Jump to content

EDR Offline Mz Zone


Recommended Posts

hi guys 

I have bought a new version of inspect(EDR) and it is installed in a network that is completely offline and does not have internet. What level of protection does this product have without internet?

Like antivirus, does it need to be updated daily? Or it can be updated offline. Thank you for your explanation

Link to comment
Share on other sites

  • Administrators

ESET Inspect is intended for environments where the server can communicate with LiveGrid server at least. Without access to LiveGrid, EI would not work effectively as many rules that leverage LiveGrid would not trigger at all.

Link to comment
Share on other sites

It is absolutely true. Is it not possible that these rules can be applied offline?(This is a secret network and it is not possible to communicate with other networks.)

Link to comment
Share on other sites

  • Administrators

There are more than 280 rules that use LiveGrid data for evaluation so these would not work. In the future there should be a local version of LiveGrid that will contain information about files in the local network that might help with evaluation in offline networks.

Link to comment
Share on other sites

  • ESET Staff

You also loose the regular EDR rule updates which are delivered to the server through the same mechanism as AV updates are. A new EDR rule module is usually released weekly. Without any internet connection you will receive updates only when upgrading the server with a new release (which can be several months apart).

 

When working within air-gapped networks, your best option is to invest resources into creating custom rules that fit your needs. Which of course is a lot of additional effort, but these are an unfortunate realities when working within such environments.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...