eset Server Security – Server Protection, Malware Defense, File Scanning

What is included in ESET Server Security?

Multilayered anti-malware – Blocks threats before, during and after execution.
Automatic exclusions – Server role exclusions applied automatically after the next restart.
Hyper-V scan – Inspects virtual machine disks without an agent inside them.
ESET Cluster – Shares one policy across failover and load-balancing cluster nodes.
OneDrive scan – Scans OneDrive content linked to a Microsoft 365 business account.
Important – No EDR, mail server or encryption module is included.

What are the main benefits of ESET Server Security?

ESET Server Security is a per-server protection application for Microsoft Windows Server and Linux, carrying this name since ESET renamed ESET File Security in June 2021. It runs on its own through a local interface, or under central policy from the ESET PROTECT console, which is licensed separately.

No exclusion guesswork – Microsoft role exclusions are applied without a manual list.
Agentless VM scanning – Hyper-V disks are scanned without touching each guest.
Backup conflict control – Process exclusions stop scans colliding with backup jobs.
Server Core support – A separate build runs on installations without a GUI.
Consistent cluster policy – One configuration reaches every node in the cluster.
Evidence for audits – ESET PROTECT reporting shows protection state per server.

Best antivirus? Why Windows Defender alone is not enough
Explains where the protection built into Windows stops and what a dedicated security product adds on top of it.

Which company size is ESET Server Security suitable for?

The deciding factor is not headcount but how many servers you run and whether anyone has to prove their protection status to an outside party. A single file server in a workgroup can run this product with no console at all; from roughly five servers upward, the console stops being optional because per-machine configuration drift becomes the real risk.

Does ESET Server Security meet the requirements of Swiss cybersecurity legislation?

The Swiss obligation applies to operators of critical infrastructure, not to every company: since 1 April 2025 the revised Information Security Act (ISG) requires them to report a cyberattack to the Federal Office for Cybersecurity (BACS) within 24 hours of discovery, with a further 14 days to complete the report. ESET Server Security supports that deadline in one concrete way, because detections on protected servers appear in the ESET PROTECT console with a time stamp, the affected host and the detection name, which is the raw material a first report needs. What it does not deliver is the attack path: how the intruder got in and which other systems were touched requires the separate ESET Inspect component, which is not part of this product. It also does not see mailboxes, so an attack that arrived by email leaves no trace here and has to be reconstructed from Exchange logs instead. This is a product description and not legal advice; whether your organisation falls under the reporting obligation should be clarified with a qualified legal advisor.

Does ESET Server Security meet the requirements of European cybersecurity legislation?

No product creates NIS 2 compliance, because the directive addresses organisational duties rather than software features. NIS 2 requires measures in risk analysis and information security policy, incident handling, business continuity and crisis management, supply chain security, and accountability at management level. ESET Server Security contributes to the technical part of risk management for server workloads through its multilayered anti-malware, Ransomware Shield and automatically applied role exclusions, the last of which matters because it removes the usual reason administrators switch protection off on a busy database or backup server. Its logs, together with the reporting in ESET PROTECT, support the evidence side of incident handling. It contributes nothing to business continuity, since it contains no backup or restore function, and nothing to supply chain or access management duties. The detection and response depth that auditors increasingly ask about comes from ESET Inspect, which is licensed separately.

Does ESET Server Security help with security questionnaires from large customers?

Partly, and it is worth knowing in advance which questions it settles and which it leaves open. It answers the malware protection items directly: whether servers run current endpoint protection, whether real-time scanning is active, whether ransomware-specific behavioural protection exists, and whether protection status can be reported centrally rather than checked machine by machine. Combined with ESET PROTECT it also answers questions on policy enforcement and on how quickly a detection becomes visible to an administrator. It does not answer questions on endpoint detection and response, on log retention for forensic purposes, on encryption of data at rest, on multi-factor authentication, or on backup and recovery testing, because none of those functions are in this product. The cheaper route to closing those gaps is usually a higher tier of the same ESET PROTECT family, which adds ESET Inspect for detection and response and full disk encryption under one console and one support contract, rather than adding a second vendor whose agent then has to be excluded from this one.

Data loss is expensive: How backups help you avoid outages
Covers the backup and recovery side that server antivirus deliberately does not address, and why questionnaires keep asking about it.

What is the difference between ESET Server Security for Windows Server and ESET Server Security for Linux?

The single most decisive difference is virtualisation: only the Windows build can scan Hyper-V virtual machine disks from the host without an agent inside each guest, which is the feature most buyers are actually after. The two builds share the same scanning engine and the same central management through ESET PROTECT, so a mixed estate stays under one console. Beyond Hyper-V, the Windows build adds the OneDrive scan for Microsoft 365 business accounts, while the Linux build is administered through a browser-based web interface instead of a desktop GUI. Both are covered by the same product name, so check which platform variant a listing refers to before ordering.

Which limitations should you know before buying?

The most common source of follow-up purchases is that several capabilities depend on the ESET PROTECT tier rather than on this product: the server firewall and Web Control require ESET PROTECT Entry or higher, and ESET Vulnerability and Patch Management is included only from the Complete tier upward, sold as a paid add-on for Entry and Advanced, and not available at all in ESET PROTECT On-Prem. Where patching is used on servers, patches install after a 60-second countdown that cannot be postponed, so scheduling belongs in a maintenance window. ESET MDR, the managed service that some buyers plan as a later upgrade, is offered in selected countries only, which is worth confirming for your country before you build a roadmap around it. On the Linux side, distributions running ELREPO or cloud kernels are not supported, and neither is RHEL configured with the OSPP security profile. Finally, this is server protection only: Exchange mailboxes, SharePoint, disk encryption and EDR are separate ESET products.

Windows Server 2025 vs. 2022 vs. 2019: Is It Worth Upgrading?
Helps you check which Windows Server version you are running before matching it against the supported platform list.

Frequently asked questions about ESET Server Security

Does ESET Server Security protect Microsoft Exchange mailboxes?

No. It protects the server operating system and its files, including the machine an Exchange server runs on, but it does not scan mail traffic or mailboxes. Mailbox-level scanning, quarantine and anti-spam come from ESET Mail Security for Microsoft Exchange Server, which is a separate product.

Can ESET Server Security run without a management console?

Yes. The Windows build is administered locally through its own interface or the eShell command line, and the Linux build through a browser-based web interface. ESET PROTECT is only needed when you want one policy, one dashboard and one report across several servers.

Does it run on Windows Server Core installations?

Yes. ESET provides a separate performance-optimised build for Server Core that has no graphical user interface, so it is configured through eShell or centrally through ESET PROTECT.