Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on October 24, 2014, 08:40:27 AM

Title: https virus checking, security certificates and Trusteer Rapport
Post by: REDACTED on October 24, 2014, 08:40:27 AM
I use Trusteer Rapport to protect my online banking.  Rapport reports an invalid security certificate when Avast https virus protection is enabled so I have had to disable this Avast feature.

Can Avast be made to detect if Trusteer Rapport is in use by a browser and disable https virus checking where a web site is protected by Rapport?  I need to use Rapport as it protects me from 'man in the browser' vulnerabilities, among other important protections.  My bank, HSBC UK, recommends that I use Rapport.

HSBC says: -

"We strongly recommend that you install Trusteer Rapport security software.

Trusteer Rapport adds valuable security when you log on to HSBC Personal Internet Banking. It checks that you are using the real HSBC website and not a fake. It locks down the link between you and the bank so that fraudsters can't listen in. Finally, it blocks all known viruses that target online banking.

Trusteer Rapport doesn't replace your Personal Internet Banking security details or other protection such as anti-virus software. It works with them to add extra security."
Title: Re: https virus checking, security certificates and Trusteer Rapport
Post by: Eddy on October 24, 2014, 02:08:30 PM
Does it show details/name or something about the certificate?
If so, what is it exactly showing? (screenshot?)
Quote
Trusteer Rapport doesn't replace your Personal Internet Banking security details or other protection such as anti-virus software. It works with them to add extra security.
Seems like it is not working together. Already contacted HSBC and IBM about this? If not, please do so and let's see what they say about it.

What OS/SP?
What exact version of avast?
Any other security software installed?
Title: Re: https virus checking, security certificates and Trusteer Rapport
Post by: REDACTED on October 26, 2014, 06:47:43 PM
Hi,

I have the same problem with Avast free antivirus 2015 (version: 2015.10.0.2206), on Windows 8, on Chrome AND on Internet Explorer. ANY site protected by "Trusteer Rapport" is showing:

Warning - This website is using an invalid certificate - ... - Reason for error: Bad certificate - ...  Signer: avast! Web/Mail Shield Root - ... - Block Access / Allow Access ?

As I understand, this should have something to do with the New Feature "HTTPS scanning". How can i disable this feature (until this compatibility problem is solved, either by Avast or by "Trusteer Rapport") ?

UPDATE:

Found it, under:  Settings - Active Protection - Web Shield - Customize
Title: Re: https virus checking, security certificates and Trusteer Rapport
Post by: REDACTED on October 27, 2014, 01:25:32 PM
Since Avast's HTTPS web scanning postdates Rapport's methods, a check for the presence of Rapport should be made and, if found, a message be displayed by Avast to the effect that HTTPS web scanning has not been enabled because of an incompatibilty with the pre-existing Rapport.

Online transactions are a sensitive issue and surprises like security certificates beng blocked are definitely not wanted.  The certificate in question is one belonging to Avast (connected with HTTPS web scanning).  Rapport is supposed to be validating my bank's SSL certs.  I could not knowledgeably respond to Rapport's message box and did not wish to set up some problem by responding incorrectly.  I was reduced to restarting my system since I could not back out of the request for a response and no other action other than shutting down was responded to.

On restarting, I disabled Avast HTTPS web scanning and all was well.
Title: Re: https virus checking, security certificates and Trusteer Rapport
Post by: REDACTED on November 13, 2014, 03:57:45 PM
I have been in touch with the Trusteer techs and they have resolved the issue.  Anyone else experiencing this issue should download the latest Rapport setup and install it.  As far as I am concerned, there is no longer an issue and I can now use Avast HTTPS web scanning and Rapport to ensure the security of my online banking and other transactions.
Title: Re: https virus checking, security certificates and Trusteer Rapport
Post by: Eddy on November 13, 2014, 04:17:15 PM
Good to hear it is solved.
I believe it would be helpful to others if you post a link to the website where people can download the latest setup report.
Title: Re: https virus checking, security certificates and Trusteer Rapport
Post by: REDACTED on November 13, 2014, 06:38:47 PM
I download Rapport from my bank which is HSBC UK, a Trusteer partner: -
https://www.hsbc.co.uk/1/2/contact-and-support/security-centre/downloads?HBEU_dyn_lnk=SecurityCentre_GetRapport_Link