Keep log only for web control

Question

Hi,

for web protection you can set warnings and blocks, but is there also a way to get only the log file in case you would set it to warning? For the application control policy you can set it to "detect but allow to run", that way you have a log file but it isn't blocked. Afterwards after regarding at the log, you can still block this if you want. So I was wondering if there is also a way for this concerning the web control policy.

Jo :45255

QC · Accepted Answer

Hello Jo, for web protection you can set  warnings and blocks, but is there also a way to get only the log file guess you are referring to Web Control as the subject implies. Arguably Application Control and Web Control implement the same concept but there are important differences. The applications are enumerated, they have a definite identity and a declared purpose, their categorization is mainly there for manageability and they are usually only run deliberately by the user. Last but not least - applications can only be "controlled" on the endpoint. Web Control in Endpoint is a "spin-off" of the Web Appliance product. There the user can optionally request a site-reclassification upon receiving a block or warn . While a log only setting would show you the potentially blocked/warned sites it doesn't show why the user visited the site (if it was intentional at all). As you intend to enable Web Control sooner or later users have to deal with the alerts anyway. If you are worried about users finding out that their browsing is monitored - they will not later than upon receiving the first block/warn page. Christian  :45271