[KB8178] Sort your Endpoints using the Dynamic Groups in ESET PROTECT On-Prem

Issue

• ESET endpoint machines managed from ESET PROTECT On-Prem are reaching End of Life or have other issues (for example, SHA-1 or other certificates)
• You want to update endpoint machines managed from ESET PROTECT On-Prem to the latest version of ESET endpoint products

Details

Solution

1. Prerequisites
2. Create Dynamic Group templates for filtering the Windows version
3. Create Dynamic Group templates for filtering the ESET endpoint product version
4. Create Dynamic Groups for Windows versions
5. Create Dynamic Groups for ESET endpoint product versions under each OS version Dynamic Group

I. Prerequisites

• Ensure that all client machines are running the latest version of ESET Management Agent.
• Update/upgrade all client computers operating systems to the latest available version. For client computers on Windows, we recommend using the latest version of the Windows 10 or 11 operating system. Avoid using operating systems that are not supported by their vendor, if possible.

Sort your (Windows) client machines in the ESET PROTECT On-Prem Web Console using the Dynamic Groups and update their ESET security products to the appropriate version. See the table below:

II. Create Dynamic Group templates for filtering the Windows version

To create a Dynamic Group template that includes only Windows XP, Windows Vista, and Windows 7 SP0 computers:

1. Open ESET PROTECT On-Prem in your web browser and log in.

2. Click More → Dynamic Group Templates and click New Template.

   

3. In Basic, type a Name and Description (optional) for the new Dynamic Group template. For example, Windows XP and Vista and 7 SP0.

   

4. Click Expression and from the Operation drop-down menu, select OR (At least one condition has to be true) and click Add Rule.

   

5. In the dialog window, expand OS edition, select OS name and click OK.

   

6. Select the operator: contains and type the value: Windows XP.

7. In the dialog window, expand OS edition, select OS name and click OK

8. Select the operator: contains and type the value: Windows Vista.

9. In the dialog window, expand OS edition, select OS version and click OK 

10. Select the operator: has prefix and type the value: 6.1.7600 (this is Windows 7 with no Service Pack).

11. Click Continue to see the Dynamic Group template Summary and Finish to create the Dynamic Group template.

    

12. Repeat the above steps in this section to create other Dynamic Group templates based on the table below (you have already created the first one):

III. Create Dynamic Group templates for filtering the ESET endpoint product version

To create a Dynamic Group template that includes only ESET Endpoint Antivirus 5 and 6.0-6.5:

1. Open ESET PROTECT On-Prem in your web browser and log in.

2. Click More → Dynamic Group Templates and click New Template.

   

3. In Basic, type a Name and Description (optional) for the new Dynamic Group template. For example, Endpoint Antivirus 5 and 6.0-6.5.

   

4. In Expression, select the operation AND (All conditions have to be true) and select Add Rule.

   

5. In filter, select Installed software → Application name and click OK.

   

6. Select the operator: has prefix and type the value: ESET Endpoint Antivirus.

7. Click Add Rule and in filter, select Installed software → Application version.

8. Select the operator: is one of (string mask) and type these values (click Add to add a new one):

   • 5.*
   • 6.0.*
   • 6.1.*
   • 6.2.*
   • 6.3.*
   • 6.4.*
   • 6.5.*

9. Click Add Rule and in filter, select Installed software → Application version.

10. Select the operator: ≠ (not equal) and type the value: 6.5.2132.6.

11. Click Continue to see the Summary for the Dynamic Group template. Click Finish to create the Dynamic Group template.

    

12. Repeat the above steps in this section to create Dynamic Group templates based on the table below (you have already created the first one):

IV. Create Dynamic Groups for Windows versions

To create a Dynamic Group template for computers:

1. In Computers, click the gear icon next to All and select New Dynamic Group.

   

2. Type a Name of the new Dynamic Group. For your convenience, use the same name as the name of the applicable Dynamic Group template, for example, Windows XP and Vista and 7 SP0.

   

3. Click Template → Choose Existing.

   

4. Select the Windows XP and Vista and 7 SP0 Dynamic Group template and click OK.

   

5. Click Finish to create the Dynamic Group.

   

6. Repeat the above steps in this section to create the following Dynamic Groups and assign the respective Dynamic Group template to each (you have already created the first one):

   • Windows XP and Vista and 7 SP0
   • Windows Vista and 7 SP0
     
   • Windows 7 SP1 and 8 and 10

V. Create Dynamic Groups for ESET endpoint product versions under each OS version Dynamic Group

1. Under Dynamic Group created in the previous section, create the following Dynamic Groups (as subgroups) and make sure to assign the respective Dynamic Group template to each.

   The resulting Dynamic Group structure looks like the following:

   

2. Proceed to upgrade or downgrade ESET endpoint products remotely using ESET PROTECT On-Prem.