ESET REMOTE ADMINISTRATOR PLUG-IN FOR KASEYA Technical Setup and User Guide
ESET REMOTE ADMINISTRATOR PLUG-INFOR KASEYA Copyright 2014 by ESET, spol. s r.o. ESET REMOTE ADMINISTRATOR Plug-in FOR KASEYA was developed by ESET, spol. s r.o. For more information visit www.eset.com. All rights reserved. No part of this documentation may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise without permission in writing from the author. ESET, spol. s r.o. reserves the right to change any of the described application software without prior notice. Customer Care Worldwide: www.eset.eu/support Customer Care North America: www.eset.com/support REV. 9/23/2014
1. Introduction...4 Installation Prerequisites 2. Plug-in...5 Installation 3. Plug-in...6 Wizard 4. Setup...7 ESET Endpoints 5. Manage...9 Configuration Policy 6. Apply...10 7. Generate a Report...11 8. Permissions...12 9. Threats...13 10. Dashboards...14 11. Alerts...15 Issues 12. Known...16
1. Introduction Thank you for using ESET Remote Administrator (ERA) Plug-in for Kaseya. The ESET Remote Administrator Plug-in for Kaseya is designed to allow an administrator to manage ESET endpoints from within the familiar Kaseya Virtual System Administrator. This plug-in gives administrators the ability to deploy configurations to ESET clients, initiate scans and updates, view threat data and generate reports using the Kaseya Info Center. 4
2. Plug-in Installation Prerequisites The ESET Remote Administrator Plug-in for Kaseya must be installed using the System Administrator account on your Kaseya Server. For optimal operation of the ESET Kaseya Plug-in, the system should meet the following hardware and software requirements of Kaseya Server (VSA) and ESET Remote Administrator Server: ESET Remote Administrator Server version 5.2.x and later View system requirements for ESET Remote Administrator Click to download ESET Remote Administrator Server Click to download ESET Remote Administrator Console Kaseya Server - Virtual System Administrator (VSA) 6.5 and later including Kaseya VSA 8 Beta To review Kaseya Server system requirements, please visit the Kaseya home page. 5
3. Plug-in Installation NOTE: During the installation process, it is necessary to stop the Kaseya server process in order to reapply the Kaseya database schema. 1. Log in to the server on which ESET Remote Administrator/Kaseya are installed using the System Administrator account. 2. Download the Kaseya Plug-in for ESET Remote Administrator Plug-in installer file. 3. Double click ESET for Kaseya.msi to start the installation wizard. Figure 1-1 4. Select the check box next to I accept the terms in the License Agreement and click Next. 5. Click Install and follow the instructions from the installation wizard. Click Close when the installation is finished. Figure 1-2 6
4. Setup Wizard After installation is complete, click Getting Started > Setup Wizard. The Setup Wizard will help you configure the Plug-in to communicate with the ESET Remote Administrator Server. 1. Click Begin. Figure 1-3 2. Enter the following information using the fields in Setup Wizard. a. Hostname/IP address i. Computer name or IP address b. Port (Port 2226 is the default value, and is used for the Command-line Console in ERA) c. ESET Remote Administrator (ERA) username (Administrator is the default value) i. Windows Domain is supported in the format (Domain\[admin user]) d. ERA password (blank by default) i. This is the Password that you have defined for the Administrator in ESET Remote Administrator 3. Click Test Connection when you are finished making changes to verify that your settings are correct and then click Next. 7
Figure 1-4 8
5. Manage ESET Endpoints You can manage all aspects of ESET endpoints from within the familiar Kaseya management console. All ESET endpoints will be displayed under the Endpoint heading where you can assign configurations, initiate scans or update tasks, and view details about your active ESET license. The Threat heading displays threat items that have been quarantined or cleaned. The Dashboard provides high-level metrics about your ESET environment. Figure 1-5 9
6. Apply Configuration Policy You can configure ESET endpoints using configuration profiles. Follow the steps below to create and apply a new configuration profile for your ESET endpoints. 1. Click Settings > Configuration Profiles. 2. Select New > New profile, define your profile information and then click Create Profile. 3. Use the panel on the right to make your desired changes and click Save when you are finished. To upload a saved profile 1. Click Settings > Configuration Profiles. 2. Click New > New profile from upload to upload your existing profile, and then select Browse to select your ESET configuration file. 3. Click Create Profile. Figure 1-6 To apply your finished Configuration Profile(s) to endpoints 1. Click Manage Endpoints > Endpoints and select an endpoint (or hold CTRL and click to select multiple endpoints). 2. Click Apply Configuration Profile, select the profile that you want to use from the drop-down menu and then click Apply Configuration. 10
7. Generate a Report You can export a report from the ESET Plug-in for Kaseya to view various data about client systems. To do so, you must define a report template, which you can then use to preview and create a report once it's ready. Create a new report template 1. Expand Info Center > Configure and Design and click Report Templates. 2. Select a folder where you want to store your new report template or click Add Folder to create a new folder. 3. Select your new folder and click Add to create a new report template. 4. Specify a report title and name for the template and then click Next. 5. You can add different report parts to your new report template in the Layout tab. To do so, expand the ESET folder and then click and drag any of the available report parts into the layout window on the right. Preview and save a report Once you have defined a new report template, expand Info Center > Configure and Design > Report Templates, open the folder where you saved your report template and click Preview to view the report. Click OK if a warning message is presented. Specify the data filters you want to use when previewing the report and click Next. A window will open to display the new report, click the Save button in the bottom left to export a copy of the report. 11
8. Permissions You can define permissions for different user roles to allow or deny access to different product settings specific to a user's role. To do so, you must be an admin user in the system. 1. Create a new admin user If you are not already present in the system as an admin, click System > User security > Users, select Admin as the user type from the drop-down menu, click Add and then specify a name for your new user. 2. Define roles for client users Click System > User security > User Roles, select ESET-User from the Role drop-down menu and click New to define a new ESET-User role. Select the role that you just created and click Set role access rights, and then select the appropriate check boxes to allow or disallow user access to different settings. 3. Specify Scope for your admin user To apply role settings, your admin user profile must have the appropriate scope. Click System > User security > Scopes, select Admin from the Scope drop-down menu, click New and then specify a name for your new scope. 12
9. Threats To view the history of malware / virus threats in your environment, select Manage Endpoints > Threats. The threat menu option lists detailed information about threats. You can see which client workstations have detected threats, the time of detection, the name of the threat and any actions taken. You can use Select Columns and Filter to customize your view. Figure 1-7 13
10. Dashboards A Dashboard is a set of reports that are automatically updated with new data to give a comprehensive overview of your endpoints. You can select which data is displayed and how it is displayed on a given dashboard. Figure 1-8 14
11. Alerts Using Alerts, a systems administrator can configure email notifications that are automatically sent out when an endpoint has failed to update in a given period of time, is not communicating with the server, or there are other issues. To create a new alert 1. Click New, type a name for your new alert and an optional description, and then click Create Alert. Figure 1-9 2. When an alert is triggered, you can choose to execute any combination of the three available actions: Create Alarm, Email Recipients, or Run Script. 3. After you create an alert and set its trigger, you can assign actions that correspond to that alert in the Alert actions tab. Click Create alarm, email recipients, or run script to have these actions at the same time as your alert. When an alert is triggered, alert information will be recorded in the Monitor tab under Status > Alarm Summary. 15
12. Known Issues Known Issues in ESET Remote Administrator Plug-in for Kaseya Clicking on an agent icon in Manage Endpoints > Threats does not open live connect in Kaseya 6.5 (functional in Kaseya 7 & 8) 16