katycomputersystems 1 Posted September 17, 2021 Share Posted September 17, 2021 I want an email when a client attempts to download an executable. We are using URL Address Management in Web & Email via /era/webconsole/#id=POLICIES to block executable downloads. I have tried configuring notifications via /era/webconsole/#id=NOTIFICATIONS, but haven't stumbled on the correct solution. We block the download, the client sees: Website blocked The web page is on the list of blocked websites specified by the user. Access to it has been blocked. Please help Link to comment Share on other sites More sharing options...
Administrators Marcos 4,841 Posted September 17, 2021 Administrators Share Posted September 17, 2021 An email notification can be sent when a threat has been detected but I don't think you can do it for blocked urls. Moreover, it's not possible to reliably block executables; download links may not necessarily end with ".exe". Link to comment Share on other sites More sharing options...
katycomputersystems 1 Posted September 17, 2021 Author Share Posted September 17, 2021 Thank Marcos, what is the best way to make the email notification a successful feature request? Our block list looks like this: # {"product":"endpoint","version":"8.1.0","path":"plugins.01000200.settings.stProtocolFiltering.stUrlLists.2.strAddresses"} *?.exe *.*.exe *.docm *.xlsm *.pptm *.vbs *.bat *.wsf *.rar *.winzip.com Link to comment Share on other sites More sharing options...
Administrators Marcos 4,841 Posted September 17, 2021 Administrators Share Posted September 17, 2021 You can add your wish here: https://forum.eset.com/topic/14259-future-changes-to-eset-endpoint-programs However, I'm afraid that notifications about blocked websites could generate email flood. Link to comment Share on other sites More sharing options...
Recommended Posts