hardware Inventory 168 .................................................................................................................

5.5 Audit log report 170 .....................................................................................................................

5.6 Tasks 170 ....................................................................................................................................

5.6 Tasks overview 173 ......................................................................................................................

5.6 Progress indicator 174 ...................................................................................................................

5.6 Status icon 175 ..........................................................................................................................

5.6 Task details 175 .........................................................................................................................

5.6 Client Tasks 177 .........................................................................................................................

5.6 Client Task Triggers 178 .................................................................................................................

5.6 Assign Client Task to a Group or Computer(s) 180 .....................................................................................

5.6 Anti-Theft Actions 182 ...................................................................................................................

5.6 Check for product update 184 ..........................................................................................................

5.6 Diagnostics 186 ..........................................................................................................................

5.6 Display Message 188 ....................................................................................................................

5.6 End computer isolation from network 189 ..............................................................................................

5.6 Export Managed Products Conﬁguration 190 ...........................................................................................

5.6 Isolate computer from network 191 ....................................................................................................

5.6 Log out 192 ..............................................................................................................................

5.6 Modules Update 193 .....................................................................................................................

5.6 Modules Update Rollback 194 ...........................................................................................................

5.6 On-Demand Scan 195 ...................................................................................................................

5.6 Operating System Update 198 ..........................................................................................................

5.6 Quarantine Management 199 ...........................................................................................................

5.6 Product Activation 201 ..................................................................................................................

5.6 Reset Cloned Agent 202 .................................................................................................................

5.6 Rogue Detection Sensor Database Reset 203 ..........................................................................................

5.6 Run Command 204 ......................................................................................................................

5.6 Run SysInspector Script 206 ............................................................................................................

5.6 ESET PROTECT Components Upgrade 207 .............................................................................................

5.6 Send File to ESET LiveGuard 208 .......................................................................................................

5.6 Server Scan 209 .........................................................................................................................

5.6 Shutdown computer 210 ................................................................................................................

5.6 Software Install 211 .....................................................................................................................

5.6 Safetica software 215 ...................................................................................................................

5.6 Software Uninstall 216 ..................................................................................................................

5.6 Stop Managing (Uninstall ESET Management Agent) 218 .............................................................................

5.6 SysInspector Log Request (Windows only) 219 ........................................................................................

5.6 Upload Quarantined File 220 ............................................................................................................

5.6 Server Tasks 221 ........................................................................................................................

5.6 Agent Deployment 223 ..................................................................................................................

5.6 Delete Not Connecting Computers 225 .................................................................................................

5.6 Generate Report 226 ....................................................................................................................

5.6 Rename computers 229 .................................................................................................................

5.6 Static Group Synchronization 230 ......................................................................................................

5.6 Synchronization mode - Active Directory/Open Directory/LDAP 231 ..................................................................

5.6 Synchronization mode - MS Windows Network 234 ....................................................................................

5.6 Synchronization mode - VMware 236 ...................................................................................................

5.6 Static Group Synchronization - Linux Computers 238 .................................................................................

5.6 User Synchronization 239 ...............................................................................................................

5.6 Task trigger types 242 ..................................................................................................................

5.6 Cron expression interval 243 ............................................................................................................

5.6 Advanced Settings - Throttling 246 .....................................................................................................

5.6 Throttling Examples 250 ................................................................................................................

5.7 Installers 252 ...............................................................................................................................

5.8 Policies 256 ..................................................................................................................................

5.8 Policies Wizard 257 ......................................................................................................................

5.8 Flags 258 .................................................................................................................................

5.8 Manage Policies 260 .....................................................................................................................

5.8 How Policies are applied to clients 261 .................................................................................................

5.8 Ordering Groups 261 ....................................................................................................................

5.8 Enumerating Policies 264 ...............................................................................................................

5.8 Merging Policies 266 .....................................................................................................................

5.8 Example scenario of merging policies 267 .............................................................................................

5.8 Conﬁguration of a product from ESET PROTECT On-Prem 271 ........................................................................

5.8 Assign a Policy to a Group 271 ..........................................................................................................

5.8 Assign a Policy to a Client 273 ..........................................................................................................

5.8 How to use Override mode 274 .........................................................................................................

5.9 Notiﬁcations 276 ..........................................................................................................................

5.9 Manage Notiﬁcations 278 ...............................................................................................................

5.9 Events on managed computers or groups 279 .........................................................................................

5.9 Server status changes 280 ..............................................................................................................

5.9 Dynamic group changes 282 ............................................................................................................

5.9 Distribution 283 ..........................................................................................................................

5.9 How to conﬁgure an SNMP Trap Service 284 ...........................................................................................

5.10 Status Overview 286 ...................................................................................................................

5.11 More 288 ...................................................................................................................................

5.11 Submitted Files 289 ....................................................................................................................

5.11 Exclusions 290 ..........................................................................................................................

5.11 Quarantine 293 .........................................................................................................................

5.11 Computer Users 294 ...................................................................................................................

5.11 Add New Users 295 ....................................................................................................................

5.11 Edit Users 297 ..........................................................................................................................

5.11 Create New User Group 300 ...........................................................................................................

5.11 Dynamic Group Templates 301 ........................................................................................................

5.11 New Dynamic Group Template 302 ...................................................................................................

5.11 Rules for a Dynamic Group template 303 .............................................................................................

5.11 Operations 304 .........................................................................................................................

5.11 Rules and logical connectors 304 ......................................................................................................

5.11 Template rules evaluation 306 ........................................................................................................

5.11 Dynamic Group template - examples 308 ............................................................................................

5.11 Dynamic Group - a security product is installed 309 .................................................................................

5.11 Dynamic Group - a speciﬁc software version is installed 309 ........................................................................

5.11 Dynamic Group - a speciﬁc version of a software is not installed at all 310 .........................................................

5.11 Dynamic Group - a speciﬁc version of a software is not installed but other version exists 311 ....................................

5.11 Dynamic Group - a computer is in speciﬁc subnet 312 ...............................................................................

5.11 Dynamic Group - installed but not activated version of server security product 313 ...............................................

5.11 How to automate ESET PROTECT On-Prem 313 .......................................................................................

5.11 License Management 315 ..............................................................................................................

5.11 ESET PROTECT Hub, ESET Business Account or ESET MSP Administrator 319 ......................................................

5.11 Add License - License Key 321 ........................................................................................................

5.11 Oﬄine activation 322 ..................................................................................................................

5.11 Access Rights 325 ......................................................................................................................

5.11 Users 326 ...............................................................................................................................

5.11 Create a Native User 329 ..............................................................................................................

5.11 User actions and user details 331 .....................................................................................................

5.11 Change user password 333 ............................................................................................................

5.11 Mapped users 334 ......................................................................................................................

5.11 Assign a Permission Set to a User 337 ................................................................................................

5.11 Two-Factor Authentication 338 ........................................................................................................

5.11 Permission Sets 340 ....................................................................................................................

5.11 Manage Permission Sets 342 ..........................................................................................................

5.11 List of permissions 344 .................................................................................................................

5.11 Certiﬁcates 349 .........................................................................................................................

5.11 Peer Certiﬁcates 350 ...................................................................................................................

5.11 Create a new Certiﬁcate 352 ..........................................................................................................

5.11 Export Peer Certiﬁcate 353 ............................................................................................................

5.11 APN/ABM certiﬁcate 354 ...............................................................................................................

5.11 Show revoked 356 ......................................................................................................................

5.11 Set new ESET PROTECT Server certiﬁcate 357 .......................................................................................

5.11 Custom certiﬁcates with ESET PROTECT On-Prem 359 ...............................................................................

5.11 How to use custom certiﬁcate with ESET PROTECT On-Prem 372 ...................................................................

5.11 Expiring Certiﬁcate - reporting and replacement 373 ................................................................................

5.11 Certiﬁcation Authorities 374 ...........................................................................................................

5.11 Create a new Certiﬁcation Authority 376 .............................................................................................

5.11 Export a Public Key 377 ................................................................................................................

5.11 Import a Public Key 379 ................................................................................................................

5.11 Audit Log 379 ...........................................................................................................................

5.11 Settings 380 ............................................................................................................................

5.11 Advanced security 385 .................................................................................................................

5.11 SMTP server 386 .......................................................................................................................

5.11 Automatically pair found computers 386 .............................................................................................

5.11 Export logs to Syslog 387 ..............................................................................................................

5.11 Syslog server 387 ......................................................................................................................

5.11 Events exported to JSON format 388 ..................................................................................................

5.11 Events exported to LEEF format 397 ..................................................................................................

5.11 Events exported to CEF format 397 ...................................................................................................

6 Mobile Device Management 405 ..........................................................................................................

6.1 MDM Setup and Settings 407 .........................................................................................................

6.2 Device Enrollment 408 ..................................................................................................................

6.2 Device Enrollment Android 411 .........................................................................................................

6.2 Device Enrollment Android as a Device Owner 419 ....................................................................................

6.2 Device Enrollment iOS 425 ..............................................................................................................

6.2 Device Enrollment iOS with ABM 429 ...................................................................................................

6.2 Enrollment via email 433 ................................................................................................................

6.2 Individual enrollment via link or QR code 435 ..........................................................................................

6.2 Android Device Owner (only Android 7 and later) 437 .................................................................................

6.2 Create a Policy for iOS MDM - Exchange ActiveSync Account 438 ....................................................................

6.2 Create a Policy for MDC to activate APN/ABM for iOS enrollment 443 ................................................................

6.2 Create a Policy to enforce restrictions on iOS and add Wi-Fi connection 448 ........................................................

6.2 MDM conﬁguration proﬁles 451 .........................................................................................................

6.3 Web Control for Android 452 ..........................................................................................................

6.3 Web Control rules 452 ...................................................................................................................

6.4 OS Update management 453 ..........................................................................................................

6.5 MDM Troubleshooting 454 .............................................................................................................

6.6 MDM Migration Tool 455 ................................................................................................................

7 ESET PROTECT On-Prem for Managed Service Providers 457 ..............................................................

7.1 Features of ESET PROTECT On-Prem for MSP users 460 .....................................................................

7.2 Deployment process for MSP 461 ...................................................................................................

7.2 Local deployment of Agent 462 .........................................................................................................

7.2 Remote deployment of Agent 462 ......................................................................................................

7.3 MSP Licenses 463 .........................................................................................................................

7.4 Importing an MSP account 465 .......................................................................................................

7.5 Start MSP customer setup 467 .......................................................................................................

7.6 Skip MSP customer setup 470 ........................................................................................................

7.7 Create custom installer 471 ...........................................................................................................

7.8 MSP Users 474 .............................................................................................................................

7.8 Create a custom MSP user 477 .........................................................................................................

7.9 Tagging of MSP objects 478 ...........................................................................................................

7.10 MSP Status overview 479 .............................................................................................................

7.11 Removing a company 481 ............................................................................................................

8 Automatic updates 483 ........................................................................................................................

8.1 ESET Management Agent automatic upgrade 483 .............................................................................

8.2 Automatic updates of ESET security products 484 ............................................................................

8.2 Conﬁgure automatic product updates 486 .............................................................................................

8.3 Update ESET PROTECT On-Prem 487 ...............................................................................................

8.4 Update third-party components 490 ...............................................................................................

9 FAQ 490 ...............................................................................................................................................

10 About ESET PROTECT On-Prem 494 ...................................................................................................

11 End User License Agreement 494 ......................................................................................................

12 Privacy Policy 501 ..............................................................................................................................

1

Introduction to ESET PROTECT On-Prem

Welcome to ESET PROTECT On-Prem version 11.0. Use ESET PROTECT On-Prem to manage ESET products on

workstations, servers and mobile devices in a networked environment from one central location. Using the ESET

PROTECT Web Console, you can deploy ESET solutions, manage tasks, enforce security policies, monitor system

status and quickly respond to problems or detections on remote computers.

See the ESET Glossary for more details about ESET technologies and the types of detections/attacks they

protect against.

The following ESET business security solutions have been renamed:

Old name: New name: Renamed in version:

ESET PROTECT ESET PROTECT On-Prem 11.0

ESET PROTECT Cloud ESET PROTECT 5.0

ESET Inspect ESET Inspect On-Prem 2.0

ESET Inspect Cloud ESET Inspect

ESET PROTECT components

• ESET PROTECT Server - You can install ESET PROTECT Server on Windows and Linux servers or deploy it as a

pre-configured Virtual Appliance. It handles communication with Agents and collects and stores application

data in the database.

• ESET PROTECT Web Console - ESET PROTECT Web Console is the primary interface that enables you to

manage client computers in your environment. It displays an overview of the status of clients on your network

and enables you to deploy ESET solutions to unmanaged computers remotely. After installing ESET PROTECT

Server, you can access the Web Console using your web browser. If you choose to make the web server

available via the internet, you can use ESET PROTECT On-Prem from any place or device with an internet

connection. You can install the ESET PROTECT Web Console on a different computer than the computer running

the ESET PROTECT Server. See also Getting started with ESET PROTECT Web Console.

• ESET Management Agent - The ESET Management Agent facilitates communication between the ESET

PROTECT Server and client computers. The Agent must be installed on a client computer to establish

communication between that computer and the ESET PROTECT Server. Because it is located on the client

computer and can store multiple security scenarios, using the ESET Management Agent significantly lowers

reaction time to new detections. Using ESET PROTECT Web Console, you can deploy the ESET Management

Agent to unmanaged computers identified by Active Directory or ESET RD Sensor. You can also manually install

the ESET Management Agent on client computers.

• Rogue Detection Sensor - The ESET PROTECT On-Prem Rogue Detection (RD) Sensor detects unmanaged

computers present on your network and sends their information to the ESET PROTECT Server. You can easily

add new client computers to your secure network. The RD Sensor remembers computers that have been

discovered and will not send the same information twice.

• ESET Bridge (HTTP Proxy) - You can use ESET Bridge with ESET PROTECT On-Prem as a Proxy service to:

• Download and cache: ESET module updates, installation and update packages pushed by ESET PROTECT

On-Prem (for example, ESET Endpoint Security MSI installer), ESET security product updates (component and

product updates), ESET LiveGuard results.

2

• Forward communication from ESET Management Agents to ESET PROTECT On-Prem.

• Mobile Device Connector - A component for Mobile Device Management with ESET PROTECT On-Prem,

permitting you to manage mobile devices (Android and iOS) and administer ESET Endpoint Security for Android.

ESET PROTECT Mobile Device Management/Connector (MDM/MDC) component (on-premises only)

reached End of Life in January 2024. Read more. We recommend that you migrate to Cloud MDM.

See also ESET PROTECT On-Prem architecture and infrastructure elements overview.

ESET PROTECT On-Prem standalone tools

• Mirror Tool - The Mirror Tool is necessary for offline module updates. If your client computers do not have

an internet connection, you can use the Mirror Tool to download update files from ESET update servers and

store them locally.

• ESET Remote Deployment Tool - This tool serves to deploy All-in-one packages created in the ESET PROTECT

Web Console. You can conveniently distribute ESET Management Agent with an ESET product on computers

over a network.

Additional ESET solutions

To enhance the protection of managed devices in your network, use these additional ESET solutions:

• ESET Full Disk Encryption - ESET Full Disk Encryption is an add-on feature native to ESET PROTECT Web

Console and provides the management of full disk encryption of managed Windows and macOS workstations

with an additional security layer in pre-boot login.

• ESET LiveGuard Advanced - ESET LiveGuard Advanced (Cloud Sandbox) is a paid service provided by ESET. Its

purpose is to add a layer of protection specifically designed to mitigate new threats in the wild.

• ESET Inspect On-Prem - A comprehensive Endpoint Detection and Response system that includes features

such as incident detection, incident management and response, data collection, indicators of compromise

detection, anomaly detection, behavior detection and policy violations.

Synchronize licenses

Synchronize licenses from ESET Business Account or ESET MSP Administrator 2 with ESET PROTECT On-Prem and

use them for activation of ESET security products on devices in your network.

• ESET Business Account - The licensing portal for ESET business products enables you to manage licenses. See

the ESET Business Account Online Help for more information.

• ESET MSP Administrator 2 - A license management system for ESET MSP partners. See the ESET MSP

Administrator 2 Online Help for more information.

About Help

The Administration guide was written to help you get familiar with ESET PROTECT On-Prem and provides

instructions to use it.

3

For consistency and to help prevent confusion, the terminology used throughout this guide is based on the ESET

PROTECT On-Prem parameter names. We also use a set of symbols to highlight topics of specific interest or

significance.

Notes can provide valuable information, such as specific features or a link to a related topic.

This requires your attention and it should not be skipped. Usually, it provides non-critical but significant

information.

Critical information you should treat with increased caution. Warnings are placed specifically to deter you

from committing potentially harmful mistakes. Please read and understand text placed in warning brackets,

as it references highly sensitive system settings or something risky.

Example scenario that describes a user case relevant for the topic where it is included. Examples are used

to explain more complicated topics.

Convention Meaning

Bold type Names of interface items such as boxes and option buttons.

Italic type

Placeholders for information you provide. For example, filename or path means you type the

actual path or a name of file.

Courier New Code samples or commands.

Hyperlink Provides quick and easy access to cross-referenced topics or external web location. Hyperlinks

are highlighted in blue and may be underlined.

%ProgramFiles%

The Windows system directory which stores installed programs of Windows and others.

• Online Help is the primary source of help content. The latest version of Online Help will automatically be

displayed when you have a working internet connection. The ESET PROTECT On-Prem online help pages

include four active tabs at the top navigation header: Installation/Upgrade, Administration and VA

Deployment.

• Topics in this guide are divided into several chapters and sub-chapters. You can find relevant information

by using the search field at the top.

When you open a User Guide from the navigation bar at the top of the page, search will be limited to the

contents of that guide. For example, if you open the Administrator guide, topics from the

Installation/Upgrade and VA Deployment guides will not be included in search results.

• The ESET Knowledgebase contains answers to the most frequently asked questions, as well as

recommended solutions for various issues. Regularly updated by ESET technical specialists, the

Knowledgebase is the most powerful tool for resolving various types of problems.

• The ESET Forum provides ESET users with an easy way to get help and to help others. You can post any

problem or question related to your ESET products.

• You can post your rating and/or provide a feedback on a specific topic in help: Click the Was this

information helpful? link underneath the help page.

4

Icon legend

This is a collection of icons used throughout ESET PROTECT Web Console with their description. Some of the icons

depict actions, item types or current status. Most icons are displayed in one of three colors to denote the

accessibility of an element:

Default icon - available action

Blue icon - highlighted element when you hover with mouse pointer

Gray icon - action not available

Status icon Descriptions

Details about the client device.

Add Device - add new devices.

New Task - add new task.

New Notification - add new notification.

New Static/Dynamic Groups - add new groups.

Edit - you can edit your created tasks, notifications, reports template, groups, policies, etc.

Duplicate - lets you create a new policy based on the existing policy you have selected, a new name

is required for the duplicate.

Move - computers, policies, Static or Dynamic Groups.

Access Group - Move the object to another Static Group where it is available to users with sufficient

rights for the target group. Changing the Access Group is useful when solving access issues with

other users. Access Group sets the object's Static Group and access to the object based on the user's

access rights.

Delete - removes the selected client, group, etc completely.

Rename multiple items - if you select multiple items you can rename them one by one in a list or

use Regex search and replace multiple items at once.

Scan - using this option will run the On Demand Scan task on the client that reported the detection.

Update > Update Modules - using this option will run the Modules Update task (triggers an update

manually).

Update > Update ESET products - Update ESET products installed on the selected device.

Update > Update Operating System - Update the operating system on the selected device.

Audit Log - View the Audit Log for the selected item.

Run Task for mobile devices.

Re-enroll - Re-enroll a mobile device.

Unlock - device will be unlocked.

Lock - device will be locked when suspicious activity is detected or the device is marked as missing.

Find - if you want to request the GPS coordinates of your mobile device.

Siren / Lost Mode sound - triggers a loud siren remotely, the siren will start even if your device is

set to mute.

Factory reset - all data stored in your device will be permanently erased.

5

Status icon Descriptions

Power - Click a computer and select Power > Reboot to reboot the device. You can configure the

managed computers' restart/shutdown behavior. The computers must run ESET Management Agent

9.1 and later and an ESET security product that supports this setting.

Restore - restore quarantined file to its original location.

Shutdown - Click a computer and select Power > Shutdown to shut down the device. You can

configure the managed computers' restart/shutdown behavior. The computers must run ESET

Management Agent 9.1 and later and an ESET security product that supports this setting.

Deactivate Products

Log out - Click a computer and select Power > Log out to log all users out of the computer.

Run Task - select a task and configure trigger and throttling (optional) for this task. The task will be

queued according to the task settings. This option immediately triggers an existing task that you

select from a list of available tasks.

Recent tasks - shows recent tasks. Click a task to execute it again.

Assign User - assign user to a device. You can manage users in Computer Users.

Manage Policies - a policy can also be assigned directly to a client (multiple clients), not just a

group. Select this option to assign the policy to selected client(s).

Send Wake-Up Call - ESET PROTECT Server runs instant replication of the ESET Management Agent

on a client machine via EPNS. This is useful when you do not want to wait for the regular interval

when the ESET Management Agent connects to ESET PROTECT Server. For example when you want

a Client Task to be run immediately on client(s) or if you want a Policy to be applied right away.

Deploy Agent - Create ESET Management Agent Installer to deploy Agent on the selected device.

Isolate from network

End network isolation

Connect via RDP - generate and download a

.rdp

file that will let you connect to target device via

Remote Desktop Protocol.

Mute - if you select a computer and press Mute, the Agent on this client stops reporting to ESET

PROTECT On-Prem; it will only aggregate the information. A muted icon will be displayed next to

a computer name in the Muted column.

When muting is disabled by clicking Un-mute, the muted computer will report again and

communication between ESET PROTECT On-Prem and the client is restored.

Disable - disable or remove a setting or selection.

Assign - assign a Policy to client or groups.

Import - select Reports / Policies / Public key you want to import.

Export - select Reports / Policies / Peer Certificate you want to export.

Tags - Edit tags (assign, unassign, create, delete).

Static Group

Dynamic Group

Not apply policy flag

Apply policy flag

Force policy flag

Triggers - See the list of Triggers for the selected Client Task.

Desktop

Mobile

6

Status icon Descriptions

Server

File Server

Mail Server

Gateway Server

Collaboration Server

ESET Management Agent

Mobile Device Connector

Rogue Detection Sensor

ESET PROTECT Server

ESET Inspect Server

ESET Bridge

Antivirus detection type. See all detection types in Detections.

Click a computer and select Solutions > Deploy security product to deploy an ESET security

product to the computer.

Click a computer or the gear icon next to a static group and select Solutions > Enable ESET

LiveGuard to activate and enable the ESET LiveGuard Advanced.

ESET Inspect Connector

Click Computers > click a computer or select more computers and click Computer > Solutions >

Enable ESET Inspect On-Prem to deploy ESET Inspect Connector to the managed

Windows/Linux/macOS computers. ESET Inspect On-Prem is only available when you have ESET

Inspect On-Prem license and ESET Inspect On-Prem connected to ESET PROTECT On-Prem. A Web

Console user needs Read permission or above for Access to ESET Inspect or Read permission or

above for ESET Inspect User.

Click a computer and select Solutions > Enable encryption to enable ESET Full Disk Encryption

on the selected computer.

The computer has ESET Full Disk Encryption enabled.

Offline help

Offline help for ESET PROTECT On-Prem is not installed by default. If you need ESET PROTECT On-Prem help that

you can use while you are offline (if you do not have an internet access at times, or all the time), perform the

steps below to add Offline help.

The Web Console and Apache Tomcat upgrade clears the Offline help files. If you used Offline help with an

earlier ESET PROTECT On-Prem version, re-create it for ESET PROTECT On-Prem 11.0 after upgrading. This

ensures that you have the latest Offline help matching the version of your ESET PROTECT On-Prem.

Click the language code to download Offline help for ESET PROTECT On-Prem in desired language. You even can

have Offline help can be installed for multiple languages.

Offline help setup instructions for Windows

7

1. Download a

.zip

file by clicking a language code in the table below to download Offline help for your ESET

PROTECT On-Prem in your desired language.

2. Save the

.zip

file (for example to a USB flash drive).

3. Create a new folder named

help

on your computer that runs ESET PROTECT Web Console within the

following location:

%ProgramFiles%\Apache Software Foundation\[ Tomcat folder

]\webapps\era\webconsole\

4. Copy the

.zip

file to the

help

folder.

5. Extract the contents of the

.zip

file, for example

en-US.zip

, to a folder with the same name, in this case en-

US so that the folder structure looks like this:

%ProgramFiles%\Apache Software Foundation\[ Tomcat folder

]\webapps\era\webconsole\help\en-US

You can now open your ESET PROTECT Web Console, select the language and log in. ESET PROTECT On-Prem

Offline help will open whenever you click the Help in the top right corner and click Current topic - Help.

You can add Offline help in multiple languages if required by following the same steps as above.

If your computer, or a mobile device you access ESET PROTECT Web Console from, does not have an

internet connection, you will need to change your setting in ESET PROTECT Web Console to force ESET

PROTECT On-Prem Offline help to open by default (instead of Online Help). To do so, follow the

instructions below the table.

Offline help setup instructions for Linux

1. Download a

.tar

file by clicking a language code in the table below to download Offline help for your ESET

PROTECT On-Prem in desired language.

2. Save the

.tar

file (for example to a USB flash drive).

3. Open terminal and navigate to

/usr/share/tomcat/webapps/era/webconsole

4. Create new folder named

help

by running mkdir help command.

5. Inside the

help

folder, create new language folder with the same name as the

.tar

file, for example: run

mkdir en-US command for English.

6. Copy the

.tar

file to the language folder (for example,

/usr/share/tomcat/webapps/era/webconsole/help/en-US

) and extract it, for example by running tar -xvf

en-US.tar command.

You can now open your ESET PROTECT Web Console, select the language and log in. ESET PROTECT On-Prem

Offline help will open whenever you click the Help in the top right corner and click Current topic - Help.

To update Offline Help after migrating from a previous version, delete the existing help folder

(

...webapps\era\webconsole\help

) and create a new one in the same place during step 3 of the procedure

shown above. Continue as normal after replacing the folder.

You can add Offline help in multiple languages if required by following the same steps as above.

If your computer, or a mobile device you access ESET PROTECT Web Console from, does not have an

internet connection, you will need to change your setting in ESET PROTECT Web Console to force ESET

PROTECT On-Prem Offline help to open by default (instead of Online Help). To do so, follow the

instructions below the table.

Supported Language Offline HTML Help

.zip

Offline HTML Help

.tar

English en-US.zip en-US.tar

Arabic ar-EG.zip ar-EG.tar

Chinese Simplified zh-CN.zip zh-CN.tar

Chinese Traditional zh-TW.zip zh-TW.tar

Croatian hr-HR.zip hr-HR.tar

Czech cs-CZ.zip cs-CZ.tar

French fr-FR.zip fr-FR.tar

French Canadian fr-CA.zip fr-CA.tar

8

Supported Language Offline HTML Help

.zip

Offline HTML Help

.tar

German de-DE.zip de-DE.tar

Greek el-GR.zip el-GR.tar

Italian it-IT.zip it-IT.tar

Japanese ja-JP.zip ja-JP.tar

Korean ko-KR.zip ko-KR.tar

Polish pl-PL.zip pl-PL.tar

Portuguese Brazilian pt-BR.zip pt-BR.tar

Russian ru-RU.zip ru-RU.tar

Spanish es-ES.zip es-ES.tar

Spanish Latin es-CL.zip es-CL.tar

Slovak sk-SK.zip sk-SK.tar

Turkish tr-TR.zip tr-TR.tar

Ukraininan uk-UA.zip uk-UA.tar

Force Offline help on Windows

1. Open C:\Program Files\Apache Software Foundation\[ Tomcat folder ]\webapps\era\WEB-

INF\classes\sk\eset\era\g2webconsole\server\modules\config\EraWebServerConfig.properties in a text editor.

2. Locate the line help_show_online=true, change this setting's value to false and save changes.

3. Restart the Tomcat service within services or via command line.

ESET PROTECT On-Prem Offline help will open whenever you click the Help in the top right corner and click Current topic - Help. The

respective help window for the current page will be displayed.

Force Offline help on Linux

1. Open /usr/share/tomcat/webapps/era/WEB-

INF/classes/sk/eset/era/g2webconsole/server/modules/config/EraWebServerConfig.properties configuration file in a text editor (for

example nano).

2. Locate the line help_show_online=true, change this setting's value to false and save changes.

3. Stop the tomcat service, Run the tomcat stop command.

4. Start the tomcat service, Run the tomcat start command.

ESET PROTECT On-Prem Offline help will open whenever you click the Help in the top right corner and click Current topic - Help. The respective help window for

the current page will be displayed.

New features in ESET PROTECT On-Prem

ESET LiveGuard Advanced behavioral reports

In preparation for delivering new, more robust behavioral reports for our EDR customers, we've added the option

to download behavioral reports generated by ESET LiveGuard Advanced. Learn more

A new client task that checks for product updates

This client task checks for the availability of a new product version. If one is found, it will be downloaded, and the

installation process will begin. Learn more

Time rules for dynamic groups

We've introduced the option to include time rules as additional criteria for dynamic group templates. When time

rules are configured, computers will be placed in dynamic groups only during the specified time period. Learn

9

more

Product renaming

The product name has been changed from ESET PROTECT to ESET PROTECT On-Prem, and there are some

additional product name-related changes included in this release as well.

Other improvements and bug fixes

Find out what else has been improved in the changelog.

Changelog

ESET PROTECT On-Prem (PROTECT) 11.0—Administration Guide Owner's manual

This manual is also suitable for

ESET PROTECT On-Prem (PROTECT) 11.0—Administration Guide Owner's manual

Related papers

Other documents