Kaspersky is blocking a page and not reporting it

neiby · 07-16-2009, 02:19 PM

We have an IT user who needs to access a web-based tool. If Kaspersky is running, the tool will not load, but there are no blocks recorded in the logs at all. If I disable KAV, the page loads fine.

Any thoughts?

EDIT: I've bypassed the rack for that website so she can get to it, but I'd still like to figure out why KAV is blocking it and then not mentioning it in the logs.

sky-knight · 07-16-2009, 03:12 PM

Does the page rely on an http stream?

If it does, you may need to disable the "disable http resume" in the av module.

neiby · 07-16-2009, 03:18 PM

I tried disabling that feature and it didn't help. I thought it might be something like that. I've got Untangle support checking into it. I suppose it's possible that when I tested it, I forgot to apply the changes completely. I'll have to try it again just to make sure.

neiby · 07-16-2009, 03:37 PM

This is weird. I originally thought this was being caused by eSoft because I thought the site loaded when we disabled it. Soon after that, we found that we had to disable KAV to get to the site. Just now, I tried it again and couldn't get to it with KAV disabled, so I disabled eSoft and I could get to it. Very weird!

Support is working on it, though.

neiby · 07-17-2009, 07:36 AM

This ended up being a problem with the page itself in combination with the way UT processes packets. It wasn't specifically the fault of KAV or the web filter.

07-16-2009, 02:19 PM	#1 (permalink)
neiby Master Untangler Join Date: Jun 2009 Location: Denver, CO Posts: 603	Kaspersky is blocking a page and not reporting it We have an IT user who needs to access a web-based tool. If Kaspersky is running, the tool will not load, but there are no blocks recorded in the logs at all. If I disable KAV, the page loads fine. Any thoughts? EDIT: I've bypassed the rack for that website so she can get to it, but I'd still like to figure out why KAV is blocking it and then not mentioning it in the logs. __________________ Disclaimer: I may or may not have had enough coffee when I'm posting. Interpret my responses thusly. Last edited by neiby; 07-16-2009 at 02:24 PM..

07-16-2009, 03:12 PM	#2 (permalink)
sky-knight Join Date: Apr 2008 Location: Phoenix, AZ URLs submitted: 8 Posts: 15,464	Does the page rely on an http stream? If it does, you may need to disable the "disable http resume" in the av module. __________________ Rob Sandling, BS:SWE, MCP Intouch Technology Phone: 480-272-9889 rob@intouchtechllc.com UntangleAppliances.com Phone: 866-794-8879

07-16-2009, 03:18 PM	#3 (permalink)
neiby Master Untangler Join Date: Jun 2009 Location: Denver, CO Posts: 603	I tried disabling that feature and it didn't help. I thought it might be something like that. I've got Untangle support checking into it. I suppose it's possible that when I tested it, I forgot to apply the changes completely. I'll have to try it again just to make sure. __________________ Disclaimer: I may or may not have had enough coffee when I'm posting. Interpret my responses thusly.

07-16-2009, 03:37 PM	#4 (permalink)
neiby Master Untangler Join Date: Jun 2009 Location: Denver, CO Posts: 603	This is weird. I originally thought this was being caused by eSoft because I thought the site loaded when we disabled it. Soon after that, we found that we had to disable KAV to get to the site. Just now, I tried it again and couldn't get to it with KAV disabled, so I disabled eSoft and I could get to it. Very weird! Support is working on it, though. __________________ Disclaimer: I may or may not have had enough coffee when I'm posting. Interpret my responses thusly.

07-17-2009, 07:36 AM	#5 (permalink)
neiby Master Untangler Join Date: Jun 2009 Location: Denver, CO Posts: 603	This ended up being a problem with the page itself in combination with the way UT processes packets. It wasn't specifically the fault of KAV or the web filter. __________________ Disclaimer: I may or may not have had enough coffee when I'm posting. Interpret my responses thusly.

Protect

Filter

Perform

Connect

Manage

Add-Ons