PDA

View Full Version : nod32 antivirus 4, https filter & isa proxy


NoCelery
September 14th, 2009, 08:45 PM
I have the following setup which is probably not that unusual:
- nod32 antivirus 4
- isa server 2004

The HTTPS filter does not work when the network pcs are using an internet proxy, e.g: server:8080

The same pcs (actually the laptops) scan HTTPS just fine when they are connected directly to the internet using their mobile connections.

So in summary, with the same configuration, a laptop will NOT scan HTTPS when on the office LAN connected via a HTTP proxy, but will scan HTTPS when connected directly to the internet. HTTP is scanned in both scenarios. IS this a bug or can I do something to fix this ?

NoCelery
September 20th, 2009, 07:06 PM
3 questions in the past 3-4 weeks. Not one helpful response from ESET on the "Official ESET Support Forum". An acknowledgment of a bug/limitation would suffice so I would stop looking for a solution.

jimwillsher
September 21st, 2009, 05:28 AM
What's your basis for saying that https is not scanned? And do you have the ISA Client installed on the desktops/laptops ?

Jim

NoCelery
September 22nd, 2009, 01:25 AM
My basis is that the certification authority of the certificate is not Eset when the laptops are accessing the internet via the ISA proxy. If connected directly or behind a transparent proxy, then the certification authority is Eset.

Also, when they are connected directly to the internet, they are blocked from accessing https://secure.eicar.org/eicar.com.txt. However when they are behind the ISA proxy (or any HTTP proxy for that matter) then they can access the test malware file whcih is a pretty clear indicator that ESET/Nod32 is not scanning HTTPS.