Issue
- Create a log of all connections blocked by the ESET firewall in ESET Endpoint Security
- Enable advanced logging of the Network protection in ESET Endpoint Security and ESET Endpoint Antivirus
- Activate logging of blocked connections in ESET Security Management Center
- Download and run the ESET Log Collector tool
Solution
Endpoint users: Perform these steps on individual client workstations
I. Activate logging of blocked connections in ESET PROTECT
ESET PROTECT 8.x User Permissions
This article assumes that your ESET PROTECT user has the correct access rights and permissions to perform the tasks below.
If you are still using the default Administrator user, or you are unable to perform the tasks below (the option is grayed out), see the following article to create a second administrator user with all the access rights (you only need to do this once): Create a second administrator user in ESET PROTECT
-
Open the ESET PROTECT Web Console in your web browser and log in.
- Click Policies, select the desired Built-in policy and then select the policy that you want to modify.
- Click Actions → Edit.
Figure 1-1 - Click Settings → Tools → Diagnostics.
- Expand the Advanced logging tab. Click the slider bar next to Enable Network protection advanced logging.
Figure 1-2 - Click Assign → Assign.
Figure 1-3 - Select the check boxes next to each computer or group you want this policy assigned to and click OK.
Figure 1-4 - Click Finish. The policy will be applied to the client computer. With logging enabled, repeat the action that is blocked by the firewall and then continue to Part II.
Last Updated: May 7, 2021
(Visited 9 times, 1 visits today)