DM R

I run ESET Protect Entry (on-prem) and ESET Protect Cloud(Enterprise), different MSP I want to integrate my cloud MSP instance into our on-prem. When it's integrated I want to call API from my on-prem. Can it get details of the added MSP cloud instance or is it only capable of getting the actual on-prem details and not mix? This is for getting billing reports like the number of devices activated, and seats for each client.

same issues with our servers, Windows 2019 and Windows 2016

Is there an option to export a policy to a readable content? All I can do is export as DAT file or XML

With the license ESET protect entry anyone know how to generate report in on-prem console in getting seat counts\license counts that distinguish how many uses endpoint security and server security license?

Probably, and the only way to fix this is manual deployment?

We have moved our client from on-prem to Protect Cloud. Devices are communicating properly to Protect Cloud but after the trial license expired. It stopped and notice that the faulty devices are using back the old peer cert. Easy way to push the correct cert or agent again to the devices? Tried GPO but it doesn't kick in anymore as the ESET was already deployed that way.

Newbie.. Any idea or what to check if a device installed with agent (live installer) is not reporting back to ERA console? Aside from checking the logs, dns\firewall. anything else? Device is in another country and my onprem server is also.

@Marcos can you advise?

@itman any eset pov mitigation?

ESET mitigation aside from ntlm? implications in ntlm deny and only setting trusted zones? https://techcenter.eset.nl/en-US/news/posts/cve-2023-23397-microsoft-mitigates-outlook-elevation-of-privilege-vulnerability

Can someone advise how I can create a scheduled report that generates email every 1st of the month? I have the report already created but wondering what task to use CRON or Scheduled Report.

Thanks @itman @Marcos The link is below, Yeah, wondering if ESET has familiarize its security fabric with the published IOC's by MS. https://www.microsoft.com/security/blog/2022/09/08/microsoft-investigates-iranian-attacks-against-the-albanian-government/

Also does the IOCs provided by MS, ESET can detect them and block

Thoughts on the current attacks with Iran/Albanian