ERA6 Web Control

[currysoup 0]

I'm having problems with ERA 6 and Endpoint Security client web control.

 

Under policies I have selected Web and Email >> Web Control >> Integrate into system and created a simple category group which essentially contains everything under adult materials (eg porn, child abuse, etc...).

 

I have confirmed that the policy has been applied to endpoints.

 

The check I carried out was to type "porn" into google and to open the first four links. All opened sucessfully indicating that the block list was not being applied.

 

I added a url block for hxxp://sextv1.pland ensured this was applied. On checking this rule functioned as expected.

 

Is there another step I need to take to have the category group applied?

 

Any suggestions would be greatly appreciated.

[Marcos 5,070]

Maybe there's a problem receiving DNS responses from ESET's servers. Please create a Wireshark log with all communication logged while attempting to open a website that should be blocked by a category rule.

[currysoup 0]

Hi Marcos,

 

Thanks for your reply. Please see attached capture.

 

For this I was using IE 11 and was attempting to visit hxxp://www.pornhub.com.

 

 

WiresharkCapture.pcapng.gz

[Marcos 5,070]

There are no attempts to contact ESET's server, there should be DNS queries like "DNS Standard query TXT www.facebook.com.fbo5l4idkltng6t7.a.a.e5.sk".

I assume v6 is activated and updates from ESET's servers fine. Could you confirm?

 

Also make sure that a firewall doesn't block access to the following servers:

h1-arsp01-v.eset.com 91.228.166.42
h1-arsp02-v.eset.com 91.228.166.43
h3-arsp01-v.eset.com 91.228.167.141
h3-arsp02-v.eset.com 91.228.167.142
h5-arsp01-v.eset.com 38.90.226.14
h5-arsp02-v.eset.com 38.90.226.15