hmLoadTopic({
hmKeywords:"",
hmTitle:"Settings",
hmDescription:"In the Settings section, you can configure specific settings for the ESET PROTECT Server. These settings are similar to Policies, but they are applied directly on the ESET...",
hmPrevLink:"audit_log.html",
hmNextLink:"advanced_security.html",
hmParentLink:"working_with_era.html",
hmBreadCrumbs:"<a href=\"using.html\">Using ESET PROTECT On-Prem<\/a> &gt; <a href=\"working_with_era.html\">ESET PROTECT On-Prem Main Menu<\/a> &gt; More",
hmTitlePath:"Using ESET PROTECT On-Prem > ESET PROTECT On-Prem Main Menu > More > Settings",
hmHeader:"<h1 class=\"p_Heading1\"><span class=\"f_Heading1\">Settings<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_Normal\">In the <span class=\"f_UI\">Settings<\/span> section, you can configure specific settings for the ESET PROTECT Server. These settings are similar to Policies, but they are applied directly on the ESET PROTECT Server.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Connection<\/span><\/h2>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\"><a href=\"https:\/\/support.eset.com\/kb7729\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">Restart<\/a> the ESET PROTECT Server service for changes in the <span class=\"f_UI\">Connection<\/span> section to take effect.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Server port<\/span>—This is the port for the connection between the ESET PROTECT Server and Agent(s). A change of the port may require changes in firewall settings. The default value is 2222.<\/p>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Web Console port<\/span>—Port for the connection between the ESET PROTECT Web Console and the ESET PROTECT Server. The default value is 2223. If you change the port, you may need to change firewall settings.<\/p>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Advanced security<\/span>—This setting enables <a href=\"advanced_security.html\" class=\"topiclink\">advanced security<\/a> of network communication of the ESET PROTECT components. Advanced security is enabled by default.<\/p>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Certificate<\/span>—Here you can manage ESET PROTECT Server certificates. Click <a href=\"set_new_era_server_certificate.html\" class=\"topiclink\">Select existing certificate<\/a> and select the certificate for the ESET PROTECT Server. Click <span class=\"f_UI\">Upload custom certificate<\/span> to upload a custom certificate. For more information, see <a href=\"admin_cert_peers.html\" class=\"topiclink\">Peer Certificates<\/a>.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><span class=\"f_Heading2\">Updates<\/span><\/h2>\n\r<p class=\"p_Normal\">Select the interval at which updates will be received. You can select:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Update server at a regular interval<\/span><span class=\"f_NormalList\">—The default value is six hours.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Update server at intervals specified by a CRON expression<\/span>—Configure the update interval by using a <a href=\"cron_expression.html\" class=\"topiclink\">CRON expression<\/a>.<\/p>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Update server<\/span>—Update server from which the ESET PROTECT Server receives updates for ESET application versions and ESET PROTECT components. The default value is AUTOSELECT. To update ESET PROTECT On-Prem 13.1 from a mirror (<a href=\"https:\/\/help.eset.com\/getHelp?product=protect_install&amp;version=13.1&amp;lang=en-US&amp;topic=mirror_tool_windows\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">Mirror tool<\/a>), set the full address of the <span class=\"f_CodeHighlighted\">era6<\/span> update folder (according to your HTTP server root location). For example: <span class=\"f_CodeHighlighted\">http:\/\/your_server_address\/mirror\/eset_upd\/era6<\/span><\/p>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Update type<\/span>—Select the type of ESET PROTECT Server module updates you want to receive. You can find the current version of installed ESET PROTECT Server modules in <span class=\"f_UI\">Help<\/span> &gt; <span class=\"f_UI\"><a href=\"about.html\" class=\"topiclink\">About<\/a><\/span>.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small_no_header\" >\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:25%;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">Regular update<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:75%;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ESET PROTECT Server module updates will automatically be downloaded from the ESET server with the least network traffic. Default setting.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small_no_header\">\n\r<td class=\"Table_small_no_header\" style=\"width:25%; background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">Pre-release update<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small_no_header\" style=\"width:75%; background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">These updates have gone through comprehensive internal testing and will be available to the general public soon. You can benefit from enabling pre-release updates by having access to the latest updates for ESET PROTECT Server modules. Pre-release updates may help resolve specific issues with ESET PROTECT Server. However, pre-release updates may be unstable and <\/span><span class=\"f_NormalTableRed\">should not<\/span><span class=\"f_NormalTable\"> be used on production servers where maximum availability and stability are required. Pre-release updates are available only when AUTOSELECT is defined in the <\/span><span class=\"f_UI\">Update server<\/span><span class=\"f_NormalTable\"> parameter.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"advanced_settings\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Advanced<\/span><\/h2>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Quarantined files upload<\/span>—Provide the path to the ESET PROTECT Server directory (<span class=\"f_UI\">Upload path<\/span>) where the <a href=\"admin_quarantine.html#hash\" class=\"topiclink\">exported quarantined files<\/a> will be saved. Ensure the path is valid and there is enough free space on the server.<\/p>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">HTTP Proxy<\/span>—Use a proxy server to facilitate internet traffic to clients on your network:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Specify the Proxy settings (<\/span><span class=\"f_UI\">Host<\/span><span class=\"f_NormalList\">, <\/span><span class=\"f_UI\">Port<\/span><span class=\"f_NormalList\">, <\/span><span class=\"f_UI\">Username<\/span><span class=\"f_NormalList\"> and <\/span><span class=\"f_UI\">Password<\/span><span class=\"f_NormalList\">). <\/span>The <span class=\"f_UI\">Host<\/span> field is the address of the machine running the <a href=\"https:\/\/help.eset.com\/getHelp?product=protect_install&amp;version=13.1&amp;lang=en-US&amp;topic=arch_proxy\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">HTTP Proxy<\/a>.<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">If you install ESET PROTECT On-Prem using the <a href=\"https:\/\/help.eset.com\/getHelp?product=protect_install&amp;version=13.1&amp;lang=en-US&amp;topic=step_by_step\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">All-in-one installer<\/a>, <a href=\"https:\/\/help.eset.com\/getHelp?product=protect_install&amp;version=13.1&amp;lang=en-US&amp;topic=arch_proxy\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">HTTP proxy (ESET Bridge)<\/a> is installed and enabled by default.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>ESET Bridge uses port 3128 by default. You can set a different port if needed. Ensure to set the same port also in the HTTP Proxy configuration (see <a href=\"https:\/\/help.eset.com\/getHelp?product=ebe&amp;version=latest&amp;lang=en-US&amp;topic=bridge_policy\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">ESET Bridge Policy<\/a>).<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">The <\/span><span class=\"f_UI\">Use direct connection if HTTP proxy is not available<\/span><span class=\"f_NormalList\"> toggle is pre-selected as a fallback.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>HTTP Proxy settings are not applied for communication with <a href=\"admin_ar_two_factor_authentification.html\" class=\"topiclink\">Two-Factor Authentication<\/a> servers.<\/p>\n\r<p class=\"p_Normal\">The ESET PROTECT Server can run instant replication of the ESET Management Agent on a client machine via <a href=\"epns.html\" class=\"topiclink\">EPNS<\/a> (Wake-Up Calls). This is useful when you do not want to wait for the regular interval when the ESET Management Agent connects to the ESET PROTECT Server. For example, when you want a <a href=\"admin_ct.html\" class=\"topiclink\">Task<\/a> to be run immediately on client(s) or if you want a <a href=\"admin_pol.html\" class=\"topiclink\">Policy<\/a> to be applied right away.<\/p>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Wake on LAN<\/span>—Set up <span class=\"f_UI\">Multicast Addresses<\/span> if you want to send Wake on LAN calls to one or more IP addresses.<\/p>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">SMTP server<\/span>—Use an <a href=\"smtp_server.html\" class=\"topiclink\">SMTP Server<\/a> to let the ESET PROTECT Server send email messages (for example, email notifications or reports). Specify details of your SMTP server.<\/p>\n\r<p class=\"p_Normal\"><a id=\"ad\" class=\"hmanchor\"><\/a><span class=\"f_UI\">Active Directory<\/span>—You can pre-set your AD settings. ESET PROTECT On-Prem uses your credentials by default in Active Directory synchronization tasks (<a href=\"st_user_synchronization.html\" class=\"topiclink\">user synchronization<\/a>, <a href=\"sg_server_tasks_synch.html\" class=\"topiclink\">static group synchronization<\/a>). When the related fields are left blank in the task configuration, ESET PROTECT On-Prem uses the pre-set credentials. Use a read-only AD user. ESET PROTECT On-Prem does not make any changes to the AD structure.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Note\" title=\"Note\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>If the ESET PROTECT Server runs on Linux (or a Virtual Appliance), you need to have a <span class=\"f_Path\">Kerberos<\/span> configuration file set up properly. You can set up <span class=\"f_Path\">Kerberos<\/span> to synchronize with multiple domains.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>If the ESET PROTECT Server runs on a Windows machine connected to a domain, only the <span class=\"f_UI\">Host<\/span> field is necessary. You can skip all the other Active Directory configuration steps below. Synchronization among more domains is possible if domains have established trust.<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Host<\/span><span class=\"f_NormalList\">—<\/span>Type the Server name or IP address of your domain controller.<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Username<\/span><span class=\"f_NormalList\">—<\/span>Type the Username for your domain controller in the following format:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 26px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span><span class=\"f_CodeHighlighted\">DOMAIN\\username<\/span><span class=\"f_NormalList\"> (ESET PROTECT Server running on Windows)<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 45px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span><span class=\"f_CodeHighlighted\">username@FULL.DOMAIN.NAME<\/span> or <span class=\"f_CodeHighlighted\">username<\/span> (ESET PROTECT Server running on Linux).<\/p>\n\r<div style=\"text-align: left; text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding: 0 0 0 0; margin: 0 0 0 19px;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">Type the domain in capital letters to properly authenticate queries to an Active Directory server.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Password<\/span>—Type the password used to log on to your domain controller.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Root container<\/span>—Type the full identifier of an AD container, for example: <span class=\"f_CodeHighlighted\">CN=John,CN=Users,DC=Corp<\/span>. It serves as a pre-set <span class=\"f_UI\">Distinguished Name<\/span>. Copy and paste the value from a server task to ensure accuracy (copy the value from the <span class=\"f_UI\">Distinguished Name<\/span> field when it is selected).<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">ESET PROTECT Server on Windows uses the encrypted LDAPS (LDAP over SSL) protocol by default for all Active Directory (AD) connections. You can also <a href=\"https:\/\/help.eset.com\/getHelp?product=protect_deploy_va&amp;version=13.1&amp;lang=en-US&amp;topic=configure_ldaps_connection_to_a_domain\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">configure LDAPS on ESET PROTECT Virtual Appliance<\/a>.<\/p>\n\r<p class=\"p_Normal\">For a successful AD connection over LDAPS, configure the following:<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">1.<\/span>The domain controller must have installed a machine certificate. To issue a certificate for your domain controller, follow the steps below:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">a)<\/span><span class=\"f_NormalList\">Open the <\/span><span class=\"f_UI\">Server Manager<\/span><span class=\"f_NormalList\">, click <\/span><span class=\"f_UI\">Manage<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">Add Roles and Features<\/span><span class=\"f_NormalList\"> and install the <\/span><span class=\"f_UI\">Active Directory Certificate Services<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">Certification Authority<\/span><span class=\"f_NormalList\">. A new Certification Authority will be created in <\/span><span class=\"f_UI\">Trusted Root Certification Authorities<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">b)<\/span><span class=\"f_NormalList\">Click the notification (yellow triangle) in the <\/span><span class=\"f_UI\">Server Manager<\/span><span class=\"f_NormalList\"> and <\/span><span class=\"f_UI\">Configure Active Directory Certificate Services on the destination server<\/span><span class=\"f_NormalList\">. In the <\/span><span class=\"f_UI\">Role Services<\/span><span class=\"f_NormalList\">, select <\/span><span class=\"f_UI\">Certification Authority<\/span><span class=\"f_NormalList\">. Finish the configuration by clicking <\/span><span class=\"f_UI\">Next<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">c)<\/span><span class=\"f_NormalList\">Navigate to <\/span><span class=\"f_UI\">Start<\/span><span class=\"f_NormalList\"> &gt; type <\/span><span class=\"f_CodeHighlighted\">certlm.msc<\/span><span class=\"f_NormalList\"> and press <\/span><span class=\"f_UI\">Enter<\/span><span class=\"f_NormalList\"> to run the <\/span><span class=\"f_UI\">Certificates<\/span><span class=\"f_NormalList\"> Microsoft Management Console snap-in &gt; <\/span><span class=\"f_UI\">Certificates—Local Computer<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">Personal<\/span><span class=\"f_NormalList\"> &gt; right-click the empty pane &gt; <\/span><span class=\"f_UI\">All Tasks<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">Request New Certificate<\/span><span class=\"f_NormalList\"> &gt; <\/span><span class=\"f_UI\">Enroll Domain Controller<\/span><span class=\"f_NormalList\"> role.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">d)<\/span><span class=\"f_NormalList\">Verify that the issued certificate contains the domain controller\'s <\/span><span class=\"f_NormalList\">FQDN<\/span><span class=\"f_NormalList\">.<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 20px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">e)<\/span><span class=\"f_NormalList\">On your ESET PROTECT server, import the CA you generated to the certificate store (using <\/span><span class=\"f_CodeHighlighted\">certlm.msc<\/span><span class=\"f_NormalList\"> tool) &gt; <\/span><span class=\"f_UI\">Local Machine<\/span><span class=\"f_NormalList\"> &gt; the <\/span><span class=\"f_UI\">Trusted Root Certification Authorities<\/span><span class=\"f_NormalList\"> folder.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 39px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"display:inline-block;width:20px;margin-left:-20px\">f)<\/span>Restart the ESET PROTECT server computer.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 20px; margin-left: 0;\"><span class=\"f_Normal\" style=\"display:inline-block;width:20px;margin-left:-20px\">2.<\/span>When providing connection settings to the AD server, type the FQDN of the domain controller (as provided in the domain controller certificate) in the <span class=\"f_UI\">Server<\/span> or <span class=\"f_UI\">Host<\/span> field. An IP address is no longer sufficient for LDAPS.<\/p>\n\r<p class=\"p_Normal\">To enable fallback to the LDAP protocol, select the check box <span class=\"f_UI\">Use LDAP instead of Active Directory<\/span> in the <a href=\"sg_server_tasks_ad.html\" class=\"topiclink\">Static Group Synchronization<\/a> or <a href=\"st_user_synchronization.html\" class=\"topiclink\">User Synchronization<\/a> task.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Static Groups<\/span> &gt; <span class=\"f_UI\">Automatically pair found computers<\/span>—Enable <a href=\"automatically_pair_found_computers.html\" class=\"topiclink\">automatic pairing of found computers<\/a> to computers already present in Static Groups. Pairing works with the reported hostname from the ESET Management Agent and if it cannot be trusted, it should be disabled. If pairing fails, the computer moves to the <span class=\"f_UI\">Lost &amp; found<\/span> group.<\/p>\n\r<p class=\"p_Normal\"><a id=\"repository\" class=\"hmanchor\"><\/a><span class=\"f_UI\">Repository<\/span>—Location of the repository server where all installation files are stored.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>The default ESET repository is set to <span class=\"f_UI\">AUTOSELECT<\/span> (it points to: <span class=\"f_Path\">http:\/\/repository.eset.com\/v1<\/span>). It automatically determines the repository server with the best connection based on the geographic location (IP address) of the ESET PROTECT Server (using a CDN—<a href=\"https:\/\/www.webopedia.com\/definitions\/cdn\/\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">Content Delivery Network<\/a>). Therefore, you do not need to change the repository settings.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Optionally, you can set a repository that uses only ESET servers: <span class=\"f_Path\">http:\/\/repositorynocdn.eset.com\/v1<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_Red\">Never use an IP address to access the ESET repository.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>You can create and use an <a href=\"https:\/\/help.eset.com\/getHelp?product=protect_install&amp;version=13.1&amp;lang=en-US&amp;topic=offline-repository\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">offline repository<\/a>.<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Participate in product improvement program<\/span>—Enable or disable the submission of crash reports and anonymous telemetry data to ESET (operating system version and type, ESET application version and other application-specific information).<\/p>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Trace log verbosity<\/span>—Set the log verbosity to determine the level of information that will be collected and logged, from <span class=\"f_UI\">Trace<\/span> (informational) to <span class=\"f_UI\">Fatal<\/span> (most important critical information).<\/p>\n\r<p class=\"p_Normal\">You can find the latest ESET PROTECT Server log files here:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_Path\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalList\">Windows: <\/span><span class=\"f_Path\">C:\\ProgramData\\ESET\\RemoteAdministrator\\Server\\EraServerApplicationData\\Logs<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_Path\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Linux: <span class=\"f_Path\">\/var\/log\/eset\/RemoteAdministrator\/Server\/<\/span><\/p>\n\r<p class=\"p_Normal\">You can set up <a href=\"admin_server_settings_export_to_syslog.html\" class=\"topiclink\">exporting logs to Syslog<\/a>.<\/p>\n\r<p class=\"p_Normal\"><a id=\"db_cleanup\" class=\"hmanchor\"><\/a><span class=\"f_UI\">Database cleanup<\/span>—To prevent a database overload, you can use this option to regularly clean logs. The database cleanup automatically deletes these types of logs: SysInspector logs, Diagnostics logs, logs that are not collected anymore (logs from removed devices, logs from removed report templates). The database cleanup process runs every night at midnight by default. Changes to this setting take effect following the next cleanup. You can set the cleaning interval for each of these types of logs:<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Log type<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Example of a log type<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Detection logs<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Antivirus detections\" title=\"Antivirus detections\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_antivirus.png\"\/><span class=\"f_NormalTable\">Antivirus<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Blocked files\" title=\"Blocked files\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_blocked.png\"\/><span class=\"f_NormalTable\"> <a href=\"eset_inspect.html#blocked_files\" class=\"topiclink\">Blocked files<\/a><\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"ESET Inspect alerts\" title=\"ESET Inspect alerts\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_ei_alert.png\"\/><span class=\"f_NormalTable\"> <a href=\"eset_inspect.html\" class=\"topiclink\">ESET Inspect<\/a> Alerts<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Firewall detections\" title=\"Firewall detections\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_firewall.png\"\/><span class=\"f_NormalTable\"> Firewall<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"HIPS detections\" title=\"HIPS detections\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_hips.png\"\/><span class=\"f_NormalTable\"> HIPS<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Web Protection detections\" title=\"Web Protection detections\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_web_protection.png\"\/><span class=\"f_NormalTable\"> Web protection (filtered websites)<\/span><\/p><\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Management logs<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">Tasks<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">Triggers<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">Exported configuration<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">Enrollment<\/span><\/p><\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Audit logs<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\"><a href=\"audit_log.html\" class=\"topiclink\">Audit Log<\/a> and the <a href=\"reports_audit_log.html\" class=\"topiclink\">Audit log report<\/a>.<\/span><\/p><\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Monitoring logs<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">Device Control<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">Web Control<\/span><\/p>\n\r<p class=\"p_NormalTable\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 8px;\"><span class=\"f_NormalTable\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_NormalTable\">Logged users<\/span><\/p><\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\">Diagnostic logs are cleaned every day. The user cannot change the cleaning interval.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">During <a href=\"admin_server_settings.html#db_cleanup\" class=\"topiclink\">database cleanup<\/a>, items in <a href=\"threats.html\" class=\"topiclink\">Detections<\/a> corresponding to the cleaned Incident logs are deleted as well (regardless of detection status). By default, the cleanup period for Incident logs (and Detections) is set to 6 months. You can change the interval in <span class=\"f_UI\">More<\/span> &gt; <a href=\"admin_server_settings.html#db_cleanup\" class=\"topiclink\">Settings<\/a>.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"api\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">API<\/span><\/h2>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">REST API<\/span>—Enable the toggle to enable the <a href=\"rest_api.html\" class=\"topiclink\">REST server<\/a>. The REST server runs locally on the ESET PROTECT Server.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 13px;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">The REST server running on <a href=\"https:\/\/help.eset.com\/getHelp?product=protect_install&amp;version=13.1&amp;lang=en-US&amp;topic=linux\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">Linux<\/a> requires the <span class=\"f_CodeHighlighted\">glibc<\/span> library version 2.32.0 and later. You can verify the installed <span class=\"f_CodeHighlighted\">glibc<\/span> version by running this terminal command: <span class=\"f_CodeHighlighted\">ldd --version<\/span>.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Public port<\/span> (default: 9443)—The port opened for REST API clients. Changing the port requires restarting the ESET PROTECT Server.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Internal port<\/span> (default: 2224)—The port used internally by ESET PROTECT Server to communicate with the REST API component that provides the public port. Change this port only if required by your network configuration. Changing the port requires restarting the ESET PROTECT Server.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Certificate<\/span>—Select the certificate used for communication between the REST API client and the REST server. You can select the <span class=\"f_UI\">Server certificate<\/span> by clicking <span class=\"f_UI\">Select existing certificate<\/span>. However, we recommend using a <a href=\"certificates_certificate_era.html\" class=\"topiclink\">dedicated certificate<\/a> for the REST server—click <span class=\"f_UI\">Upload custom certificate<\/span>.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 13px;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>The REST server does not accept a SHA-1 certificate. Ensure that <a href=\"advanced_security.html\" class=\"topiclink\">Advanced Security<\/a> is enabled, and that the certificate supports SHA-256.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>For proper operation of the API on an ESET PROTECT Server running on Linux, the <span class=\"f_UI\">Common name<\/span>\/<span class=\"f_UI\">Host<\/span> field in the certificate must contain the actual hostname and cannot use a wildcard character.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><a href=\"https:\/\/support.eset.com\/kb7729\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">Restart<\/a> the ESET PROTECT Server service for changes in the API <span class=\"f_UI\">Public port<\/span>, <span class=\"f_UI\">Internal port<\/span> or <span class=\"f_UI\">Certificate<\/span> to take effect.<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Enable Swagger UI<\/span>—The enabled built-in Swagger UI is accessible at <a href=\"https:\/\/localhost:9443\/swagger\" target=\"_blank\" onclick=\"return HMTrackTopiclink(this);\" class=\"weblink\">https:\/\/localhost:9443\/swagger<\/a>. Replace <span class=\"f_CodeHighlighted\">localhost<\/span> with the server name or IP address if needed. <a href=\"using_api.html\" class=\"topiclink\">What is Swagger UI?<\/a> Swagger UI files are located in:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_Path\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span><span class=\"f_NormalList\">Windows: <\/span><span class=\"f_Path\">C:\\ProgramData\\ESET\\RemoteAdministrator\\Server\\EraServerApplicationData\\Data\\swagger-ui<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_Path\" style=\"font-family: \'Courier New\';display:inline-block;width:13px;margin-left:-13px\">o<\/span>Linux: <span class=\"f_Path\">\/var\/opt\/eset\/RemoteAdministrator\/Server\/swagger-ui<\/span><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Important_heading\" style=\"page-break-after: avoid;\"><span class=\"f_Important_heading\">Additional REST API requirements<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Assign the API users the <span class=\"f_UI\">API<\/span> <a href=\"admin_ar_permissions_list.html\" class=\"topiclink\">permission set<\/a>. The Administrator account cannot use the API.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>Ensure to open the API ports in your local firewall.<\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 13px; margin-left: 0;\"><span class=\"f_Normal\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span>To use the REST API, the peer certificate for the ESET PROTECT Server (whether used as the REST server certificate or not) must contain <span class=\"f_CodeHighlighted\">localhost<\/span> in the <span class=\"f_UI\">Common name<\/span>\/<span class=\"f_UI\">Host<\/span> field. If the peer (Server) certificate does not meet this requirement, <a href=\"certificates_certificate_era.html\" class=\"topiclink\">create a new certificate<\/a> and <a href=\"set_new_era_server_certificate.html\" class=\"topiclink\">change the Server certificate<\/a>.<\/p><\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"customization\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Customization<\/span><\/h2>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Company logo<\/span>—You can add a custom logo to the ESET PROTECT Web Console, the reports generated via <a href=\"server_tasks_generate_report.html\" class=\"topiclink\">Server Task<\/a> and email <a href=\"admin_ntf_distribution.html\" class=\"topiclink\">notifications<\/a>.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_small\" >\n\r<thead>\n\r<tr class=\"Table_small\">\n\r<th class=\"Table_small\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">&nbsp;<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Web Console<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Reports<\/span><\/p>\n\r<\/th>\n\r<th class=\"Table_small\" scope=\"col\"><p class=\"p_Head_row\"><span class=\"f_Head_row\">Notifications<\/span><\/p>\n\r<\/th>\n\r<\/tr>\n\r<\/thead>\n\r<tbody>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">None<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Basic design, no custom logo<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ESET PROTECT On-Prem logo on the side of the footer.<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">ESET PROTECT On-Prem logo on the side of the header.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">Co-branding<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Custom logo for Web Console<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">A custom logo in the report footer—ESET PROTECT On-Prem logo and your logo.<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\" style=\"background-color:#F4F5F4;\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">A custom logo in the notification header—ESET PROTECT On-Prem logo and your logo.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<tr class=\"Table_small\">\n\r<td class=\"Table_small\"><p class=\"p_NormalTableUI\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTableUI\">White-labeling (requires MSP subscription)<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">Custom logo for Web Console<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">A custom logo in the report footer—no ESET PROTECT On-Prem logo, only your logo.<\/span><\/p>\n\r<\/td>\n\r<td class=\"Table_small\"><p class=\"p_NormalTable\" style=\"page-break-inside: avoid; page-break-after: avoid;\"><span class=\"f_NormalTable\">A custom logo in the notification header. Next to it is <\/span><span class=\"f_NormalTableUI\">Powered by ESET PROTECT On-Prem<\/span><span class=\"f_NormalTable\">.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/tbody>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\">Select one of the custom logo options &gt; click <span class=\"f_UI\">Upload<\/span> to select a company logo:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Dark background logo (Web Console header)<\/span><span class=\"f_NormalList\">—This logo will be displayed in the top corner of Web Console.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Light background logo<\/span>—This logo will be displayed in the header (for MSP subscription owners) or footer (co-branding setting) of reports generated via <a href=\"server_tasks_generate_report.html\" class=\"topiclink\">Server Task<\/a> and in the header of email <a href=\"admin_ntf_distribution.html\" class=\"topiclink\">notifications<\/a>.<\/p>\n\r<p class=\"p_Normal\">Click <img alt=\"Download\" title=\"Download\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/download_default.png\"\/> to download the current logo. Click <img alt=\"Remove\" title=\"Remove\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/remove_default.png\"\/> to remove the current logo.<\/p>\n\r<p class=\"p_UI\"><span class=\"f_UI\">Reports and Notifications<\/span><\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Customize reports<\/span><span class=\"f_NormalList\">—Enable this option to use the selected logo in reports and\/or to add a footer text.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><span class=\"f_UI\">Report footer text<\/span>—Type the text that will be added to the bottom corner of <a href=\"server_tasks_generate_report.html\" class=\"topiclink\">reports<\/a> generated in PDF format.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_important\" >\n\r<tr class=\"Table_important\">\n\r<td class=\"Table_important\" style=\"width:4px; background-color:#E9A514;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_important\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Important\" title=\"Important\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/important.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_important\"><p class=\"p_Normal\">A custom logo cannot be used together with custom footer text. The logo has the same position as the footer text. If the logo and the footer are used simultaneously, only the logo will be visible. When using the <span class=\"f_UI\">White-labeling<\/span> setting, the custom logo will appear in the upper corner of the report; a smaller <span class=\"f_UI\">powered by ESET<\/span> logo is placed in the bottom corner, instead of the footer text.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Badges<\/span>—Disable the <span class=\"f_UI\">Enable badges in the main menu for all users<\/span> toggle to hide the <a href=\"about_web_console.html#badges\" class=\"topiclink\">badges<\/a> in the main menu.<\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"export\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Export<\/span><\/h2>\n\r<p class=\"p_Normal\">In the <span class=\"f_UI\">Export<\/span> section, you can see and edit the configured <a href=\"admin_server_settings_export_to_syslog.html\" class=\"topiclink\">Syslog servers<\/a>.<\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 10px 0;\"><table class=\"Table_note\" >\n\r<tr class=\"Table_note\">\n\r<td class=\"Table_note\" style=\"width:4px; background-color:#3DAAE1;\"><br \/>\n\r<\/td>\n\r<td class=\"Table_note\" style=\"width:20px;\"><p class=\"p_Normal\"><img alt=\"Note\" title=\"Note\" width=\"20\" height=\"20\" style=\"margin:2px 0 0 0;width:20px;height:20px;border:none\" src=\".\/images\/note.svg\"\/><\/p>\n\r<\/td>\n\r<td class=\"Table_note\"><p class=\"p_Normal\">You can configure up to five Syslog servers.<\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_Normal\"><span class=\"f_UI\">Add Syslog server<\/span>—You can configure ESET PROTECT On-Prem to send notifications and event messages to your <a href=\"admin_server_settings_export_to_syslog.html\" class=\"topiclink\">Syslog server<\/a>. Also, you can export logs from a client computer\'s ESET application and send them to the Syslog server.<\/p>\n\r<p class=\"p_Normal\">Click the three dots <img alt=\"More\" title=\"More\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/icon_more_vertical.png\"\/> icon next to the configured Syslog server and select:<\/p>\n\r<p class=\"p_NormalList\" style=\"text-indent: 0; page-break-inside: avoid; page-break-after: avoid; padding-left: 13px; margin-left: 19px;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Edit.\" title=\"Edit.\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/edit_default.png\"\/><span class=\"f_NormalList\"> <\/span><span class=\"f_UI\">Edit<\/span><span class=\"f_NormalList\">—Edit the selected Syslog server configuration.<\/span><\/p>\n\r<p class=\"p_Normal\" style=\"text-indent: 0; padding-left: 32px; margin-left: 0;\"><span class=\"f_NormalList\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:13px;margin-left:-13px\">&#8226;<\/span><img alt=\"Delete.\" title=\"Delete.\" width=\"16\" height=\"16\" style=\"margin:0;width:16px;height:16px;border:none\" src=\".\/images\/delete_default.png\"\/> <span class=\"f_UI\">Delete<\/span>—Remove the selected Syslog server configuration.<\/p>"
})
