ESET PROTECT On-Prem

Offline | Go online

ESET PROTECT On-Prem – Table of Contents

# ESET Inspect On-Prem

Copy current article URL Share via email

ESET Inspect On-Prem is a comprehensive Endpoint Detection and Response system that includes features such as incident detection, incident management and response, data collection, indicators of compromise detection, anomaly detection, behavior detection and policy violations. For more information about ESET Inspect On-Prem, its installation and functions, see ESET Inspect On-Prem help.

## ESET Inspect On-Prem configuration

ESET Inspect On-Prem requires ESET PROTECT On-Prem to:

•Create an ESET Inspect On-Prem user with proper permissions. ESET PROTECT On-Prem contains the pre-defined permission sets for ESET Inspect On-Prem users. A Web Console user requires Read permission or higher for either Access to ESET Inspect or ESET Inspect User.

•Create certificates used during ESET Inspect Server Installation.

•Enable ESET Inspect On-Prem on a device connected to ESET PROTECT On-Prem. You need an ESET Inspect On-Prem subscription to enable ESET Inspect On-Prem.

|  | If you have upgraded the ESET PROTECT Server, restart the ESET Inspect Server service to ensure all the future changes in ESET PROTECT On-Prem (for example, permissions updates) reflect in ESET Inspect On-Prem.

## Deploy ESET Inspect Connector to managed computers

Click Computers > click a computer or select more computers and click Computer > Platform modules > Enable ESET Inspect On-Prem to deploy ESET Inspect Connector to the managed Windows/Linux/macOS computers. Alternatively, you can enable ESET Inspect On-Prem via the Module Activation client task.

## Reporting of ESET Inspect On-Prem detections in ESET PROTECT On-Prem

If you add a device that runs the ESET Inspect Connector (properly configured and connected to the ESET Inspect Server) to ESET PROTECT On-Prem, ESET Inspect On-Prem reports the discovered detections in the ESET PROTECT On-Prem Detections section. You can filter these detections by selecting the ESET Inspect detection category.

Another detection type reported by ESET Inspect On-Prem are Blocked files—the blocked attempts to launch executables blocked in ESET Inspect On-Prem (blocked hashes).

## Managing ESET Inspect detections in ESET PROTECT On-Prem

Click the detection and select Investigate (Inspect) to see detection details in the ESET Inspect Web Console.

|  | Ensure to use the supported web browsers and ESET security applications to enable management of ESET Inspect detections in the ESET PROTECT Web Console.

Integration of ESET Inspect On-Prem detections in the ESET PROTECT Web Console enables you to manage ESET Inspect detections directly from the ESET PROTECT Web Console without opening the ESET Inspect On-Prem Web Console. For example, if you mark the detection as resolved in the ESET PROTECT Web Console, it is also resolved in the ESET Inspect On-Prem Web Console and vice versa.

˄˅