ESET SSL

Discussion in 'ESET Smart Security' started by msm, Jul 16, 2010.

Thread Status:
Not open for further replies.
  1. msm

    msm Registered Member

    Joined:
    Nov 30, 2009
    Posts:
    9
    On the advice of not upgrading if nothing is wrong (given in here by marcos some time ago) I am running smart ver. 4.0474.0.

    My ISP is going to POP3S.
    In Antivirus and antispyware/Protocol filtering/SSL;
    if I tick 'Always scan SSL protocol' I have a problem with intermittent connection resets during POP3S retrieval (Outlook 2002 is configured correctly with port nos. and SSL on both POP3 and SMTP), i.e. it sometimes work and sometimes doesn't, but it may well be the ISP fumbling in the migration process.
    ESET help says "Select this option to scan all communications that use a certificate specified in the list of trusted certificates. Communications which utilize certificates specified in the list of excluded certificates will not be checked". But, what happens if there is no certificate from the ISP already in the trusted list, nor any mention in excluded certificates?

    Same question for web browsing (using latest IE or FF); I notice that with 'Always scan SSL protocol' ticked then I can rarely sign in to the ISPs support forum but get connection resets. If I select 'Do not scan SSL protocol' (default) then I can sign in fine.

    The help may lie in 'Apply created exceptions based on certificates' option, but I do not quite know how this option is working in relation to the scenario I have described.

    TIA
     
    Last edited: Jul 16, 2010
  2. msm

    msm Registered Member

    Joined:
    Nov 30, 2009
    Posts:
    9
    Adding:

    OS is Win XP pro.

    only way to get through log-in procedure reliably with web browser is to switch off SSL Protocol scanning.

    Problem 'appears' not to exist on Vista machine (Outlook 2007)
     
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,376
    The latest version of ESS is 4.2.58. Try installing it to see if the problem disappears.
     
  4. msm

    msm Registered Member

    Joined:
    Nov 30, 2009
    Posts:
    9
    Thanks Marcos,

    Just finished that exercise and the browsing issue seems to have gone!
    Too early to say with the POP3S, as the ISP's email servers are very 'changeable'.

    If the browsing problem under SSL was a known issue it would have been good to see it in a change log.

    Thanks:)
     
  5. msm

    msm Registered Member

    Joined:
    Nov 30, 2009
    Posts:
    9
    Also,

    I noticed that some of the ISP's forum pages (https) were flagged as partially encrypted by FF. They seemed not always properly rendered with SSL scanning on.
    Difficult to reproduce consistently though, as I think it relates to all sorts of third party stuff they pull onto their pages (advertising...:mad: )
     
  6. msm

    msm Registered Member

    Joined:
    Nov 30, 2009
    Posts:
    9
    Any takers for above questions please??
     
  7. msm

    msm Registered Member

    Joined:
    Nov 30, 2009
    Posts:
    9
    Some further tests results:

    With Outlook ports set for POP3 SSL (995), mail retrieval is currently working fine and fast without switching POP3S scanning on in eset.
    As soon as I switch on POP3S scanning by ticking 'Always scan SSL protocol' in eset, the retrieval slows down dramatically and mostly fails with "connection interrupted" reported by Outlook. This is both with and without the ISPs POP3 certificate in the 'Trusted certificates' list.

    ?
     
  8. msm

    msm Registered Member

    Joined:
    Nov 30, 2009
    Posts:
    9
    Bump!

    I have just renewed our licenses.
    Have I said something wrong?
     
  9. COSMO26

    COSMO26 Registered Member

    Joined:
    Oct 21, 2003
    Posts:
    404
    Since your 16th post I haven't seen Marcos - Aryeh involved in Replies, so they must be involved elsewhere for now. Cudni and JususV appear to be filling-in as able.

    Just keep bumping or try below / If you purchased via Vendor, my Vendor gave great assistance once, too. Try yours.

    ESET Support Fixed my Issue recently where Forum Here did Not ...........
    (866) 343-3738 ....1 Sales/ 2 Sppt
    Or 1-619-876-5400
     
  10. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,376
    The fact that the problem appears on Win XP but not on Vista indicates a problem with traffic redirection via a local proxy on Win XP, probably due to a conflict with other software or there's something wrong with the OS. A log from SysInspector (ESI) might shed more light so I'd suggest that you contact customer care and provide them an ESI log for perusal.
     
Thread Status:
Not open for further replies.