ESET PROTECT – Table of Contents

Integrations

In the Integrations section, you can manage integrations in multiple categories, including connections to external perimeters. These connections extend detection and response capabilities and help mitigate advanced threats beyond the endpoint.


Important

Extended Detection & Response integrations are currently available across all subscription plans.

Cloud Workload Protection integrations are available starting from ESET PROTECT Advanced tier.

You need Granted Functionality in Permission sets—Integrations & Marketplace.


Important

Starting with ESET Management Agent version 13, you can observe connection attempts to 169.254.169.254. This is a special link-local IP address commonly used by cloud providers to expose instance metadata services. These connection attempts are expected behavior, and ESET Management Agent introduced them as part of the cloud integration feature. If the endpoint is not running in a supported cloud environment, the requests do not affect its operation and can be safely ignored.

We recommend blocking pop-up ads and windows in the Safari browser.

arrow_down_businessBlock pop-up windows:

Integrations you see depend on your subscription plan.

Integrations

Marketplace—tiles with integrations to connect:

•Microsoft Azure

•Amazon Web Services (AWS)

•Google Cloud Platform (GCP)

•Microsoft Entra ID Identity Management

•Microsoft Active Directory Identity Management

•Palo Alto Networks Firewall

•Palo Alto via Broker Agent

•Fortinet FortiGate

•Syslog Forwarder

My connected integrations—view your connected integrations.

My connected integrations

You can see an overview widget above the integrations providing the summary:

•Status overview—tiles show how many integrations are in Error, Warning, Paused and Active status. You can click the tile to filter integrations based on the selected status.

•Data overview—view Daily data usage and Average data intake in the last 30 days. Daily data usage resets at 00:00 UTC. If the daily limit is reached, data ingestion is paused until the next reset.

•Top integrations by data intake—a chart shows top integrations by data intake, providing information on which integrations drive the most data volume. Click the three dots More button to show the Current day data or the Last 30 days data.


Important

Regularly refresh the page using the refresh Refresh. button to view the current statuses.

You can search via Categories (Network & Infrastructure Security, Identity & Access Management, Cloud Application & Collaboration, Cloud Infrastructure Security, Data Forwarding) or type the integration name into the search bar. At every integration tile, you can click the Actions button to:

•View Details—click to view details about the integration—Name, Integration type, Status and data specified to the selected integration.

•Edit—click to edit the integration as in the Connect Integration process.

•Pause—click to pause the integration temporarily.

•Resume—click to resume the paused integration.

•Delete—click to disconnect the integration and permanently delete the related data.


Important

For a list of known issues, refer to the related Knowledgebase article.