[Web Access Protection / URL Address Management - Unable to block any sites]

On 2/16/2022 at 1:53 PM, Marcos said:

Do you mean that the file is downloaded after clicking the url in my post? Please provide logs collected with ESET Log Collector from the machine.

Please see attached log fileees_logs.zip

 

Thanks!

[Web Access Protection / URL Address Management - Unable to block any sites]

Just now, Marcos said:

Do you mean that the file is downloaded after clicking the url in my post? Please provide logs collected with ESET Log Collector from the machine.

Yeah, any URL I've tested (including the one you provided) will just start the download.

I'll run the log collector and get back to you!

[Web Access Protection / URL Address Management - Unable to block any sites]

20 minutes ago, Marcos said:

*/*.exe worked for me and blocked the download from https://d3.7-zip.org/a/7z2107-x64.exe.

Yeah that has worked for me in the past, but not anymore.

I can even block a website by entering its URL into the list. No idea what's going on!

[Web Access Protection / URL Address Management - Unable to block any sites]

Hi all,

I'm unable to get site blocking to work. As far as I can tell all relevant settings are enabled. I did have the blocking working in the past and as far as I'm aware neither myself or anyone else has changed any settings, beyond the 'List Active' switch. 

Any ideas? Thanks!

 

 

 

 

[Logs NOT showing in: Computers > Computer Name > Show Details > Logs > Diagnostic Logs > Device Control Log]

Hi all,

I'm trying to find the most efficient way for ESET to show when a user plugs in a USB to a machine that we can then unblock for them.

I have the report system running, but this can take 5-10 mins to update (even with pressing refresh), so is no good for a quick unblock.

The machines/agents will show a block instantly (make/model/serial etc), within their local log.

How do I get this information to the Log section for each machine on the Cloud interface? Is this the right way to do things?

My test machine has the following policies:

Logging.png

usb1.png | usb2.png

Many thanks

[Report on USB device blocking not showing data]

Thanks for help all - I can now get a report.

Honestly, I'm not sure what I've done differently. Set it up from scratch with the same setting and now it's up and running

[Report on USB device blocking not showing data]

42 minutes ago, Marcos said:

Is it logged locally in the Device Control log?

Yes, any attempts to connect a USB device are logged locally on the machine. All info is there, make/model/serial etc.

We're running a trial of the system at the moment - I've sent an email to support but had nothing back in over a week...

I've got plenty of time today to crack the issue so if anyone has further suggestion, keep them coming

[Report on USB device blocking not showing data]

Just now, MichalJ said:

So only newly connected devices will be shown in the report. 

Thanks for the response.

Yes indeed, I've made sure to connect/disconnect a usb stick to a test machine after any changes. Making sure the ESET agent is recognizing and blocking the USB each tim.

Still, no data in the report

 

[Report on USB device blocking not showing data]

2 minutes ago, Marcos said:

Please try changing the severity to warning or Informational.

Thanks for the info.

I've  tried every option there with no result

 

[Report on USB device blocking not showing data]

Hi all,

I have set the built in policy 'Device Control Maximum Security' to block any usb device a user connects. I want this blocking to be reported back to the cloud console so we can unblock devices as required.

Within the policy, logging severity is set to 'Always'.

In Reports > Computers > New Report Template, I've setup a new report titled 'USB Blocking Report'.

I've set all required columns (serial/device/manufacturer etc.),

However, when the report is generated it is blank.

Where am I going wrong?

 

Many thanks!