ESET PRIVATE Scanning Solution – Table of Contents

AWS Marketplace Customer Deployment Options

ESET PRIVATE Scanning Solution supports deployment on Amazon ECS and Amazon EKS via AWS Marketplace. Customers manage their own container orchestration, networking, and infrastructure resilience. ESET is responsible only for providing the Scanner and Scanner Agent Docker images via subscription in the AWS Marketplace - no additional components, configurations, or managed services are provided.

The solution can be deployed in any AWS region supporting the listed services and components.

Supported scenarios

Single-instance testing setups (minimum viable deployment), covered in this online help article.

Production-grade multi-replica Scanner deployments with load balancing.

High-throughput environments with auto-scaling based on scan request volume.

Resilience

Multi-AZ or multi-region resilience depends entirely on customer EKS/ECS configuration—ESET provides only container images. Customers are responsible for adding components like Network Load Balancers (NLB) in front of Scanner services, VPC and network design, and fault tolerance. For network requirements, refer to EKS/ECS design documentation, as ESET container images require no unique requirements beyond basic design concepts.

Image Management

Customers should regularly monitor the AWS Marketplace for new ESET Docker image versions (including version details for Scanner and Scanner Agent images), which may include product enhancements, bug fixes, or security updates. If your subscription is active, you will be automatically notified once a new image version becomes available. ESET pushes updates to the Marketplace subscription repository, pulling the latest images ensures access to the most current Scanner functionality.

ESET Deployment Guide Scope

The following sections detail minimum viable deployments for EKS and ECS:

Single Cloud Scanner replica + Scanner Agent instance

Single-instance networking (default VPC, basic security groups)

Single-node setup (no multi-AZ/high availability)

Proof-of-concept connectivity check for functionality validation

ESET guides provide basic single-instance deployments (~30-60 minutes per setup) to demonstrate Scanner deployment and validation. For more complex production multi-element deployments, which require comprehensive VPC/subnet/SG/NACL architecture, multi-AZ resilience, or advanced networking beyond current guide scope, please contact ESET AWS Marketplace support or request a Private Offer.

Total time required for deployment the solution based on this guide varies by cluster complexity (regions, replica count, networking, resilience requirements).