Skip to main content

Log all activity blocked by Web control rules in ESET Security Management Center (7.x) - Kennisbank / ESET Security Management Center - ESET Tech Center

Log all activity blocked by Web control rules in ESET Security Management Center (7.x)

Authors list

Issue

  • Log all websites blocked by a Web control rule when visited by endpoints running ESET Endpoint Security 
  • Create a new ESET Security Management Center Dashboard report for blocked URLs

Solution

I. Create a new Web control rule

If you have already created a Web control rule and want to create a Dashboard report, first make sure to change each rule's Logging severity to Warning (see step 5 below) and then skip to part II. 

  1. Open ESET Security Management Web Console (ESMC Web Console) in your web browser and log in.

  2. Click Policies.
     
  3. Select the appropriate policy and click the gear icon   Edit.

Figure 1-1
Click the image to view larger in new window

  1. Click Settings and click Web and Email Web control. Click the slider bar next to Integrate into system to enable Web control. Next to Rules, click Edit.

Figure 1-2
Click the image to view larger in new window

  1. Click Add (or select an existing rule and then click Edit to change the Logging severity). 

Figure 1-3

  1. Type or select the appropriate settings for the rule (NameTypeAccess rightsURL). In the Logging severitydrop-down menu, select Warning and click OK.

Figure 1-4

  1. Click Save → Finish. An error message (Figure 1-6) appears anytime a client attempts to navigate to a URL blocked by Web control. Continue to Part II.

    Figure 1-5
    Click the image to view larger in new window

    Figure 1-6

    For further information on creating new Web control rules, including category names, URL groups and blocked webpage message/graphic, see Create and edit Web control rules in ESET business products (7.x).


 


II. Create a new "Web control logs" report template in ESET Security Management Center

  1. Open ESET Security Management Web Console (ESMC Web Console) in your web browser and log in.

  2. Click Reports .
     
  3. Click New Report Template.

    Figure 2-1
    Click the image to view larger in new window

  4. In the Name field, type a name for your report. Select a Category for your report. The Description field is optional.

    Figure 2-2
    Click the image to view larger in new window

  5. Click Chart. In the Table section, select the check box under Display Table.

    Figure 2-3
    Click the image to view larger in new window

  6. Click Data. In the Table Columns section, click Add Column.

    Figure 2-4
    Click the image to view larger in new window

  7. Expand the Computer or Web control category, select the appropriate item and click OK. Repeat Steps 6 and 7 until all items listed in the table below are added to the Table Columns section and then click Finish.

    Figure 2-5
    Click the image to view larger in new window

    CategoryItem
    ComputerComputer name
    Web controlAction performed
    Web controlMatching URL
    Web controlCategory 
    Web controlTime of occurrence 
    Web controlNumber of occurrences
    Web controlUser 

    Figure 2-6
    Click the image to view larger in new window


III. Add new "Web control logs" Dashboard report

  1. Open ESET Security Management Web Console (ESMC Web Console) in your web browser and log in.

  2. Click Dashboard  and then the plus icon  to add a new dashboard.

    Figure 3-1
    Click the image to view larger in new window

  3. Type a name for your new dashboard and click Add Dashboard.

    Figure 3-2
     

  4. Click the plus icon .

    Figure 3-3
    Click the image to view larger in new window

  5. Navigate to the report you created in Part II (Web Control Logs, in this example), select it and then click OK. Your dashboard is now available. When a URL is blocked by Web control (Figure 1-5b), each URL is listed in the new Dashboard report (Figure 3-5).

    Figure 3-4
    Click the image to view larger in new window

    Figure 3-5
    Click the image to view larger in new window


KB Solution ID: KB6811 |Document ID: 25684|Last Revised: August 20, 2018

Add a comment

Please log in or register to submit a comment.

Need a password reminder?