[KB6043] Log all activity blocked by Web control rules in ESET Remote Administrator (6.x)

Issue

ESET business product no longer supported

This article applies to an ESET product version that is currently in End of Life status and is no longer supported. The content in this article is no longer updated. 

For a complete list of supported products and support level definitions, review the ESET End of Life policy for business products.

Upgrade ESET business products.

  • Log all websites blocked by a Web control rule when visited by endpoints running ESET Endpoint Security 
  • Create a new ESET Remote Administrator Dashboard report for blocked URLs

Solution

I. Create a new Web control rule

If you have already created a Web control rule and want to create a Dashboard report, first make sure to change each rule's Logging severity to Warning (see step 5 below) and then skip to part II. 

  1. Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in. How do I open ERA Web Console?

  2. Click Admin → Policies.
     
  3. Select the appropriate policy and click the gear icon   Edit.

Figure 1-1
Click the image to view larger in new window

  1. Expand Settings and click Web and Email → Web control. Next to Rules, click Edit.

Figure 1-2
Click the image to view larger in new window

  1. Click Add (or select an existing rule and then click Edit to change the Logging severity). 

Figure 1-3

  1. Type or select the appropriate settings for the rule (Name, Type, Access rights, URL). In the Logging severity drop-down menu, select Warning and click OK.

Figure 1-4

  1. Click SaveFinish . An error message (Figure 1-5b) appears anytime a client attempts to navigate to a URL blocked by Web control. Continue to Part II.

    Figure 1-5a
    Click the image to view larger in new window

    Figure 1-5b

    For further information on creating new Web control rules, including category names, URL groups and blocked webpage message/graphic, see Create and edit Web control rules in ESET business products (6.x).


 



II. Create a new "Web control logs" report template in ESET Remote Administrator

  1. Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in. How do I open ERA Web Console?

  2. Click Reports .
     
  3. Click Report TemplatesNew Report Template.

    Figure 2-1
    Click the image to view larger in new window

  4. In the Name field, type a name for your report.

    Figure 2-2
    Click the image to view larger in new window

  5. Expand Chart. In the Table section, select the check box next to Display Table.

    Figure 2-3
    Click the image to view larger in new window

  6. Expand Data. In the Table Columns section, click Add Column.

    Figure 2-4
    Click the image to view larger in new window

  7. Expand the Computer or Web control category, select the appropriate item and click OK. Repeat Steps 6 and 7 until all items listed in the table below are added to the Table Columns section and then click Finish

    Figure 2-5a
    Click the image to view larger in new window


    Category Item
    Computer Computer name
    Web control Action performed
    Web control URL
    Web control Category 
    Web control Time of occurrence 
    Web control Number of occurrences
    Web control User 

    Figure 2-5b
    Click the image to view larger in new window




III. Add new "Web control logs" Dashboard report

    1. Open ESET Remote Administrator Web Console (ERA Web Console) in your web browser and log in. How do I open ERA Web Console?

  1. Click Dashboard and then the plus icon to add a new dashboard.

    Figure 3-1
    Click the image to view larger in new window

  2. Type a name for your new dashboard and click OK.

    Figure 3-2
    Click the image to view larger in new window

  3. Click the plus icon .

    Figure 3-3
    Click the image to view larger in new window

  4. Navigate to the report you created in Part II (Web Control Logs, in this example), select it and then click OK. Your dashboard is now available. When a URL is blocked by Web control (Figure 1-5b), each URL is listed in the new Dashboard report (Figure 3-4b).

    Figure 3-4a
    Click the image to view larger in new window

    Figure 3-4b
    Click the image to view larger in new window