ESET Inspect On-Prem

ESET Inspect On-Prem is a comprehensive Endpoint Detection and Response system that includes features such as incident detection, incident management and response, data collection, indicators of compromise detection, anomaly detection, behavior detection and policy violations. For more information about ESET Inspect On-Prem, its installation and functions, see ESET Inspect On-Prem help.

ESET Inspect On-Prem configuration

ESET Inspect On-Prem requires ESET PROTECT On-Prem to:

•Create an ESET Inspect On-Prem user with proper permissions. ESET PROTECT On-Prem contains the pre-defined permission sets for ESET Inspect On-Prem users. A Web Console user requires Read permission or higher for either Access to ESET Inspect or ESET Inspect User.

•Create certificates used during ESET Inspect Server Installation.

•Activate ESET Inspect On-Prem on a device connected to ESET PROTECT On-Prem. You need an ESET Inspect On-Prem license to activate ESET Inspect On-Prem.

Deploy ESET Inspect Connector to managed computers

Click Computers > click a computer or select more computers and click Computer > Solutions > Enable ESET Inspect On-Prem to deploy ESET Inspect Connector to the managed Windows/Linux/macOS computers.

Reporting of ESET Inspect On-Prem detections in ESET PROTECT On-Prem

If you add a device that runs the ESET Inspect Connector (properly configured and connected to the ESET Inspect Server) to ESET PROTECT On-Prem, ESET Inspect On-Prem reports the discovered detections in the ESET PROTECT On-Prem Detections section. You can filter these detections by selecting the ESET Inspect detection category.

Another detection type reported by ESET Inspect On-Prem are Blocked files - the blocked attempts to launch executables blocked in ESET Inspect On-Prem (blocked hashes).

Managing ESET Inspect detections in ESET PROTECT On-Prem

Click the detection and select Investigate (Inspect) to see detection details in the ESET Inspect On-Prem Web Console.

Integration of ESET Inspect On-Prem detections in the ESET PROTECT Web Console enables you to manage ESET Inspect detections directly from the ESET PROTECT Web Console without opening the ESET Inspect On-Prem Web Console. For example, if you mark the detection as resolved in the ESET PROTECT Web Console, it is also resolved in the ESET Inspect On-Prem Web Console and vice versa.