Detection engine

Detection engine guards against malicious system attacks by controlling files. For example, if an object classified as malware is detected, remediation will start. The detection engine can eliminate it by first blocking it and then cleaning, deleting or moving it to quarantine.

To configure the ESET Endpoint Antivirus for macOS remotely:

1.In ESET PROTECT On-Prem, click Policies > New policy and type a name for the policy.

2.Click Settings and select ESET Endpoint for macOS (V7+) from the drop-down menu.

3.Adjust the desired settings.

4.Click Continue > Assign and select the appropriate group of computers.

5.Click OK > Finish.

In Detection Engine, you can configure the following settings:

Basic

Scanner options

Enable detection of potentially unwanted applications – see Potentially unwanted applications in our glossary.

Enable detection of potentially unsafe applications – see Potentially unsafe applications in our glossary.

Enable detection of suspicious applications – Is a software compressed with packers or protectors frequently used to deter reverse engineering or to obfuscate the content of the executable (for example, to hide the presence of malware) by proprietary methods of compression and/or encryption.

This category includes: all unknown applications that are compressed with a packer or protector frequently used to compress malware.

Exclusions

Performance exclusions – By excluding paths (folders) from being scanned, the time needed to scan the file system for the presence of malware can be significantly decreased.

To create an exclusion:

1.Click Edit next to Performance exclusions.

2.Click Add and define the Path to be skipped by the scanner. Optionally add a comment for your information.

3.Click OK > Save to create the exclusion and close the dialog.