Advice Request Query about Kaspersky encrypted connections scanning and web antivirus

Please provide comments and solutions that are helpful to the author of this topic.

Status
Not open for further replies.

Dhruv2193

Level 10
Thread author
Verified
Well-known
Nov 7, 2016
468
I wanted to know is enabling encrypted connections scanning necessary for being protected against malicious webpages and phishing sites? Ihave read on many sites but cannot zero in on the answer.
 
  • Like
Reactions: harlan4096

harlan4096

Moderator
Verified
Staff Member
Malware Hunter
Well-known
Apr 28, 2015
8,635
Disabling it, as it said in the warning popup/contextual help of the product may reduce the functionality of some features/modules, but still Kaspersky is protecting You at traffic level...
 

MoriartyOW

Level 3
Verified
Well-known
May 8, 2018
143
for me, disabling encrypted connections in kaspersky will disable web protection (will not work against known malicious websites/phishings) too.
 
  • Like
Reactions: Dhruv2193

Dhruv2193

Level 10
Thread author
Verified
Well-known
Nov 7, 2016
468
Disabling it, as it said in the warning popup/contextual help of the product may reduce the functionality of some features/modules, but still Kaspersky is protecting You at traffic level...
Thanks, so if one disables encrypted scanning, kaspersky should still warn about malicious web pages?
 

harlan4096

Moderator
Verified
Staff Member
Malware Hunter
Well-known
Apr 28, 2015
8,635
If You disable "Scan Encrypted connections upon request", it will only detect http but not https... just tried EICAR Test, the links/files with https were not detected by WebAV but the files were detected/deleted by FileAV once they were downloaded...

Anyway, I don't see the general point in disable this feature, if You are having issues with Chrome or FF (I am with this forum some times) about TLS 1.3, just add this URL to NetWork -> Encrypted connections scanning -> Manage exclusions... temporally until the issue is fixed...
 

Gandalf_The_Grey

Level 76
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,506
If You disable "Scan Encrypted connections upon request", it will only detect http but not https... just tried EICAR Test, the links/files with https were not detected by WebAV but the files were detected/deleted by FileAV once they were downloaded...

Anyway, I don't see the general point in disable this feature, if You are having issues with Chrome or FF (I am with this forum some times) about TLS 1.3, just add this URL to NetWork -> Encrypted connections scanning -> Manage exclusions... temporally until the issue is fixed...
I just disabled TLS 1.3 in Chrome Flags and (almost) no more problems with Chrome and KFA. Is that not a better solution than whitelisting sites?
 
Last edited:
  • Like
Reactions: harlan4096

harlan4096

Moderator
Verified
Staff Member
Malware Hunter
Well-known
Apr 28, 2015
8,635
As I said, that is a temporal workaround... if You disable TLS 1.3, this will affect to all the sites, those where You are having issues with TLS 1.3 and those where not... whitelisting only the URL/sites with issues allows You to still keep TLS 1.3 in general...
 
  • Like
Reactions: Gandalf_The_Grey

Gandalf_The_Grey

Level 76
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,506
As I said, that is a temporal workaround... if You disable TLS 1.3, this will affect to all the sites, those where You are having issues with TLS 1.3 and those where not... whitelisting only the URL/sites with issues allows You to still keep TLS 1.3 in general...
Of course you're right.
In my case with a shared family computer it was easier to disable TLS 1.3 till the issues are fixed.
Family members can't whitelist sites.
But I will enable TLS 1.3 again in Chrome.
They can ask me to whitelist a site or use Edge that has no problems with KFA.
I don't know if Edge supports TLS 1.3 yet...
 
  • Like
Reactions: harlan4096

Dhruv2193

Level 10
Thread author
Verified
Well-known
Nov 7, 2016
468
harlan4096, i am runnign KIS2019 with patch a and have 1 problem- when i enable encrypted connections scanning, and type something in the address bar of chrome, the google page result does not come but when i disable it, the result comes. In case it is enabled, i have to first go to google.com and then type any search query and then the results come.
 

harlan4096

Moderator
Verified
Staff Member
Malware Hunter
Well-known
Apr 28, 2015
8,635
@Dhruv2193: I can't reproduce that issue now, I'm in my lap for summer season, don't have access to my virtual machines, and in this system I'm testing KTS2020 .318... I can't reproduce that issue with Chrome here with KTS2020, I have Scan encrypted connections upon request (default setting)...

Check if You have more than 1 "Kaspersky Root Certificate" installed in Windows Certificate repository... you should have only 1 and the most updated belonging to Your current Kaspersky product version.
 

yitworths

Level 10
Verified
Well-known
May 31, 2015
472
harlan4096, i am runnign KIS2019 with patch a and have 1 problem- when i enable encrypted connections scanning, and type something in the address bar of chrome, the google page result does not come but when i disable it, the result comes. In case it is enabled, i have to first go to google.com and then type any search query and then the results come.

I'm also running patch a & like harlan4096 I'm also unable to re-produce that. You should re-check your settings & extensions.
 

Dhruv2193

Level 10
Thread author
Verified
Well-known
Nov 7, 2016
468
Thanks harlan and yitworths, i un-installed the cert. from chrome and then imported from the kaspersky cert. folder and now no problem is there. UPDATE- the problem came back and i re-installed the extension of kaspersky and not faced the problem till now. Lets wait and see if it comes back.
 
Last edited:

RoboMan

Level 34
Verified
Top Poster
Content Creator
Well-known
Jun 24, 2016
2,399
harlan4096, i am runnign KIS2019 with patch a and have 1 problem- when i enable encrypted connections scanning, and type something in the address bar of chrome, the google page result does not come but when i disable it, the result comes. In case it is enabled, i have to first go to google.com and then type any search query and then the results come.
Add google.com to URL exclusions?
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top