nod32 antivirus 4, https filter & isa proxy

Discussion in 'ESET NOD32 Antivirus' started by NoCelery, Sep 14, 2009.

Thread Status:
Not open for further replies.
  1. NoCelery

    NoCelery Registered Member

    Joined:
    Jul 16, 2007
    Posts:
    21
    I have the following setup which is probably not that unusual:
    - nod32 antivirus 4
    - isa server 2004

    The HTTPS filter does not work when the network pcs are using an internet proxy, e.g: server:8080

    The same pcs (actually the laptops) scan HTTPS just fine when they are connected directly to the internet using their mobile connections.

    So in summary, with the same configuration, a laptop will NOT scan HTTPS when on the office LAN connected via a HTTP proxy, but will scan HTTPS when connected directly to the internet. HTTP is scanned in both scenarios. IS this a bug or can I do something to fix this ?
     
  2. NoCelery

    NoCelery Registered Member

    Joined:
    Jul 16, 2007
    Posts:
    21
    3 questions in the past 3-4 weeks. Not one helpful response from ESET on the "Official ESET Support Forum". An acknowledgment of a bug/limitation would suffice so I would stop looking for a solution.
     
  3. jimwillsher

    jimwillsher Registered Member

    Joined:
    Mar 4, 2009
    Posts:
    667
    What's your basis for saying that https is not scanned? And do you have the ISA Client installed on the desktops/laptops ?

    Jim
     
  4. NoCelery

    NoCelery Registered Member

    Joined:
    Jul 16, 2007
    Posts:
    21
    My basis is that the certification authority of the certificate is not Eset when the laptops are accessing the internet via the ISA proxy. If connected directly or behind a transparent proxy, then the certification authority is Eset.

    Also, when they are connected directly to the internet, they are blocked from accessing https://secure.eicar.org/eicar.com.txt. However when they are behind the ISA proxy (or any HTTP proxy for that matter) then they can access the test malware file whcih is a pretty clear indicator that ESET/Nod32 is not scanning HTTPS.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.