Web Control blocking

[Majidkhan]

Hi,

We would like to block all the websites and allow only one URL, when tested it is not working and it is default allowing all the websites access.

Please suggest as the requirement is to block URL in the host based.

In Block and allow we have allowed only single website

In Content actions we have blocked everything

[Former Member]

ENS is the wrong product to achieve your goals. I would suggest looking at a web gateway or possibly a firewall. The purpose of ENSWC is to protect against malicious sites along with other categories not deemed unfit for business purposes. It is not designed be used to control all Internet Access.

[Majidkhan]

Hi,

As the requirement is using the host based block. Can we achieve it using ENS firewall? (Block all and allow only one URL)

[mmuthuga]

For blocking URL's web control is more effective. ENS firewall does packet filtering and blocks based on IP address and not URL. ENS firewall can also block domains which again is performed by blocking IP's resolving to the domain.

[mmuthuga]

First check if web control is functioning. Web control will not block any URL's if it is not able to reach McAfee GTI server and fetch reputation of URL's even for URL's added in block list since that is the web control functionality flow. You can make sure by opening test site http://red.test.csm-testcenter.org and it should get blocked or check green rated sites display green colour in web control browser toolbar.

Once you make sure Web control is working, add all internet top-level domains to block list, set all of the categories to block. Add the only one URL to allow list.

[Majidkhan]

Hi ,

It works fine with IE browser but not with Chrome, Is this not supported in Chrome. If yes, when can we expect this feature to work with Chrome.

[mmuthuga]

From KB82761 "Supported Internet browsers" section.

"Because of the high frequency with which Chrome and Firefox browsers are released, new browser  versions might break ENS Web Control support for Chrome or Firefox. The next ENS update release will target adding back support for the browser."

[Majidkhan]

Hi,

We are running Chrome version 75.0.3700.100 and I do not see the Web control extension.

Do we need to follow this document to add the configuration via GPO. Will that work?

https://support.google.com/chrome/a/answer/187202?hl=en

[Majidkhan]

Also , if we are not upgrading the browsers and restricting to upgrade directly via GPO will that stop Webcontrol extension from breaking in future?

[mmuthuga]

I can see Web control extension loading on Chrome version 75.0.3770.100 (Official Build) (64-bit). 

You will need to enable Web Control browser extension manually at client or through GPO. KB87568