How to automate ESET PROTECT On-Prem

By using techniques like the example shown below, you can automate a variety of actions, from product and OS updates, scanning, and automatic activations of newly added products with preselected licenses, to solving sophisticated incidents.

Automatically deploy ESET products on newly connected Windows desktops

This example should be performed only on clients without third-party security software or ESET security software from home segment (e.g. ESET Smart Security). The installation of ESET products on clients with third-party security software is not recommended. You can use ESET AV Remover to remove other antivirus programs from your computer.

1.Create a Dynamic Group, called Without security product.

a.Make it a child group of the pre-defined group Windows computers > Windows (desktops).

b.Click New Template.

c.Add the following rule: Computer > Managed products mask.

d.As operator select not equal.

e.Select the mask ESET protected: Desktop

f.Click Finish to save the group.

2.Navigate to Tasks > New > Client Task.

a.Select Software Install from the Task drop-down menu and type the name of the task a Name.

b.Choose the package in the Settings section and set other parameters if needed.

c.Click Finish > Create Trigger.

d.In the Target section, click Add Groups and select Without security product.

e.In the Trigger section, select Joined Dynamic Group Trigger.

f.Click Finish to save the task and the trigger.

This task will be executed on clients connected to the dynamic group since this moment. You will need to execute this task manually on clients which were in the dynamic group before the task was created.

Enforce location-based policy

1.Create a Dynamic Group called Subnetwork 120.

a.Make it a child group of the All group.

b.Click New Template.

c.Add rule: Network IP addresses > IP subnetwork.

d.As operator select equal.

e.Type the subnetwork you want to filter, for example, 10.1.120.0 (the last number has to be 0 to filter all the IP addresses from the 10.1.120. subnetwork).

f.Click Finish to save the group.

2.Navigate to Policies.

a.Click New policy and give the policy a Name.

b.In the Settings section, select ESET Management Agent.

c.Make the policy change; for example, change the Connection interval to 5 minutes.

d.In the Assign section, click Assign and select the check box next to your group Subnetwork 120 and click OK to confirm.

e.Click Finish to save the policy.

This policy will be applied on clients connected to the dynamic group since this moment.

See policy removal rules to verify what happens to the applied policy settings when the client machine leaves the dynamic group (conditions matching the dynamic group membership are not valid anymore).

See other examples of Dynamic Group Templates.

˄˅