Website Exception Management in Console

Show first post

40 replies

We also need the requirement to create exceptions by policy and apply that policy to specific machines. This is especailly crutial in a police department where they research questionable subjects related to investigations. For our MSP this is a deal breaker. We are now looking at other products that will allow this functionality.

            Any progress being made on this feature? As an IT consulting firm we really need to be able to make exceptions to the webshield. While Support is quick and extremely helpful if we have to call every single time we run into a false positive, its going to turn into a lot of wasted time both for us and our clients. It is far too risky to give them the ability to allow access to the site on their own. I think the prodict would benefit greatly from this added functionality. 
Userlevel 7
Badge +56
Not that I've heard of, but I should be finding out more about the upcoming roadmap later this week and may have more info to share after that.
Just wanted to voice my support for this addition. We have clients that need to get to certain websites and the only way we can currently is to disable the web sheild completely and this is extremely problematic for us. The ability to globally allow/deny certain websites should be a basic included feature of any product that  monitors/denies access to websites in any fashion.
Better check into the Corporate Social Responsibility if you continue to remain as a Best Buy preferred provider ... Delays in providing this feature reflect a FLAWED Software Quality Assurance program!
Join the conversation in 2017 and leave inspired, with uncompromising approaches that will enhance compliance, governance, and integrity at your organization. [Link removed per Community Guidelines]
Userlevel 5
Badge +20
All - this is a feature that has been requested often and communicated to our Product Management team. We anticipate it being added to the console in early 2017. I know it's been mentioned in the past, but it was pushed back as we focused on new technical challenges and focusing on our effacy with the rise in ransomware.
Little background, the Web Threat Shield technical component was reworked architecturally to better incorporate our Brightcloud technology which changed how the URL whitelist management feature would be presented and managed. So, it was pushed out until the new updated shield was released. For business, it's been in beta and close to going GA. Once the new Web Threat Shield is released, URL management will be forthcoming. Wish I had more detaied information, but that's what we know at this juncture.
Badge +1
Just adding to this that the new Web Threat Shield is due to become generally available next month in early/mid November so it will come soon.
So, exactly how will my current subscription be updated ... On-line / Geek Squad Appointment / Other?
@ wrote:
Desperately need an addition to the Console that allows administrators the ability to add exceptions or "whitelist" valid and legitmate websites.  We have had numerous instances where users have attempted to visit a legitimate website (such as and are presented with a message that the site contains malicious content and offers the option to close or allow.
We do not want users to have the ability to click "Allow" on every site they come across that presents this warning (as all they care about is getting to the site they want) and would rather have the ability to whitelist legitmate sites that users report they cannot access, just as we're able to do on any Web Filtering Appliance / Service.
I have seen numerous forums and discussion boards where many other Webroot customers desperately desire the same functionality.  I saw where one of your developers said it is in the works, but that was more than half a year ago.  Please expedite this Feature Request and add this functionality to your next version update.  Thank You.
Badge +1
The new Web Threat Shield for business customers will be automatically updated online within the console.
Prior to this we will send out a Product Update Bulletin, post information to the Community and run a Webinar (which will be recorded) on the changes.
Background on purged hyperlink to which Best Buy's Geek Squad subscribes:
Search Keywords: Corporate Social Responsibility Ethisphere
>> At the heart of the evaluation and selection process for Ethisphere’s World’s Most Ethical Companies is Ethisphere’s proprietary rating system, the corporate Ethics Quotient (EQ). The framework of the EQ is comprised of a series of multiple-choice questions that capture a company’s performance in an objective, consistent and standardized way.<<
** Having co-created & implemented (mid-1980s) Honeywell's Corporate Reputation Risk Assessment Process, a 30 month lag in delivering customer-driven requirements would be unacceptable supply chain management practices.
** Having modereated our Univerity of  Saint Thomas Graduate Programs in Software (15th Anniversary) CyberCrime-Fighting Forum 2000, prior feedback shows disregard for Precautionary Principle / Meta-Ethics.
** Having put Shavlik Security, LLC's InspectorScan(tm) prototype for scanning MS-Windows Network Configuration Management into doing Software as a Service (SaaS) ... to help our clients shorten elapsd time between infection detection and patch correction ... I expected exponential improvements in malware prevention / detection & correction over 15-30 years.
So, what's stiil missing from your industry's common body of knowledge about software change management and highly effective software quality assurance & acceptance testing practices?
Ability to set policies to block certain URL from WSA console.
Manipulate Whitelist and Backlist from WSA console. 
Getting a lot of request for this, basically every office ask for this.
Could also simply create firewall outgoing rules to block IPs or FQDN
Badge +1
Our BrightCloud (URL) determinations are very accurate, but not infallible, so we operate a very robust process to clear any discrepancies raised either manually, or by our web classification systems. Details can be submitted via a ticket, via the Web Threat Shield Block Page, or directly to the Webroot BrightCloud team - who then work to a strict set of KPI’s to respond and clear such requests.
However, we are also very aware that having a whitelisting capability would be much easier. So, the good news is that we are building it right now. The development team are working on an enhancement to the Web Threat Shield to provide URL whitelisting, and it is also part of a brand new service for MSPs that we are announcing in early February in the run up to the RSA Security later in the month. 
As there are console, policy and other inter-operational dependencies between WSAB whitelisting and the new service both will be made available when the new service is planned to be launched at the end of March. Of course, as with any software release, that the date may change at little notice, but it is looking good right now.
@ Any reason this request has not had its status changed to "Implemented"?
As best I can tell it has now been implemented as of June 2017 as announced here!
Userlevel 7
Badge +35
You are absolutely right, thank you for bringing this to our attention @! This was implemented, and the full details of the product update can be found here. Thank you!
Userlevel 7
Badge +35
Full details can be found here.


    Cookie policy

    We use cookies to enhance and personalize your experience. If you accept or continue browsing you agree to our cookie policy. Learn more about our cookies.

    Accept cookies Cookie settings