"Endpoint Security: Web Control Block and Allow lists" report is blank in ePolicy Orchestrator

Technical Articles ID: KB87189
Last Modified: 8/27/2018

Environment

McAfee Endpoint Security Web Control 10.x

McAfee ePolicy Orchestrator (ePO) 5.x

Problem

Blocked site events are not generated. Running the ePO query Endpoint Security: Web Control Block and Allow lists, under Queries & Reports, returns a blank report.

Cause

The blocked site events never reach the ePO server. By default, the Endpoint Security Common policy is configured to log only Critical and Major events. If an event has a severity of Informational, it is not logged.

Solution

Modify the Endpoint Security Common policy to send all events:

Log on to the ePO console.
Navigate to Policy Catalog, Endpoint Security Common, <your assigned policy> or McAfee Default, Show Advanced.
In the Event Logging section, change the drop-down list for Web Control events to log to log All events.
Save and apply the policy.

Events are now generated for blocked and allowed sites visited, and the events are reported to ePO.

NOTE: When a site is visited, it will take about 30 minutes after closing the browser to generate an event.

Affected Products

Configuration
Endpoint Security Web Control 10.6.x
Endpoint Security Web Control 10.5.x
Reporting

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

Environment

Problem

Cause

Solution

Affected Products

Glossary of Technical Terms

Title

Title

Featured Solutions

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

Knowledge Center

Environment

Problem

Cause

Solution

Affected Products

Glossary of Technical Terms

Choose your region

Title

Title