Check real-time protection

To verify that real-time protection is working and detecting viruses, use the test file. This test file is a special, harmless file detectable by all antivirus programs. The file was created by the EICAR institute (European Institute for Computer Antivirus Research) to test the functionality of antivirus programs.

To check the status of real-time protection without using ESET Security Management Center, connect to the client computer remotely using the Terminal utility and issue the following command:

/Applications/.esets/Contents/MacOS/esets_daemon --status

The status of the real-time scanner is displayed as RTPStatus=Enabled or RTPStatus=Disabled.

The output of the Terminal bash includes the following statuses:

Version of  ESET Endpoint Security for macOS installed on the client computer

Date and version of the detection engine

Path to the update server


Terminal usage

The use of the Terminal utility is recommended for advanced users only.