ESET Inspect Reviews

My organization uses ESET Inspect for antivirus and internet security on laptops and desktops. On the enterprise side, we utilize it on our Windows Server. 

The platform has improved our organization's security by providing comprehensive antivirus and internet security solutions. It is fast and efficient, enhancing our system's performance without significant slowdowns.

The solution is a little bit complex because it has a lot of filters, and it needs to be tuned properly. ESET Inspect offers a learning mode. It takes some amount of learning to be able to work with ESET Inspect. I have to work it out in combination with Microsoft Sentinel and with connectors when it comes to ESET Inspect.

The most valuable features of the solution stem from the fact that you can manage and react to vulnerabilities and attacks on all the workstations or laptops. You can put certain workstations and isolation. With ESET PROTECT, you see only one machine that is protected, but with ESET Inspect, you see all the machines that are protected in an environment.

ESET Inspect is an interactive XDR tool for managing network security. It is available in the cloud and on-prem. 

With ESET Inspect, we have a tool for responding to incidents and managing events on endpoint computers and servers, investigating events and potential indicators of compromise.

ESET Enterprise Inspector's most valuable feature is EDR.

The platform's price could be better.

ESET Protect & Inspect Cloud is an extremely powerful tool. When you look at a traditional anti-malware solution, you can see it as a relatively passive solution that actively monitors your network for malware without your interference on a regular day-to-day basis. Sure, the admin's role is to deploy and configure such a solution and respond to emerging issues, but in the majority of cases, antimalware solutions do the magic on their own, automatically.

As opposed to that, XDR solution gives the administrator a deep insight into all ongoing processes on every endpoint and server in real-time, and tools to respond to events that are maybe suspicious or unwanted in the network. Sure, there is a certain level of automation that is necessary for managing a large database of events, based on the cloud reputation system (ESET Live GRID) and built-in rules that simplify administration, but still - the admin has a decisive role in every process. You can keep an eye out for executables, dependencies, registry keys, and network connections, all in one console. Every anomaly will be detected, with deep insight into what is going on in your network.  

EPIC management is based on built-in and, later on, your custom rules and exclusions that you defined in a response to events that occurred. There are over a thousand built-in rules that are constantly updated by ESET engineers and they are monitoring ongoing processes. For example, in one case, EPIC informed me that one of my colleagues is using a nonstandard port in his Outlook. If the company policy doesn't allow that, I can intervene based on the information. If some app is trying to modify the startup folder, you will be notified. If some process is trying to modify a standard or build a new registry key that is previously unknown, you will know the source, possible malicious or benign causes, and all other required information about the case that will help you decide if it's bad or not. If it's bad, you can kill the process, isolate or shut down the endpoint and make the rule that will deal with it next time it occurs. If it's OK, you can create an exclusion that will ignore the case for that particular endpoint, a whole department, or the entire network. After a while, perhaps a month or two of actively monitoring your network, you will, practically, build a white list of allowed processes, and we all know how whitelisting can be useful in IT security, overall.

It gave us an insight into the regular, day-to-day operations on endpoints and servers and a pretty remarkable and continuous penetration tool for ongoing testing of our environment. 

We are using ESET Enterprise Inspector for security.

The solution can be deployed on the cloud and on-premise. One of our clients has a large number of devices and they are using the solution on the cloud using Amazon AWS.

One of our previous clients was utilizing a different EDR solution and was unable to fully comprehend the incident's flowchart. They were uncertain about the origin and the affected areas of the incident, and they could not determine which executable was capable of fixing the damage. As a result, we conducted a proof of concept test to demonstrate the effectiveness of ESET Enterprise Inspector. This test was invaluable in showcasing the flowchart of the incident and the specific executable required to resolve the issue. Subsequently, when the malware propagated to new devices, we were able to capture and document all the incidents in one centralized location.

My primary use case for this solution is antivirus protection, spam protection and IDS.

I find that the Data Collection feature has improved my organization. We can view comprehensive data about newly executed modules. This includes: time of execution, user dwell time and attacked devices. All data is also locally stored to prevent sensitive data leakage.