Jump to content

Web Control Report Error


Recommended Posts

I am trying to create a report for Web Control. I am having an issue when selecting Web Control - Action Performed, I keep on getting <Error Request Timeout 90000 ms exceeded>. Is this a network-related issue?

 

image.png.c33318c424683e75480e015597dff923.png

Link to comment
Share on other sites

  • Administrators

What Web Control rules did you create with higher than informative severity? Couldn't it be that too many data is reported to the ESET PROTECT server which causes a load and time outs while generating reports?

Link to comment
Share on other sites

I created one for Allowed Sites which is set to Warning and the Blocked Sites Severity is set to None. What's the best practice on setting this up?

image.png.27ccefa2952f99692ffa7671fe92fc8c.png

Link to comment
Share on other sites

  • Administrators

That's not good. Creating a rule to log all opened urls may results in huge logs, causing the EP Server to get overloaded and stop doing basic operations. You may even encounter issues logging to the web console. I'd recommend removing the rule asap.

Link to comment
Share on other sites

I changed the Allowed sites policy Logging Severity to NONE and Blocked sites to Warning. Is that okay?

image.png.188b7549d5c15bd3daf5065fd99f1de7.png

Link to comment
Share on other sites

  • Administrators

While that will prevent Web Control data about visited websites from being reported to the ESET PROTECT server, the rule will continue to create huge records locally which will not only consume disk space but may also negatively affect performance.

Link to comment
Share on other sites

  • Administrators
5 hours ago, polcalweng said:

So what's the best practice setup to avoid that?

Don't create a permissive Web Control rule for all visited websites. Create only block rules for desired categories or URLs. If necessary to create an exception, create a permissive rule for a particular URL and put  it above the block rule(s).

Link to comment
Share on other sites

I only created an Allowed sites URL-based rule for sites that falls under the Block Category and placed it above the Blocked Category-based rule. That way, those sites will still be accessible even if that particular category block rule is still in effect. Will this setup be an issue?

Link to comment
Share on other sites

Thanks for usual help, Marcos. By the way, I'm getting this error when creating a filter on Web Control Report. Is this due to the previous setup of the Web Control Policy? Is there a way to resolve this?

 

image.png.c0328fe6fed103b3067326af8f4cb353.png

Link to comment
Share on other sites

  • Administrators

The data already exists in the database and will be cleaned after 1 month. You'll need to delete the records from the db directly, I assume that @MartinKwill be able to provide details since I currently cannot access my EP db.

Link to comment
Share on other sites

  • ESET Staff

I would recommend to check size of database table tblf_webcontrolagregated_event to confirm that issue with report filters is caused by amount of data collected, and not some other issue. If so, solution might be increasing performance parameters of your DB server (if possible) or removal of data, but is not recommended in case there are not more significant impacts.
Also what are the performance characteristics of your DB server? And what type of DB server (MySQL or MS SQL Server) is actually used?

Link to comment
Share on other sites

  • ESET Staff

Also if possible, please provide us details of your use-case, so that we can possibly focus more on this scenario. We are mostly interested why are you collecting such data, what is the expected output and what would you do with reports generated in console (i.e. postprocessing) - especially in what granularity you are analyzing them, whether you are just checking some statistics or you are interested in per-request granularity, etc....

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...