ESET PROTECT 10.1—Administration Guide Owner's manual

ESET PROTECT

Administration guide

Click here to display the online version of this document

ESET PROTECT was developed by ESET, spol. s r.o.

For more information visit https://www.eset.com.

in any form or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise without

permission in writing from the author.

ESET, spol. s r.o. reserves the right to change any of the described application software without prior notice.

Technical Support: https://support.eset.com

REV. 9/13/2023

1 Introduction to ESET PROTECT 1 ..........................................................................................................

1.1 About Help 2 .................................................................................................................................

1.1 Icon legend 3 ..............................................................................................................................

1.1 Oﬄine help 6 ..............................................................................................................................

1.2 New features in ESET PROTECT 8 ....................................................................................................

1.3 Changelog 9 .................................................................................................................................

1.4 Supported Web browsers, ESET security products and languages 11 ..................................................

2 Getting started with ESET PROTECT 13 ................................................................................................

2.1 Opening the ESET PROTECT Web Console 15 ....................................................................................

2.2 ESET PROTECT Web Console 16 ......................................................................................................

2.2 Login screen 19 ..........................................................................................................................

2.2 ESET PROTECT Tour 21 ..................................................................................................................

2.2 User settings 22 ..........................................................................................................................

2.2 Filters and layout customization 24 .....................................................................................................

2.2 Tags 27 ...................................................................................................................................

2.2 Import CSV 30 ............................................................................................................................

2.2 Troubleshooting - Web Console 31 ......................................................................................................

2.3 How to manage Endpoint products from ESET PROTECT 33 ................................................................

2.4 ESET Push Notiﬁcation Service 35 ...................................................................................................

3 VDI, cloning and hardware detection 36 ..............................................................................................

3.1 Resolving cloning questions 39 .......................................................................................................

3.2 Hardware identiﬁcation 42 .............................................................................................................

3.3 Master for Cloning 42 ....................................................................................................................

4 ESET Management Agent Deployment 45 ............................................................................................

4.1 Add computers using Active Directory synchronization 45 .................................................................

4.2 Add new devices manually 46 .........................................................................................................

4.3 Add computers using RD Sensor 48 .................................................................................................

4.3 ESET Rogue Detection Sensor policy settings 50 .......................................................................................

4.4 Local deployment 51 .....................................................................................................................

4.4 Create Agent and ESET security product installer 52 ...................................................................................

4.4 Create Agent script installer 57 ..........................................................................................................

4.4 Agent deployment - Windows 61 ........................................................................................................

4.4 Agent deployment - Linux 61 ............................................................................................................

4.4 Agent deployment - macOS 62 ..........................................................................................................

4.4 Download Agent from ESET website 64 .................................................................................................

4.5 Remote deployment 64 ..................................................................................................................

4.5 Agent deployment using GPO or SCCM 65 ..............................................................................................

4.5 Deployment steps - SCCM 67 ............................................................................................................

4.5 ESET Remote Deployment Tool 83 ......................................................................................................

4.5 ESET Remote Deployment Tool prerequisites 84 .......................................................................................

4.5 Select computers from Active Directory 84 .............................................................................................

4.5 Scan the local network for computers 86 ...............................................................................................

4.5 Import a list of computers 88 ............................................................................................................

4.5 Add computers manually 90 .............................................................................................................

4.5 ESET Remote Deployment Tool - troubleshooting 92 ...................................................................................

4.6 Agent protection 93 ......................................................................................................................

4.7 ESET Management Agent settings 94 ..............................................................................................

4.7 Create a Policy for ESET Management Agent connection interval 96 ..................................................................

4.7 Create a Policy for ESET Management Agent to connect to the new ESET PROTECT Server 100 ....................................

4.7 Create a Policy to enable ESET Management Agent Password protection 104 .......................................................

4.8 Troubleshooting - Agent connection 106 .........................................................................................

4.9 Troubleshooting - Agent deployment 107 ........................................................................................

4.10 Example scenarios of ESET Management Agent deployment 110 ......................................................

4.10 Example scenarios of ESET Management Agent deployment to targets not joined to domain 110 ................................

4.10 Example scenarios of ESET Management Agent deployment to targets joined to domain 112 ....................................

5 ESET PROTECT Main Menu 113 ............................................................................................................

5.1 Dashboard 114 .............................................................................................................................

5.1 Drill down 117 ...........................................................................................................................

5.2 Managed Customers 119 ...............................................................................................................

5.3 Computers 120 .............................................................................................................................

5.3 Computer Details 122 ...................................................................................................................

5.3 Computer Preview 128 ..................................................................................................................

5.3 Remove computer from management 129 .............................................................................................

5.3 Groups 131 ...............................................................................................................................

5.3 Group Actions 131 .......................................................................................................................

5.3 Group Details 133 .......................................................................................................................

5.3 Static Groups 133 ........................................................................................................................

5.3 Create a new Static Group 134 .........................................................................................................

5.3 Import clients from Active Directory 136 ...............................................................................................

5.3 Export Static Groups 136 ................................................................................................................

5.3 Import Static Groups 137 ................................................................................................................

5.3 Static Group tree for ESET Business Account / ESET MSP Administrator 139 .........................................................

5.3 Dynamic Groups 141 ....................................................................................................................

5.3 Create a new Dynamic Group 141 ......................................................................................................

5.3 Move Static or Dynamic Group 143 .....................................................................................................

5.3 Assign Client Task to a Group 145 ......................................................................................................

5.3 Assign Policy to a Group 146 ............................................................................................................

5.4 Detections 147 .............................................................................................................................

5.4 Manage Detections 150 .................................................................................................................

5.4 Detection Preview 151 ..................................................................................................................

5.4 Create Exclusion 152 ....................................................................................................................

5.4 ESET security products compatible with exclusions 155 ...............................................................................

5.4 Ransomware Shield 155 .................................................................................................................

5.4 ESET Inspect 156 ........................................................................................................................

5.5 Reports 157 .................................................................................................................................

5.5 Create a new report template 159 ......................................................................................................

5.5 Generate report 163 .....................................................................................................................

5.5 Schedule a report 164 ...................................................................................................................

5.5 Outdated applications 165 ..............................................................................................................

5.5 SysInspector log viewer 165 ............................................................................................................

5.5 Hardware Inventory 166 .................................................................................................................

5.5 Audit log report 168 .....................................................................................................................

5.6 Tasks 168 ....................................................................................................................................

5.6 Tasks overview 171 ......................................................................................................................

5.6 Progress indicator 172 ...................................................................................................................

5.6 Status icon 173 ..........................................................................................................................

5.6 Task details 173 .........................................................................................................................

5.6 Client Tasks 175 .........................................................................................................................

5.6 Client Task Triggers 176 .................................................................................................................

5.6 Assign Client Task to a Group or Computer(s) 178 .....................................................................................

5.6 Anti-Theft Actions 180 ...................................................................................................................

5.6 Diagnostics 182 ..........................................................................................................................

5.6 Display Message 184 ....................................................................................................................

5.6 End computer isolation from network 185 ..............................................................................................

5.6 Export Managed Products Conﬁguration 186 ...........................................................................................

5.6 Isolate computer from network 187 ....................................................................................................

5.6 Log out 188 ..............................................................................................................................

5.6 Modules Update 189 .....................................................................................................................

5.6 Modules Update Rollback 190 ...........................................................................................................

5.6 On-Demand Scan 192 ...................................................................................................................

5.6 Operating System Update 194 ..........................................................................................................

5.6 Quarantine Management 196 ...........................................................................................................

5.6 Product Activation 197 ..................................................................................................................

5.6 Reset Cloned Agent 198 .................................................................................................................

5.6 Rogue Detection Sensor Database Reset 199 ..........................................................................................

5.6 Run Command 200 ......................................................................................................................

5.6 Run SysInspector Script 202 ............................................................................................................

5.6 ESET PROTECT Components Upgrade 203 .............................................................................................

5.6 Send File to ESET LiveGuard 205 .......................................................................................................

5.6 Server Scan 205 .........................................................................................................................

5.6 Shutdown computer 206 ................................................................................................................

5.6 Software Install 207 .....................................................................................................................

5.6 Safetica software 211 ...................................................................................................................

5.6 Software Uninstall 212 ..................................................................................................................

5.6 Stop Managing (Uninstall ESET Management Agent) 214 .............................................................................

5.6 SysInspector Log Request (Windows only) 215 ........................................................................................

5.6 Upload Quarantined File 216 ............................................................................................................

5.6 Server Tasks 217 ........................................................................................................................

5.6 Agent Deployment 219 ..................................................................................................................

5.6 Delete Not Connecting Computers 221 .................................................................................................

5.6 Generate Report 222 ....................................................................................................................

5.6 Rename computers 225 .................................................................................................................

5.6 Static Group Synchronization 226 ......................................................................................................

5.6 Synchronization mode - Active Directory/Open Directory/LDAP 226 ..................................................................

5.6 Synchronization mode - MS Windows Network 230 ....................................................................................

5.6 Synchronization mode - VMware 232 ...................................................................................................

5.6 Static Group Synchronization - Linux Computers 234 .................................................................................

5.6 User Synchronization 235 ...............................................................................................................

5.6 Task trigger types 237 ..................................................................................................................

5.6 Cron expression interval 239 ............................................................................................................

5.6 Advanced Settings - Throttling 242 .....................................................................................................

5.6 Throttling Examples 245 ................................................................................................................

5.7 Installers 247 ...............................................................................................................................

5.8 Policies 251 ..................................................................................................................................

5.8 Policies Wizard 252 ......................................................................................................................

5.8 Flags 253 .................................................................................................................................

5.8 Manage Policies 255 .....................................................................................................................

5.8 How Policies are applied to clients 256 .................................................................................................

5.8 Ordering Groups 256 ....................................................................................................................

5.8 Enumerating Policies 259 ...............................................................................................................

5.8 Merging Policies 261 .....................................................................................................................

5.8 Example scenario of merging policies 262 .............................................................................................

5.8 Conﬁguration of a product from ESET PROTECT 266 ..................................................................................

5.8 Assign a Policy to a Group 266 ..........................................................................................................

5.8 Assign a Policy to a Client 268 ..........................................................................................................

5.8 How to use Override mode 269 .........................................................................................................

5.9 Notiﬁcations 271 ..........................................................................................................................

5.9 Manage Notiﬁcations 273 ...............................................................................................................

5.9 Events on managed computers or groups 274 .........................................................................................

5.9 Server status changes 275 ..............................................................................................................

5.9 Dynamic group changes 277 ............................................................................................................

5.9 Distribution 278 ..........................................................................................................................

5.9 How to conﬁgure an SNMP Trap Service 279 ...........................................................................................

5.10 Status Overview 281 ...................................................................................................................

5.11 More 283 ...................................................................................................................................

5.11 Submitted Files 284 ....................................................................................................................

5.11 Exclusions 285 ..........................................................................................................................

5.11 Quarantine 288 .........................................................................................................................

5.11 Computer Users 289 ...................................................................................................................

5.11 Add New Users 290 ....................................................................................................................

5.11 Edit Users 291 ..........................................................................................................................

5.11 Create New User Group 294 ...........................................................................................................

5.11 Dynamic Group Templates 295 ........................................................................................................

5.11 New Dynamic Group Template 296 ...................................................................................................

5.11 Rules for a Dynamic Group template 297 .............................................................................................

5.11 Operations 298 .........................................................................................................................

5.11 Rules and logical connectors 298 ......................................................................................................

5.11 Template rules evaluation 300 ........................................................................................................

5.11 Dynamic Group template - examples 302 ............................................................................................

5.11 Dynamic Group - a security product is installed 303 .................................................................................

5.11 Dynamic Group - a speciﬁc software version is installed 303 ........................................................................

5.11 Dynamic Group - a speciﬁc version of a software is not installed at all 304 .........................................................

5.11 Dynamic Group - a speciﬁc version of a software is not installed but other version exists 304 ....................................

5.11 Dynamic Group - a computer is in speciﬁc subnet 305 ...............................................................................

5.11 Dynamic Group - installed but not activated version of server security product 306 ...............................................

5.11 How to automate ESET PROTECT 306 .................................................................................................

5.11 License Management 308 ..............................................................................................................

5.11 ESET HUB, ESET Business Account or ESET MSP Administrator 312 .................................................................

5.11 Add License - License Key 314 ........................................................................................................

5.11 Oﬄine activation 315 ..................................................................................................................

5.11 Access Rights 318 ......................................................................................................................

5.11 Users 319 ...............................................................................................................................

5.11 Create a Native User 322 ..............................................................................................................

5.11 User actions and user details 324 .....................................................................................................

5.11 Change user password 326 ............................................................................................................

5.11 Mapped users 327 ......................................................................................................................

5.11 Assign a Permission Set to a User 330 ................................................................................................

5.11 Two-Factor Authentication 331 ........................................................................................................

5.11 Permission Sets 333 ....................................................................................................................

5.11 Manage Permission Sets 335 ..........................................................................................................

5.11 List of permissions 337 .................................................................................................................

5.11 Certiﬁcates 342 .........................................................................................................................

5.11 Peer Certiﬁcates 343 ...................................................................................................................

5.11 Create a new Certiﬁcate 345 ..........................................................................................................

5.11 Export Peer Certiﬁcate 346 ............................................................................................................

5.11 APN/ABM certiﬁcate 347 ...............................................................................................................

5.11 Show revoked 349 ......................................................................................................................

5.11 Set new ESET PROTECT Server certiﬁcate 350 .......................................................................................

5.11 Custom certiﬁcates with ESET PROTECT 352 .........................................................................................

5.11 How to use custom certiﬁcate with ESET PROTECT 365 ..............................................................................

5.11 Expiring Certiﬁcate - reporting and replacement 366 ................................................................................

5.11 Certiﬁcation Authorities 367 ...........................................................................................................

5.11 Create a new Certiﬁcation Authority 369 .............................................................................................

5.11 Export a Public Key 370 ................................................................................................................

5.11 Import a Public Key 372 ................................................................................................................

5.11 Audit Log 372 ...........................................................................................................................

5.11 Settings 373 ............................................................................................................................

5.11 Advanced security 378 .................................................................................................................

5.11 SMTP server 379 .......................................................................................................................

5.11 Automatically pair found computers 380 .............................................................................................

5.11 Export logs to Syslog 380 ..............................................................................................................

5.11 Syslog server 381 ......................................................................................................................

5.11 Events exported to JSON format 382 ..................................................................................................

5.11 Events exported to LEEF format 391 ..................................................................................................

5.11 Events exported to CEF format 391 ...................................................................................................

6 Mobile Device Management 399 ..........................................................................................................

6.1 MDM Setup and Settings 400 .........................................................................................................

6.2 Device Enrollment 401 ..................................................................................................................

6.2 Device Enrollment Android 404 .........................................................................................................

6.2 Device Enrollment Android as a Device Owner 412 ....................................................................................

6.2 Device Enrollment iOS 418 ..............................................................................................................

6.2 Device Enrollment iOS with ABM 422 ...................................................................................................

6.2 Enrollment via email 426 ................................................................................................................

6.2 Individual enrollment via link or QR code 428 ..........................................................................................

6.2 Android Device Owner (only Android 7 and later) 430 .................................................................................

6.2 Create a Policy for iOS MDM - Exchange ActiveSync Account 431 ....................................................................

6.2 Create a Policy for MDC to activate APN/ABM for iOS enrollment 436 ................................................................

6.2 Create a Policy to enforce restrictions on iOS and add Wi-Fi connection 441 ........................................................

6.2 MDM conﬁguration proﬁles 444 .........................................................................................................

6.2 OS update management 445 ...........................................................................................................

6.3 Web Control for Android 446 ..........................................................................................................

6.3 Web Control rules 446 ...................................................................................................................

6.4 OS Update management 447 ..........................................................................................................

6.5 MDM Troubleshooting 447 .............................................................................................................

6.6 MDM Migration Tool 449 ................................................................................................................

7 ESET PROTECT for Managed Service Providers 450 .............................................................................

7.1 Features of ESET PROTECT for MSP users 453 ..................................................................................

7.2 Deployment process for MSP 455 ...................................................................................................

7.2 Local deployment of Agent 455 .........................................................................................................

7.2 Remote deployment of Agent 456 ......................................................................................................

7.3 MSP Licenses 456 .........................................................................................................................

7.4 Importing an MSP account 458 .......................................................................................................

7.5 Start MSP customer setup 460 .......................................................................................................

7.6 Skip MSP customer setup 463 ........................................................................................................

7.7 Create custom installer 464 ...........................................................................................................

7.8 MSP Users 467 .............................................................................................................................

7.8 Create a custom MSP user 470 .........................................................................................................

7.9 Tagging of MSP objects 471 ...........................................................................................................

7.10 MSP Status overview 472 .............................................................................................................

7.11 Removing a company 474 ............................................................................................................

8 Automatic updates 476 ........................................................................................................................

8.1 ESET Management Agent automatic upgrade 476 .............................................................................

8.2 Automatic updates of ESET security products 477 ............................................................................

8.2 Conﬁgure automatic product updates 480 .............................................................................................

8.3 Update ESET PROTECT 481 ............................................................................................................

8.4 Update third-party components 484 ...............................................................................................

9 FAQ 484 ...............................................................................................................................................

10 About ESET PROTECT 488 ..................................................................................................................

11 End User License Agreement 488 ......................................................................................................

12 Privacy Policy 495 ..............................................................................................................................

1

Introduction to ESET PROTECT

Welcome to ESET PROTECT version 10.1. Use ESET PROTECT to manage ESET products on workstations, servers

and mobile devices in a networked environment from one central location. Using the ESET PROTECT Web

Console, you can deploy ESET solutions, manage tasks, enforce security policies, monitor system status and

quickly respond to problems or detections on remote computers.

See the ESET Glossary for more details about ESET technologies and the types of detections/attacks they

protect against.

ESET PROTECT components

• ESET PROTECT Server - You can install ESET PROTECT Server on Windows and Linux servers or deploy it as a

pre-configured Virtual Appliance. It handles communication with Agents and collects and stores application

data in the database.

• ESET PROTECT Web Console - ESET PROTECT Web Console is the primary interface that enables you to

manage client computers in your environment. It displays an overview of the status of clients on your network

and enables you to deploy ESET solutions to unmanaged computers remotely. After installing ESET PROTECT

Server, you can access the Web Console using your web browser. If you choose to make the web server

available via the internet, you can use ESET PROTECT from any place or device with an internet connection. You

can install the ESET PROTECT Web Console on a different computer than the computer running the ESET

PROTECT Server. See also Getting started with ESET PROTECT Web Console.

• ESET Management Agent - The ESET Management Agent facilitates communication between the ESET

PROTECT Server and client computers. The Agent must be installed on a client computer to establish

communication between that computer and the ESET PROTECT Server. Because it is located on the client

computer and can store multiple security scenarios, using the ESET Management Agent significantly lowers

reaction time to new detections. Using ESET PROTECT Web Console, you can deploy the ESET Management

Agent to unmanaged computers identified by Active Directory or ESET RD Sensor. You can also manually install

the ESET Management Agent on client computers.

• Rogue Detection Sensor - The ESET PROTECT Rogue Detection (RD) Sensor detects unmanaged computers

present on your network and sends their information to the ESET PROTECT Server. You can easily add new

client computers to your secure network. The RD Sensor remembers computers that have been discovered and

will not send the same information twice.

• ESET Bridge (HTTP Proxy) - You can use ESET Bridge with ESET PROTECT as a Proxy service to:

• Download and cache: ESET module updates, installation and update packages pushed by ESET PROTECT

(for example, ESET Endpoint Security MSI installer), ESET security product updates (component and product

updates), ESET LiveGuard results.

• Forward communication from ESET Management Agents to ESET PROTECT.

• Mobile Device Connector - A component for Mobile Device Management with ESET PROTECT, permitting you

to manage mobile devices (Android and iOS) and administer ESET Endpoint Security for Android. ESET PROTECT

Mobile Device Management/Connector (MDM/MDC) component (on-premises only) is scheduled for End of

Life. Read more. We recommend that you migrate to Cloud MDM.

See also ESET PROTECT architecture and infrastructure elements overview.

2

ESET PROTECT standalone tools

• Mirror Tool - The Mirror Tool is necessary for offline module updates. If your client computers do not have

an internet connection, you can use the Mirror Tool to download update files from ESET update servers and

store them locally.

• ESET Remote Deployment Tool - This tool serves to deploy All-in-one packages created in the ESET PROTECT

Web Console. You can conveniently distribute ESET Management Agent with an ESET product on computers

over a network.

Additional ESET solutions

To enhance the protection of managed devices in your network, use these additional ESET solutions:

• ESET Full Disk Encryption - ESET Full Disk Encryption is an add-on feature native to ESET PROTECT Web

Console and provides the management of full disk encryption of managed Windows and macOS workstations

with an additional security layer in pre-boot login.

• ESET LiveGuard Advanced - ESET LiveGuard Advanced (Cloud Sandbox) is a paid service provided by ESET. Its

purpose is to add a layer of protection specifically designed to mitigate new threats in the wild.

• ESET Inspect - A comprehensive Endpoint Detection and Response system that includes features such as

incident detection, incident management and response, data collection, indicators of compromise detection,

anomaly detection, behavior detection and policy violations.

ESET Enterprise Inspector and ESET Dynamic Threat Defense have been renamed to ESET Inspect and ESET

LiveGuard Advanced.

You may need to troubleshoot issues caused by the renaming if you upgraded from ESET PROTECT 9.0 and

earlier and have reports, dynamic groups, notifications or other rules that filter for ESET Dynamic Threat

Defense or ESET Enterprise Inspector.

Synchronize licenses

Synchronize licenses from ESET Business Account or ESET MSP Administrator 2 with ESET PROTECT and use them

for activation of ESET security products on devices in your network.

• ESET Business Account - The licensing portal for ESET business products enables you to manage licenses. See

the ESET Business Account Online Help for more information.

• ESET MSP Administrator 2 - A license management system for ESET MSP partners. See the ESET MSP

Administrator 2 Online Help for more information.

About Help

The Administration guide was written to help you get familiar with ESET PROTECT and provides instructions to use

it.

For consistency and to help prevent confusion, the terminology used throughout this guide is based on the ESET

PROTECT parameter names. We also use a set of symbols to highlight topics of specific interest or significance.

3

Notes can provide valuable information, such as specific features or a link to a related topic.

This requires your attention and it should not be skipped. Usually, it provides non-critical but significant

information.

Critical information you should treat with increased caution. Warnings are placed specifically to deter you

from committing potentially harmful mistakes. Please read and understand text placed in warning brackets,

as it references highly sensitive system settings or something risky.

Example scenario that describes a user case relevant for the topic where it is included. Examples are used

to explain more complicated topics.

Convention Meaning

Bold type Names of interface items such as boxes and option buttons.

Italic type

Placeholders for information you provide. For example, filename or path means you type the

actual path or a name of file.

Courier New Code samples or commands.

Hyperlink Provides quick and easy access to cross-referenced topics or external web location. Hyperlinks

are highlighted in blue and may be underlined.

%ProgramFiles%

The Windows system directory which stores installed programs of Windows and others.

• Online Help is the primary source of help content. The latest version of Online Help will automatically be

displayed when you have a working internet connection. The ESET PROTECT online help pages include four

active tabs at the top navigation header: Installation/Upgrade, Administration, VA Deployment and SMB

guide.

• Topics in this guide are divided into several chapters and sub-chapters. You can find relevant information

by using the search field at the top.

When you open a User Guide from the navigation bar at the top of the page, search will be limited to the

contents of that guide. For example, if you open the Administrator guide, topics from the

Installation/Upgrade and VA Deployment guides will not be included in search results.

• The ESET Knowledgebase contains answers to the most frequently asked questions, as well as

recommended solutions for various issues. Regularly updated by ESET technical specialists, the

Knowledgebase is the most powerful tool for resolving various types of problems.

• The ESET Forum provides ESET users with an easy way to get help and to help others. You can post any

problem or question related to your ESET products.

• You can post your rating and/or provide a feedback on a specific topic in help: Click the Was this

information helpful? link underneath the help page.

Icon legend

This is a collection of icons used throughout ESET PROTECT Web Console with their description. Some of the icons

depict actions, item types or current status. Most icons are displayed in one of three colors to denote the

accessibility of an element:

Default icon - available action

4

Blue icon - highlighted element when you hover with mouse pointer

Gray icon - action not available

Status icon Descriptions

Details about the client device.

Add Device - add new devices.

New Task - add new task.

New Notification - add new notification.

New Static/Dynamic Groups - add new groups.

Edit - you can edit your created tasks, notifications, reports template, groups, policies, etc.

Duplicate - lets you create a new policy based on the existing policy you have selected, a new name

is required for the duplicate.

Move - computers, policies, Static or Dynamic Groups.

Access Group - Move the object to another Static Group where it is available to users with sufficient

rights for the target group. Changing the Access Group is useful when solving access issues with

other users. Access Group sets the object's Static Group and access to the object based on the user's

access rights.

Delete - removes the selected client, group, etc completely.

Rename multiple items - if you select multiple items you can rename them one by one in a list or

use Regex search and replace multiple items at once.

Scan - using this option will run the On Demand Scan task on the client that reported the detection.

Update > Update Modules - using this option will run the Modules Update task (triggers an update

manually).

Update > Update ESET products - Update ESET products installed on the selected device.

Update > Update Operating System - Update the operating system on the selected device.

Audit Log - View the Audit Log for the selected item.

Run Task for mobile devices.

Re-enroll - Re-enroll a mobile device.

Unlock - device will be unlocked.

Lock - device will be locked when suspicious activity is detected or the device is marked as missing.

Find - if you want to request the GPS coordinates of your mobile device.

Siren / Lost Mode sound - triggers a loud siren remotely, the siren will start even if your device is

set to mute.

Factory reset - all data stored in your device will be permanently erased.

Power - Click a computer and select Power > Reboot to reboot the device. You can configure the

managed computers' restart/shutdown behavior. The computers must run ESET Management Agent

9.1 and later and an ESET security product that supports this setting.

Restore - restore quarantined file to its original location.

Shutdown - Click a computer and select Power > Shutdown to shut down the device. You can

configure the managed computers' restart/shutdown behavior. The computers must run ESET

Management Agent 9.1 and later and an ESET security product that supports this setting.

Deactivate Products

Log out - Click a computer and select Power > Log out to log all users out of the computer.

5

Status icon Descriptions

Run Task - select a task and configure trigger and throttling (optional) for this task. The task will be

queued according to the task settings. This option immediately triggers an existing task that you

select from a list of available tasks.

Recent tasks - shows recent tasks. Click a task to execute it again.

Assign User - assign user to a device. You can manage users in Computer Users.

Manage Policies - a policy can also be assigned directly to a client (multiple clients), not just a

group. Select this option to assign the policy to selected client(s).

Send Wake-Up Call - ESET PROTECT Server runs instant replication of the ESET Management Agent

on a client machine via EPNS. This is useful when you do not want to wait for the regular interval

when the ESET Management Agent connects to ESET PROTECT Server. For example when you want

a Client Task to be run immediately on client(s) or if you want a Policy to be applied right away.

Deploy Agent - Create ESET Management Agent Installer to deploy Agent on the selected device.

Isolate from network

End network isolation

Connect via RDP - generate and download a

.rdp

file that will let you connect to target device via

Remote Desktop Protocol.

Mute - if you select a computer and press Mute, the Agent on this client stops reporting to ESET

PROTECT; it will only aggregate the information. A muted icon will be displayed next to a

computer name in the Muted column.

When muting is disabled by clicking Un-mute, the muted computer will report again and

communication between ESET PROTECT and the client is restored.

Disable - disable or remove a setting or selection.

Assign - assign a Policy to client or groups.

Import - select Reports / Policies / Public key you want to import.

Export - select Reports / Policies / Peer Certificate you want to export.

Tags - Edit tags (assign, unassign, create, delete).

Static Group

Dynamic Group

Not apply policy flag

Apply policy flag

Force policy flag

Triggers - See the list of Triggers for the selected Client Task.

Desktop

Mobile

Server

File Server

Mail Server

Gateway Server

Collaboration Server

ESET Management Agent

Mobile Device Connector

Rogue Detection Sensor

6

Status icon Descriptions

ESET PROTECT Server

ESET Inspect Server

ESET Bridge

Antivirus detection type. See all detection types in Detections.

Click a computer and select Solutions > Deploy security product to deploy an ESET security

product to the computer.

Click a computer or the gear icon next to a static group and select Solutions > Enable ESET

LiveGuard to activate and enable the ESET LiveGuard Advanced.

ESET Inspect Connector

Click Computers > click a computer or select more computers and click Computer > Solutions >

Enable ESET Inspect to deploy ESET Inspect Connector to the managed Windows/Linux/macOS

computers. ESET Inspect is only available when you have ESET Inspect license and ESET Inspect

connected to ESET PROTECT. A Web Console user needs Read permission or above for Access to

ESET Inspect or Read permission or above for ESET Inspect User.

Click a computer and select Solutions > Enable encryption to enable ESET Full Disk Encryption

on the selected computer.

The computer has ESET Full Disk Encryption enabled.

Offline help

Offline help for ESET PROTECT is not installed by default. If you need ESET PROTECT help that you can use while

you are offline (if you do not have an internet access at times, or all the time), perform the steps below to add

Offline help.

The Web Console and Apache Tomcat upgrade clears the Offline help files. If you used Offline help with

ESMC or an earlier ESET PROTECT version, re-create it for ESET PROTECT 10.1 after upgrading. This ensures

that you have the latest Offline help matching the version of your ESET PROTECT.

Click the language code to download Offline help for ESET PROTECT in desired language. You even can have

Offline help can be installed for multiple languages.

Offline help setup instructions for Windows

7

1. Download a

.zip

file by clicking a language code in the table below to download Offline help for your ESET

PROTECT in your desired language.

2. Save the

.zip

file (for example to a USB flash drive).

3. Create a new folder named

help

on your computer that runs ESET PROTECT Web Console within the

following location:

%ProgramFiles%\Apache Software Foundation\[ Tomcat folder

]\webapps\era\webconsole\

4. Copy the

.zip

file to the

help

folder.

5. Extract the contents of the

.zip

file, for example

en-US.zip

, to a folder with the same name, in this case en-

US so that the folder structure looks like this:

%ProgramFiles%\Apache Software Foundation\[ Tomcat folder

]\webapps\era\webconsole\help\en-US

You can now open your ESET PROTECT Web Console, select the language and log in. ESET PROTECT Offline help

will open whenever you click the Help in the top right corner and click Current topic - Help.

You can add Offline help in multiple languages if required by following the same steps as above.

If your computer, or a mobile device you access ESET PROTECT Web Console from, does not have an

internet connection, you will need to change your setting in ESET PROTECT Web Console to force ESET

PROTECT Offline help to open by default (instead of Online Help). To do so, follow the instructions

below the table.

Offline help setup instructions for Linux

1. Download a

.tar

file by clicking a language code in the table below to download Offline help for your ESET

PROTECT in desired language.

2. Save the

.tar

file (for example to a USB flash drive).

3. Open terminal and navigate to

/usr/share/tomcat/webapps/era/webconsole

4. Create new folder named

help

by running mkdir help command.

5. Inside the

help

folder, create new language folder with the same name as the

.tar

file, for example: run

mkdir en-US command for English.

6. Copy the

.tar

file to the language folder (for example,

/usr/share/tomcat/webapps/era/webconsole/help/en-US

) and extract it, for example by running tar -xvf

en-US.tar command.

You can now open your ESET PROTECT Web Console, select the language and log in. ESET PROTECT Offline help

will open whenever you click the Help in the top right corner and click Current topic - Help.

To update Offline Help after migrating from a previous version (for example ESMC), delete the existing help

folder (

...webapps\era\webconsole\help

) and create a new one in the same place during step 3 of the

procedure shown above. Continue as normal after replacing the folder.

You can add Offline help in multiple languages if required by following the same steps as above.

If your computer, or a mobile device you access ESET PROTECT Web Console from, does not have an

internet connection, you will need to change your setting in ESET PROTECT Web Console to force ESET

PROTECT Offline help to open by default (instead of Online Help). To do so, follow the instructions

below the table.

Supported Language Offline HTML Help

.zip

Offline HTML Help

.tar

English en-US.zip en-US.tar

Arabic ar-EG.zip ar-EG.tar

Chinese Simplified zh-CN.zip zh-CN.tar

Chinese Traditional zh-TW.zip zh-TW.tar

Croatian hr-HR.zip hr-HR.tar

Czech cs-CZ.zip cs-CZ.tar

French fr-FR.zip fr-FR.tar

French Canadian fr-CA.zip fr-CA.tar

8

Supported Language Offline HTML Help

.zip

Offline HTML Help

.tar

German de-DE.zip de-DE.tar

Greek el-GR.zip el-GR.tar

Italian it-IT.zip it-IT.tar

Japanese ja-JP.zip ja-JP.tar

Korean ko-KR.zip ko-KR.tar

Polish pl-PL.zip pl-PL.tar

Portuguese Brazilian pt-BR.zip pt-BR.tar

Russian ru-RU.zip ru-RU.tar

Spanish es-ES.zip es-ES.tar

Spanish Latin es-CL.zip es-CL.tar

Slovak sk-SK.zip sk-SK.tar

Turkish tr-TR.zip tr-TR.tar

Ukraininan uk-UA.zip uk-UA.tar

Force Offline help on Windows

1. Open C:\Program Files\Apache Software Foundation\[ Tomcat folder ]\webapps\era\WEB-

INF\classes\sk\eset\era\g2webconsole\server\modules\config\EraWebServerConfig.properties in a text editor.

2. Locate the line help_show_online=true, change this setting's value to false and save changes.

3. Restart the Tomcat service within services or via command line.

ESET PROTECT Offline help will open whenever you click the Help in the top right corner and click Current topic - Help. The respective help

window for the current page will be displayed.

Force Offline help on Linux

1. Open /usr/share/tomcat/webapps/era/WEB-

INF/classes/sk/eset/era/g2webconsole/server/modules/config/EraWebServerConfig.properties configuration file in a text editor (for

example nano).

2. Locate the line help_show_online=true, change this setting's value to false and save changes.

3. Stop the tomcat service, Run the tomcat stop command.

4. Start the tomcat service, Run the tomcat start command.

ESET PROTECT Offline help will open whenever you click the Help in the top right corner and click Current topic - Help. The respective help window for the

current page will be displayed.

New features in ESET PROTECT

Company view for MSP customers

MSP administrators can filter data in the Dashboard section per customer. In addition, there´s a new dedicated

menu section, Managed customers, where administrators can get an overview of all managed customers. MSP

administrators can now also filter report templates per customer when creating scheduled reports via the

Schedule reports task or a server task. Learn more

Grouping of detections

You can group detections by common attributes such as detection category, computer, severity, and more. This

makes it easier to navigate through the detections and find a specific one. Learn more