ESET PROTECT for Managed Service Providers

Who is an MSP

The abbreviation MSP stands for "Managed Service Provider". MSP users usually provide IT services to their customers, for example, the management of security products (e. g.  ESET Endpoint Antivirus). MSP users have different requirements and ways of using ESET PROTECT than, for example, enterprise or SMB (small to medium-sized business) users. See the recommended deployment scenarios for MSP. For more information about the ESET MSP program, contact your local ESET partner or visit the ESET Managed Service Provider Program page.

The structure of entities in the MSP

msp_structure

Distributor - A distributor is an ESET partner and an MSP or MSP Manager partner.

MSP Manager - Manages multiple MSP companies. An MSP Manager can also have direct customers.

MSP - The target audience for this guide. An MSP provides services to its customers. For example, MSPs: remotely manages customers' computers, installs, and manages ESET products.

Managed MSP - Similar to MSP, however, Managed MSP is managed by an MSP Manager.

Customer - The end-user for ESET product licenses. The customer should not interact with ESET products.

MSP environment specifics

The MSP business model uses a different infrastructure setup than an enterprise or SMB. In the MSP environment, customers are typically located outside of MSP company network. The ESET PROTECT Server itself can be often hosted outside the MSP company too. ESET Management Agents need to have direct connectivity to the ESET PROTECT Server over public internet. The recommended setups of ESMC Server for MSPs are:

Hosted in a public cloud.

Hosted on an MSP's private cloud. (You need to open certain ports to make the ESET PROTECT visible from the Internet.)

Hosted in an MSP private network. (Use the HTTP Proxy to forwarding the connections from the internet, if the Server is not directly visible.)

 

Basic setups

Centralized setup - Customers access the ESET PROTECT Server via the internet. The ESET PROTECT Web Console may only be accessible from the MSP company network.

 

msp_infra1

 

Distributed setup - Customers access the ESET PROTECT Server via the internet. The ESET PROTECT Web Console is accessible to the MSP via the internet. If you make the Web Console accessible from the internet, make sure to enable 2FA.

 

msp_infra2

 

Migration from ERA 6.5 / ESMC 7.x

Users with imported EMA 2 account who are upgrading from:

ERA 6.5 or ESMC 7.0, the MSP tree is synchronized after you upgrade the ESET PROTECT. All your static and dynamic groups are unchanged, and there is also a new MSP tree set up for you. You do not have to use the new MSP tree. However, it is recommended to migrate (move) your devices and groups to the new MSP tree.

ESMC 7.1 or 7.2, the MSP tree and group structure are unaffected.