ESET Antivirus Integration

Wider attack surface coverage powered by hundreds of integrations and deeper threat visibility powered by thousands of detections.

ESET Antivirus

Version: Latest business version of ESET Antivirus (Endpoint Protection).

ESET Antivirus is the most effective protection you can find to combat today's huge volumes of Internet and email threats. It provides comprehensive antivirus and anti-spyware protection without affecting your computer's performance. Using advanced ThreatSense technology, ESET Antivirus proactively protects you from new attacks, even during the critical first hours when other vendors' products aren't aware the attack even exists.

Netsurion monitors detected threat activity, action taken against threat activity, quarantined malwares, firewall events, HIPS alerts etc and generates flex reports, flex dashboards and alerts for the same.

Netsurion Data Source Integration for ESET Antivirus allows you to monitor the following components:-

Security - Detected threat activity, HIPS alerts and quarantined threat activity.
Operation - Firewall allowed and denied traffics.
Compliance - User login and logout activities.

Once ESET Antivirus is configured to deliver events to Netsurion Manager; alerts, dashboards and reports can be configured into Netsurion.

Some of the Data Source Integrations available in Netsurion are listed below.

Alerts

Type	Name	Description
Security	ESET AV - Threat activities	This alert is generated when a threat is detected by the ESET Endpoint Protection.
Security	ESET AV - HIPS alerts	This alert is generated when any IPS alert detected by ESET Endpoint Protection.
Security	ESET AV - Quarantined events	This alert is generated when ESET Endpoint Protection quarantines any detected malware.

Reports

Type	Name	Description
Security	ESET AV - Threat activities	This report provides details about all the threat that are detected by ESET Endpoint Protection.
Security	ESET AV - HIPS alerts	This report provides details about all the IPS alerts that are detected by the ESET Endpoint Protection.
Security	ESET AV - Quarantined events	This report provides details about all the detected malware when they are quarantined by the ESET Endpoint Protection.
Operations	ESET AV - Firewall aggregated event	This report provides details on all the firewall aggregated events including traffic allowed and denied events.
Compliance	ESET AV - Login and logout activity	This report provides details about all the login and logout activities.

Documentation

The configuration details in this guide are consistent with Netsurion version 8.x and later, latest business version of ESET Antivirus (Endpoint Protection).

Download Integration Guide for more information.