This issue involves ESET Endpoint Protection blocking access to certain domains even after those domains are explicitly added to the "Allowed" URL list in Web access protection policies. The antiphishing module appears to ignore URL address list exclusions, potentially due to heuristic analysis of URLs with query parameters. The blocking results in network access denial errors in browsers. The user suspects that Network Attack Protection (IDS) might be responsible rather than Web access protection, raising questions about the correct policy paths for exclusions. No official vendor advisory or patch information is available, and the problem is reported via a Reddit post with minimal discussion.

Affected users experience blocked access to legitimate domains despite whitelisting attempts, potentially disrupting business operations or user workflows. The blocking may cause confusion and hinder access to clean websites, especially those using tracking-style query parameters. There is no indication of exploitation or malware involvement. The impact is limited to access denial and potential operational inconvenience.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official guidance or patches are available, users should verify all relevant exclusion settings within ESET PROTECT policies, including Network Attack Protection exclusions, not just Web access protection URL lists. Engaging ESET support for clarification on exclusion scopes and antiphishing module behavior is recommended. Avoid relying solely on URL address list exclusions for domains flagged by the antiphishing heuristic module.