> ## Documentation Index
> Fetch the complete documentation index at: https://docs.threataware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ESET Cloud

> Connect ThreatAware to ESET PROTECT Cloud to monitor endpoint security and threat detection

## Overview

The ESET Cloud integration enables ThreatAware to collect data from your ESET PROTECT Cloud deployment, providing visibility into endpoint security posture and threat detection status across your organisation.

<Info>
  **Connection Method**: API
  **Setup Time**: 20 minutes
  **Access Required**: ESET Administrator account
</Info>

## Data collected

The ESET Cloud integration provides:

* Endpoint protection status
* Threat detection and malware events
* Security event logs
* Device inventory from ESET
* Compliance and policy status

## Use cases

<CardGroup cols={2}>
  <Card title="Cloud Endpoint Monitoring" icon="shield-halved">
    Track ESET Cloud protection status across all managed endpoints
  </Card>

  <Card title="Threat Detection" icon="triangle-exclamation">
    Monitor malware detections and security events in real-time
  </Card>

  <Card title="Compliance Tracking" icon="clipboard-check">
    Verify endpoint protection is active on required systems
  </Card>

  <Card title="Incident Response" icon="fire">
    Correlate ESET threat data with device inventory for faster response
  </Card>
</CardGroup>

## Setup instructions

<Steps>
  <Step title="Log in to ESET PROTECT Console">
    Access the [ESET PROTECT Console](https://eset.com) with administrator credentials.
  </Step>

  <Step title="Create an API User">
    In the ESET PROTECT Console:

    * Navigate to **More** > **Users**
    * Click **Add New User**
    * Assign a descriptive name (e.g., "ThreatAware API User")
    * Configure the user permissions with **Read-only** access for security
  </Step>

  <Step title="Generate an API Token">
    Create an API token for the user you just created:

    * Go to **More** > **API** > **API Tokens**
    * Click **Generate Token**
    * Link the token to the API User you created
    * Set the required permissions
    * Copy the **API Token** that is generated

    <Warning>
      The API Token will only be displayed once. Copy it immediately and store it securely.
    </Warning>
  </Step>

  <Step title="Note Your Server URL">
    Identify your ESET PROTECT instance URL:

    * This is the base URL you use to access ESET PROTECT
    * Example: `https://your-eset-instance.com`
    * You'll need this for ThreatAware configuration
  </Step>

  <Step title="Enter Credentials in ThreatAware">
    In ThreatAware:

    * Navigate to **Settings** > **Integrations**
    * Search for and select **ESET Cloud**
    * Enter the required credentials:
      * **API Token**: The token you copied from ESET
      * **Server URL**: Your ESET PROTECT instance URL
  </Step>

  <Step title="Connect and Verify">
    Click **Connect** to establish the integration.

    Verify the connection status shows **Active** in ThreatAware.
  </Step>
</Steps>

## Required credentials

<AccordionGroup>
  <Accordion title="API Token" icon="key">
    **Field Name**: ESET API Token
    **Type**: Password (encrypted)
    **Description**: The API token created in ESET PROTECT for integration access

    <Tip>
      Store this credential securely in your organisation's password manager.
    </Tip>
  </Accordion>

  <Accordion title="Server URL" icon="server">
    **Field Name**: ESET Server URL
    **Type**: String
    **Description**: The URL of your ESET PROTECT instance

    **Format**: `https://your-eset-instance.com`
    **Example**: `https://eset.acme.com` or `https://protect.company.net`
  </Accordion>
</AccordionGroup>

## Verification and testing

After setup, verify the integration is working correctly:

1. **Check Integration Status**
   * Navigate to **Settings** > **Integrations** in ThreatAware
   * Confirm the ESET Cloud integration shows **Active** status

2. **Verify Data Collection**
   * Wait up to 1 hour for the initial data sync
   * Check that ESET device data appears in your inventory
   * Verify protection status and threat events are visible

3. **Test Queries**
   * Create a test query to filter devices by ESET Cloud protection status
   * Verify threat and event data matches your ESET environment
   * Test filtering by compliance or policy status

## Troubleshooting

<AccordionGroup>
  <Accordion title="Invalid Token" icon="triangle-exclamation">
    **Symptoms**: Connection fails with authentication error

    **Solutions**:

    * Verify the API token is entered correctly without extra spaces
    * Ensure the API token was copied completely from ESET PROTECT
    * Check that the API token has not expired
    * Verify the token is linked to the correct API user
    * Generate a new API token if needed
  </Accordion>

  <Accordion title="Permission Issues" icon="ban">
    **Symptoms**: Integration connects but no data appears

    **Solutions**:

    * Verify the API token has read permissions to:
      * Device inventory
      * Threat events
      * Protection status
    * Check the API user permissions in ESET PROTECT
    * Review the [ESET API Documentation](https://help.eset.com) for required permissions
  </Accordion>

  <Accordion title="Connection Timeout" icon="clock">
    **Symptoms**: Integration fails to connect or times out

    **Solutions**:

    * Verify the **Server URL** is correct and accessible
    * Check firewall rules allow outbound HTTPS (443) to ESET
    * Test the URL in a browser to ensure it's reachable
    * Verify your ESET PROTECT instance is online and responding
  </Accordion>

  <Accordion title="No Data Appearing" icon="database">
    **Symptoms**: Integration shows active but no ESET data appears

    **Solutions**:

    * Verify there is endpoint data in ESET PROTECT to collect
    * Check the API token has sufficient permissions
    * Wait up to 1 hour for the initial data sync
    * Review ThreatAware integration logs for errors
    * Verify your ESET environment has managed endpoints
  </Accordion>
</AccordionGroup>

## Additional resources

<CardGroup cols={2}>
  <Card title="ESET API Documentation" icon="book" href="https://help.eset.com">
    Official ESET documentation for API configuration and permissions
  </Card>

  <Card title="ThreatAware Support" icon="life-ring" href="mailto:help@threataware.com">
    Contact ThreatAware support for integration assistance
  </Card>
</CardGroup>

## Best practices

<Tip>
  **Credential Management**

  * Create a dedicated API user specifically for ThreatAware
  * Store the API token securely in your organisation's password manager
  * Rotate API tokens annually or per your security policy
  * Monitor for authentication failures in ThreatAware logs
</Tip>

<Tip>
  **Security Considerations**

  * Only grant read permissions to the API token
  * Limit API token scope to necessary data endpoints
  * Review ESET audit logs periodically to monitor API usage
  * Follow your organisation's least privilege principles
</Tip>