Website blocked not working

[abshakya 1]

Hello,

We are implementing policy in Eset web console for blocking sites.  But sites are not blocking in my pc (mac Big sur version 11.1). I have attached file, the policy in ERA management, result of sites not block, version of my eset antivirus, and mac version. I think though the sites is blocked but eset still generate the alert and send email. The blocked sites notified with different language. The blocking policy was working but now why its is not working. 

Thank you

Abesh shakya

[Marcos 5,070]

If you use a Web Control URL-based blocking rule, make sure to avoid using wildcards, e.g:

If you use the URL blacklist under Web access protection, you can use wildcards, e.g.:

Also make sure to test it with http sites. Since SSL scanning is not supported, you'd have to add port 443 to the list of scanned ports and block only the hostname. Blocking a hostname with a path would not work.

[abshakya 1]

Thank you Marcos, I will try it and let you know if it works or not.

[abshakya 1]

Hello Marcos,

The problem now its that, the sites is blocked but its generating alerts and sending email. It wasn't like this before. I have attached the evidence.

 

[Marcos 5,070]

Can you reproduce it on a Windows machine and provide logs collected with ESET Log Collector with quarantined files collected as well?

[abshakya 1]

Hello Marcos

The block policy still is not working. We are implementing policy only for mac and we don't have windows. Can you look into this.  

Thank you,

Abesh shakya

[Marcos 5,070]

Please provide logs collected as per https://support.eset.com/en/kb3404. I'd also recommend opening a support ticket with your local ESET distributor so that the case is properly tracked.

[abshakya 1]

Hello marco,

I have same problem the sites is not blocking and alerts are also not generating. I have attached the log file as you requested.

customer_info.zip

[Marcos 5,070]

On 1/22/2021 at 7:26 AM, abshakya said:

The block policy still is not working. We are implementing policy only for mac and we don't have windows. Can you look into this. 

I don't understand. You have Web Control disabled:

I also see that you have a lot of websites on the blacklist and it was applied on Jan 14 last time:

14. 1. 2021 11:11:45   http://detectportal.firefox.com/success.txt  Blocked by user's blacklist    /Applications/Firefox.app/Contents/MacOS/firefox    34.107.221.82

That firefox.exe url is no longer on your blacklist. It is not clear what website is not blocked and should be.

Please contact your local distributor and open a support ticket with detailed information. Also when posting here, do not hijack someone else's topic but create a new one so as not to mix different issues in the topic.