Content Security Reporter 2.2.0

[AllanMellor]

Currently we have web reporter, for pulling data from my users web browsing history.

Is CSR the replacement and can I use it to pull data from Endpoint security 10.5 - web.

Thanks

[moekhass]

​, Web Reporter will reach EOL later this year. Please see { McAfee Corporate KB - End of Life for McAfee Web Reporter KB88309  }. Yes, CSR is the replacement for WR. I'm not certain about ENS, but I know CSR works with IPS, MWG etc.

[jscholte]

Hi Allan,

Content Security Reporter (CSR) does still support the Site Enterprise Advisor log format. Site Advisor has had a couple of different names:

• Site Advisor
• Site Advisor Enterprise
• Web Advisor (consumer name)
• Endpoint Security Web Control (a part of ENS)

Configuration in the policy for Endpoint Security Web Control is as shown below (this is the same as what you had for Web Reporter):

In Content Security Reporter, when you create the log source, specify McAfee SiteAdvisor Enterprise.

Hope this helps!

Best Regards,

Jon

[AllanMellor]

Hi Jon,

Thank you very much for this.

Regards

Allan

[tabrezg]

HI Jon,

i am trying to configure content security reporter with ENS 10.5 i have selected above options but still data is not coming in csr dashboard.

i have question the username and password which we need to enter both the sides. is it any new credentials or we need to use exisiting EPO credentials?

secondly which url we should usein policy  https or ftp? and do we need to allow incoming port for mcafee csr sever from all the clients? right now i have installed csr on same epo server and configure the epo extension.

and how can we access standalone url for csr?

sorry i am new to this system hence little confused.

[jscholte]

Hi tabrezg,

When you create a log source csr you define a username and password. Use that in the ens web control settings.

Use http://csrip:9111/logloader/

For the url

[tabrezg]

Ho Jon,

thanks my issue is partially resolve, i was trying to ise ftp and https url but it seems only http url works fine with ENS. now i am unable to get the end point data in CSR dashboard unless i disable firewall at both ends. do we need to allow firewall ports at both ends to make this work?

secondly data is being push only when i run "send web reporter logs" client task. does that means that i need to run this client task for all computers every few minutes to get the internet usage report???

[jscholte]

Hi Tabrezg,

That is correct, the client will push logs using http on port 9111 to CSR, and they are pushed using that "send web reporter logs" task.

Best Regards,

Jon

[AllanMellor]

So I have configured my endpoint task to send the logs to CSR and configured CSR to accept the logs.

I run the client task to send the logs and it times out.

any ideas where I should start looking?

Thank you

[jscholte]

I would run wireshark on the client and check to see if the client is attempting to connect. Use filter tcp.port==9111. If you only see SYNs then that means there is a firewall in between the client and CSR.