Overslaan naar hoofdinhoud

Log all activity blocked by Web control rules in ESET Remote Administrator (6.x) - Kennisbank / Legacy - ESET Tech Center

Log all activity blocked by Web control rules in ESET Remote Administrator (6.x)

Lijst van auteurs

https://support.eset.com/kb6043

Issue

  • Log all websites blocked by a Web control rule when visited by endpoints running ESET Endpoint Security 
  • Create a new ESET Remote Administrator Dashboard report for blocked URLs

Solution

I. Create a new Web control rule

If you have already created a Web control rule and want to create a Dashboard report, first make sure to change each rule's Logging severity to Warning (see step 5 below) and then skip to part II. 

  1. Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in. How do I open ERA Web Console?

  2. Click Admin  → Policies.
     
  3. Select the appropriate policy and click the gear icon   Edit.

Figure 1-1
Click the image to view larger in new window

  1. Expand Settings and click Web and Email → Web control. Next to Rules, click Edit.

Figure 1-2
Click the image to view larger in new window

  1. Click Add (or select an existing rule and then click Edit to change the Logging severity). 

Figure 1-3

  1. Type or select the appropriate settings for the rule (NameTypeAccess rightsURL). In the Logging severitydrop-down menu, select Warning and click OK.

Figure 1-4

  1. Click Save → Finish . An error message (Figure 1-5b) appears anytime a client attempts to navigate to a URL blocked by Web control. Continue to Part II.

    Figure 1-5a
    Click the image to view larger in new window

    Figure 1-5b

    For further information on creating new Web control rules, including category names, URL groups and blocked webpage message/graphic, see Create and edit Web control rules in ESET business products (6.x).


 



II. Create a new "Web control logs" report template in ESET Remote Administrator

  1. Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in. How do I open ERA Web Console?

  2. Click Reports .
     
  3. Click Report Templates → New Report Template.

    Figure 2-1
    Click the image to view larger in new window

  4. In the Name field, type a name for your report.

    Figure 2-2
    Click the image to view larger in new window

  5. Expand Chart. In the Table section, select the check box next to Display Table.

    Figure 2-3
    Click the image to view larger in new window

  6. Expand Data. In the Table Columns section, click Add Column.

    Figure 2-4
    Click the image to view larger in new window

  7. Expand the Computer or Web control category, select the appropriate item and click OK. Repeat Steps 6 and 7 until all items listed in the table below are added to the Table Columns section and then click Finish

    Figure 2-5a
    Click the image to view larger in new window


    Category Item
    Computer Computer name
    Web control Action performed
    Web control URL
    Web control Category 
    Web control Time of occurrence 
    Web control Number of occurrences
    Web control User 

    Figure 2-5b
    Click the image to view larger in new window




III. Add new "Web control logs" Dashboard report

    1. Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in. How do I open ERA Web Console?

  1. Click Dashboard  and then the plus icon  to add a new dashboard.

    Figure 3-1
    Click the image to view larger in new window

  2. Type a name for your new dashboard and click OK.

    Figure 3-2
    Click the image to view larger in new window

  3. Click the plus icon .

    Figure 3-3
    Click the image to view larger in new window

  4. Navigate to the report you created in Part II (Web Control Logs, in this example), select it and then click OK. Your dashboard is now available. When a URL is blocked by Web control (Figure 1-5b), each URL is listed in the new Dashboard report (Figure 3-4b).

    Figure 3-4a
    Click the image to view larger in new window

    Figure 3-4b
    Click the image to view larger in new window

 

Reactie toevoegen

Log in of registreer om een reactie te plaatsen.

Heeft u een wachtwoordherinnering nodig?