nod32 antivirus 4, https filter & isa proxy

Discussion in 'ESET NOD32 Antivirus' started by NoCelery, Sep 14, 2009.

Thread Status:
Not open for further replies.
  1. NoCelery

    NoCelery Registered Member

    Joined:
    Jul 16, 2007
    Posts:
    21
    I have the following setup which is probably not that unusual:
    - nod32 antivirus 4
    - isa server 2004

    The HTTPS filter does not work when the network pcs are using an internet proxy, e.g: server:8080

    The same pcs (actually the laptops) scan HTTPS just fine when they are connected directly to the internet using their mobile connections.

    So in summary, with the same configuration, a laptop will NOT scan HTTPS when on the office LAN connected via a HTTP proxy, but will scan HTTPS when connected directly to the internet. HTTP is scanned in both scenarios. IS this a bug or can I do something to fix this ?
     
  2. NoCelery

    NoCelery Registered Member

    Joined:
    Jul 16, 2007
    Posts:
    21
    3 questions in the past 3-4 weeks. Not one helpful response from ESET on the "Official ESET Support Forum". An acknowledgment of a bug/limitation would suffice so I would stop looking for a solution.
     
  3. jimwillsher

    jimwillsher Registered Member

    Joined:
    Mar 4, 2009
    Posts:
    668
    What's your basis for saying that https is not scanned? And do you have the ISA Client installed on the desktops/laptops ?

    Jim
     
  4. NoCelery

    NoCelery Registered Member

    Joined:
    Jul 16, 2007
    Posts:
    21
    My basis is that the certification authority of the certificate is not Eset when the laptops are accessing the internet via the ISA proxy. If connected directly or behind a transparent proxy, then the certification authority is Eset.

    Also, when they are connected directly to the internet, they are blocked from accessing https://secure.eicar.org/eicar.com.txt. However when they are behind the ISA proxy (or any HTTP proxy for that matter) then they can access the test malware file whcih is a pretty clear indicator that ESET/Nod32 is not scanning HTTPS.
     
Thread Status:
Not open for further replies.