Issue
- Create a log of all connections blocked by the ESET firewall in ESET Endpoint Security
- Enable advanced logging of the Network protection in ESET Endpoint Security and ESET Endpoint Antivirus
- Activate logging of blocked connections in ESET PROTECT On-Prem
- Download and run the ESET Log Collector tool
Solution
Endpoint users: Perform these steps on individual client workstations
I. Activate logging of blocked connections in ESET PROTECT On-Prem
-
Open ESET PROTECT On-Prem in your web browser and log in.
-
Click Policies, select the desired Built-in policy and then select the policy that you want to modify.
-
Click Actions → Edit.
Figure 1-1 -
Click Settings → Tools → Diagnostics.
-
Expand the Advanced logging tab. Click the toggle next to Enable Network protection advanced logging to enable it.
Figure 1-2 -
Click Assign → Assign.
Figure 1-3 -
Select the check boxes next to each computer or group you want this policy assigned to and click OK.
Figure 1-4 - Click Finish. The policy will be applied to the client computer. With logging enabled, repeat the action that is blocked by the firewall and then continue to Part II.
