1. Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in.

2. Click Admin → Policies → New Policy.
   To edit an existing policy, select the endpoint policy that you want to modify and click the gear icon  → Edit.

Figure 1-1
Click the image to view larger in new window

3. Type a name for the new policy in the Name field.

Figure 1-2
Click the image to view larger in new window

4. Expand the Settings section and select Endpoint for Windows.
    
5. Click Tools → Diagnostics.
    
6. Click the slider bar next to Enable Firewall advanced logging.

Figure 1-3
Click the image to view larger in new window

7. Expand the Assign section, click Add Computers, select the client for the policy and then click OK.

Figure 1-4
Click the image to view larger in new window

8. Click Finish. The policy will be applied on the client computer. With logging enabled, repeat the action that is blocked by the firewall and then continue to Part II.

II. Download and run the ESET Log Collector tool

The ESET Log Collector will create the firewall log along with other logs to help ESET technical support resolve your issue quickly.

9. Download and run the ESET Log Collector tool.
    
10. Include the log file that the tool produces in your email response to ESET technical support. If you have not already opened a case with ESET technical support, complete a technical support request and submit the file you just saved to ESET technical support for analysis.
     
11. To stop recording logs of all blocked connections, repeat the steps in the Activate logging of the firewallsection and click the slider bar next to Enable firewall advanced logging to disable it in step 6. Click Finish. If advanced logging is not disabled, it will generate a large log file.

Figure 1-5
Click the image to view larger in new window

Using Override mode in ESET Remote Administrator

ESET endpoint version 6.5 products includes an Override mode option. When Override mode is enabled from ERA Web Console, a user on a client machine can change the settings in the installed ESET endpoint product, even if the settings were locked by another policy. After the changes have been configured on the client machine, the configuration can be requested and saved as a new policy that can be then applied on other computers.

Click for more information about Override mode.

Activate logging of blocked connections in ESET Endpoint Security

1. Open the main program window of your Windows ESET product.

2. Press the F5 key to access Advanced setup.
    
3. Click Tools → Diagnostics.
    
4. Click the slider bar next to Enable Firewall advanced logging and then click OK.

Figure 2-1

5. With logging enabled, repeat the action that is blocked by the firewall and then continue to Part II.

II. Download and run the ESET Log Collector tool

The ESET Log Collector will create the firewall log along with other logs to help ESET technical support resolve your issue quickly.

6. Download and run the ESET Log Collector tool.
    
7. Include the log file that the tool produces in your email response to ESET technical support. If you have not already opened a case with ESET technical support, complete a technical support request and submit the file you just saved to ESET technical support for analysis.
    
8. To stop recording logs of all blocked connections, repeat the steps in the Activate logging of the firewall section and click the slider bar next to Enable firewall advanced logging to disable it in step 6. Click Finish.