Differences between ESET Secure Authentication On-Prem and ESET Secure Authentication
ESET Secure Authentication (ESA) is available in two deployment models: On-Premises and Cloud. Both provide strong multi-factor authentication (MFA) capabilities, but they differ in infrastructure requirements, management approach, and maintenance responsibilities.
This comparison helps you decide which solution best fits your organization's needs by highlighting the key differences between ESA On-Prem and ESA.
Comparison Table
General difference |
ESET Secure Authentication On-Prem |
ESET Secure Authentication |
|---|---|---|
Architecture |
Web Console hosted on-premises, with a single All-in-One installer for all components. |
Cloud console managed by ESET offers separate installers for components and a Live Installer for easy deployment. |
Hosting |
Installed and managed on your own servers (physical or virtual). |
ESET core hosted by ESET in the Cloud. Meets security requirements and best practices. See ESET Compliance & Certifications. |
Deployment |
Manual installation of the Authentication Server, plugins, and components. |
Setup is faster and simpler, with live installers at hand, and a streamlined cloud-based setup. |
Management Console |
The Web Console, hosted on-premises, requires certificate configuration. |
Cloud console managed by ESET is accessible via ESET PROTECT Hub. |
Directory Integration |
Full AD/LDAP sync with Organisational Unit filtering and scheduling. |
AD/LDAP sync is available via the sync agent component installed on the endpoint. |
Maintenance |
Your IT team handles updates, backups, and server health. |
ESET manages all updates and maintenance with zero infrastructure overhead. |
Certificates |
Certificates are generated and stored locally. |
Certificate management is handled automatically by ESET. |
Migration |
Requires uninstalling on-premises components and deploying cloud installers. |
Simple activation and enrollment via ESET PROTECT Hub. |
Multi-tenancy |
Not supported. |
Supported for MSPs (after migration to ESET PROTECT Hub). |
RADIUS Client Types |
Supports clients who do not validate the first factor. |
Not supported for such clients. |
Sites |
Supported for grouping and management. |
Not supported in Cloud. |
Log retention |
Unlimited (depends on local storage). |
30-day retention. Manual export recommended for longer history. |
ESA: Ideal for businesses seeking simplicity, reduced maintenance, multi-tenancy for MSPs, and centralized management—but note limitations (no Sites, restricted RADIUS client types, 30-day log retention).
ESA On-Prem: Ideal for organizations requiring full control, offline capabilities, and custom configurations.
|
Both ESA On-Prem and ESA use the same subscription—no need to purchase a separate "cloud" subscription. |
