Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on March 12, 2017, 03:07:56 PM
-
Hello all,
Issue: No access to DRAC5 interface website. (Dell PE2950) at home in test environment.
Workstation: Windows 10 x64 Pro English
Avast version: Free 17.2.2288
Virus def. : 170311-0
Browser: IE 11
Unable to access the website from DRAC5 when the option "Enable HTTPS scanning" is enabled in WebShield.
Because there is no update available for the DRAC5, I want Avast to exclude the url from the DRAC5 in Webshield.
When I add the website to the exclusion list (http://ipaddres) I can't still not access the webinterface.
I have to disable the option "Enable HTTPS scanning" to get access to the webinterface.
Does someone know how I can exclude the DRAC5 webinterface from scanning by Webshield, so I can you the option "Enable HTTPS scanning" ?
Kind regards,
S.O.
-
-> https://www.avast.com/faq.php?article=AVKB168 (Excluding files/websites)
-
Hello,
Tried that manual and still no success.
I had add the IP address as https://ipaddress and still no luck.
Kind regards,
S.O.
-
I don't believe you have given the address you are actually trying to exclude, but an example of what you have entered (as it doesn't appear to be valid).
What is the full URL you are trying to exclude, what you have actually typed in the exclusion field ?
-
Hello David,
To access the DRAC I type https://192.168.254.10 in my browser.
I added https://192.168.254.10 in "Settings" >> "General" >> " Exclusions" >> " Urls"
See attachment for screen snip.
Kind regards,
S.O.
-
1. Try typing a /after the IP and before the * wildcard e.g. https://192.168.254.10/*
2. I don't know if https would be correct on a local IP address.
3. Next, given that this is a local IP and you are using a browser to access it. I don't know if the Web Shield would be scanning local IPs.
That said You could put this in the Web Shield Exclusions AvastUI > Settings > Components > Web Shield > Customise > Exclusions. You could also consider excluding the DRAC executable in the 'Processes to exclude' option.
-
Hello,
I tested option 1 >> No success
Also added exclusion to the location bullet 3.
Still the same issue.
:-\
Kind regard,
S.O.
-
I'm at a loss as to what else to suggest, the only thing that comes to mind is changing the https to http in the exclusion. As I said I just wonder about https in local communication.
In earlier versions of avast there used to be a setting to ignore local communication, but I can't find that option at the moment.
OK did some digging and it is still there.
AvastUI > Settings > Troubleshooting > scroll down (I hadn't gone down far enough) to Redirect Settings. Check the ignore local communication and see if that works. Or try adding the local IP address to the Ignored addresses: field.
-
Hello David,
First of all, thank you for the time ;)
I have tried to add the IP address to AvastUI > Settings > Troubleshooting >Redirect Settings with no luck :(
Also tried only the IP address, tried https://ipaddress and tried http://ipaddress with no success.
The setting "Ignore local communication" was already enabled by default.
Tried this setting disabled but also no success.
It looks to me, that exclusions doesn't apply to the option "Enable HTTPS scanning".
I don't know if this is by design or a bug.
Kind regards,
S.O.
-
Unfortunately as an avast user, I don't know if https isn't accepted or work in exclusions.
Some time ago when https traffic wasn't scanned it wasn't possible to enter an https url in exceptions, well that isn't entirely correct (it tagged it with http). But it didn't work.
Did you try excluding the process I suggested before:
That said You could put this in the Web Shield Exclusions AvastUI > Settings > Components > Web Shield > Customise > Exclusions. You could also consider excluding the DRAC executable in the 'Processes to exclude' option.
Something else to try if this isn't already enabled - Web Shield settings - enable the 'Scan traffic from well-known browser processes only.'
-
Hi David
I am not sure what to enter in the "Processes to exclude" option.
By entering the website I get a certificate warning. This is correct because the cert. past due.
But when the option "Enable HTTPS scanning" is enabled, web browser doesn't put up the screen with the cert. warning at all.
The website doesn't open at all.
IE 11 show only " Waiting for 192.168.24.10" and the circle goes round and round....
Do you have any ideas where I can find the values I have to enter in "Processes to exclude".
Also tried "enable the Scan traffic from well-known browser processes only." but that doesn't give any better response.
Kind regards,
S.O.
-
What is the executable that runs this DRAC (you will have to excuse my ignorance, I have no idea how this works), it is connecting to the internet acting like a browser and the web shield would be trying to monitor that traffic. It is that executable that you have to enter.
Use the browse button (image) to navigate to the executable.
Edit typo.
-
Hi David,
Accessing DRAC5 is the same as opening an https:// website.
The only thing is that this website controls a Dell server remotely.
So you can see and give command to the server without an normal operating system.
It runs on a dedicated hardware card with its own web-interface.
See attachment where you see an example.
Grtz, S.O.
-
Given that I don't have said hardware card "It runs on a dedicated hardware card with its own web-interface."
I'm in an even worse situation than you, as I can't test it. I'm at a loss as to what is going on.
This really needs an avast team member to pick this up.
-
Hi,
I'll forward this to the devs behind the Web Shield.
You should get a reply by Monday.
-
Hello David and Alikhan,
Thanks for you help any way.
Grtz, S.O.
-
Hi, seems like you are doing everything correctly. The complete string to exclude an HTTPs URL from scanning is inside WebShield's settings dialog, URLs to exclude and enter the following string into one line:
https://192.168.254.10;https://192.168.254.10*;https://192.168.254.10/*
(please don't ask why, in 99% cases https://192.168.254.10* is also good enough)
What we would really like to find out is the reason, why you are having the issue with WebShield and DRAC5. We would really appreciate if you'll be able to gather some debugging logs for us. I'll post you in PM on Monday with detailed instructions, as soon as I'll get in touch with the team.
The most probable reason is the fact that the cert is expired (am I right? Is the certificate correct but just expired?) However, the URL exclusion should also help you.
Thanks.
-
Hi Lukor,
You are correct about the certificate.
The certificate is expired and when the option " Enable HTTPS scanning" is disabled, I get in IE11 the warning about an untrusted certificate.
That is normal reaction and an expected reaction.
When I try to add "https://192.168.254.10" the * is automatically added by Avast.
So I have added "https://192.168.254.10*" and " https://192.168.254.10/*"to the exclusion list of " Webshield" and at "General".
Disabled shields and (re)enabled shield for a services restart.
No success so far.
Let me know what I can do to assist.
Kind regards,
S.O.
-
Hi Lukor,
Hereby an Wireshark package capture picture about the network communication between DRAC and computer.
I hope this helps.
Kind regards,
S.O
-
https://192.168.254.10;https://192.168.254.10*;https://192.168.254.10/*
You need to add that in one line of webshield exclusions.
Have you done that?
-
Hi Alikhan,
I have added that exact string in to the exclusion of Webshield and tested.
Still the same issue.
Kind regards,
S.O.
-
Hi,
Also tested with the same string in de "General" exclusions with no luck.
I think it has something to do with "TLSv1"
TLSv1 is not save anymore.
But I use this for internal use and it doesn't get access to the WEB.
Thanks,
S.O.
-
Hello,
I have heart nothing at this moment from the team yet.
Hi, seems like you are doing everything correctly. The complete string to exclude an HTTPs URL from scanning is inside WebShield's settings dialog, URLs to exclude and enter the following string into one line:
https://192.168.254.10;https://192.168.254.10*;https://192.168.254.10/*
(please don't ask why, in 99% cases https://192.168.254.10* is also good enough)
What we would really like to find out is the reason, why you are having the issue with WebShield and DRAC5. We would really appreciate if you'll be able to gather some debugging logs for us. I'll post you in PM on Monday with detailed instructions, as soon as I'll get in touch with the team.
The most probable reason is the fact that the cert is expired (am I right? Is the certificate correct but just expired?) However, the URL exclusion should also help you.
Thanks.
Is there something I have missed?
Kind regards,
S.O.
-
Did you receive the PM from lukor ?
If so he should outline what you need to do to gather that debugging data, so that he can analyse it.
-
Hi,
I didn't receive any messages or instructions.
Therefor the friendly reminder :)
Kind regards,
S.O.
-
I will send Lukor a message to get in contact with you.
-
Hi,
Thank you.
This evening I installed and tested the version 17.3.2290 (build 17.3.2442.0)
But still the same challenge.
Kind regards,
S.O.
-
What does the browser say when HTTPS scanning is enabled?
-
Hello Vojtech,
The browser doesn't show anything when HTPPS scanning is enabled.
I only see "Waiting for 192.168.254.10" in the Tab of the browser.
See attachment.
Kind regards,
S.O.
-
Hello,
please use this utility to generate WebShield logs and send them to me by email. When you are asked about WebShield technology, select StreamFilter (proxy is a legacy method).
http://public.avast.com/~peterka/WebShield/NsfTroubleshoot.exe
-
Hi Vojtech,
I have sent you a message with the info.
Hope it helps.
Kind regards,
S.O.
-
The utility should have created a file named StreamFilterLogs.zip, can you send me this file?
I received only 2 ini files.
-
Hello vojtech.
Sorry that I didn't send you all the information.
I try to locate that file.
Otherwise I will try to create the logs and files again.
I am very busy at this moment, so it can take some time.
Thank you for the help anyway.
Kind regards,
S.O.
-
Hello Vojtech,
I send you the requested files.
Did you receive the files in good order?
Kind regards,
S.O.
-
Hello Vojtech,
Can you tell me when the exclusions are beeing fixed.
I have also issues to access webinterfaces for my relay cards.
Because the exclusion list are not working I have to disable the complete webshield to get access to the webinterfaces of the relaycard.
Have a nice day.
Kind regards,
S.O.
-
I received just 2 log files. Does the utility work for you? Does it generate the output file named StreamFilterLogs.zip?
Exclusions for IP addresses will be implemented in the next release.
-
Hi Vojtech,
At 13-4 I did send you the 3 files.
And yes I am having troubles to execute the program because Avast doesn't reconise the program.
I will try again and to send you the information.
Kind regards, S.O.
-
Hello Vojtech,
I send you now all the information by e-mail to you.
If I can assist with something let me know.
Kind regards,
S.O.
-
I have exactly same issue with the access to authentication page on SAP.com. With the option "Enable HTTPS scanning" enabled I am unable to login using SAP SID. Sample:
Entering URL: https://launchpad.support.sap.com/
I am forwarded to: https://authn.hana.ondemand.com/saml2/sp/mds
Ending with: https://accounts.sap.com/saml2/idp/sso/accounts.sap.com - No page available
With "Enable HTTPS scanning" disabled - everything is OK!
I tried to add exceptions for sites and scenarios:
*.hana.ondemand.com/*
*.sap.com/*
But no luck!
May be I have to use different format for exceptions?
Like:
https://*.sap.com/*
?
P.S.
Tested:
https://*.sap.com/*
https://*.hana.ondemand.com/*
Same negative result!
P.P.S.
I am using the latest free version: 17.3.2291
I had no issues on the previous Avast versions to access SAP!
-
Hello,
I too have a similar issue. I am running avast business v17.4.2520 (build 17.4.3482.0). I need some computers that have constant dealings with the internet to also connect to a local ip server, fitted with a work related database that you operate on through internet explorer. So i prefer to have avast shields up. But for some reason web shield is restricting download of certain forms from the local server. Working on the platform is just fine otherwise.
I have tried to find if it's a specific option in web shield component but none seems to work regardless if it's on or off. Only "fix" is to entirely disable web shield.
I have tried to add exclusion for this local ip on general and on web shield component. And also tried different versions of the ip string in the exclusion box: "/*" "/" "just ip" . Gave same results no matter what. I also checked avast report in which it was clear that the exclusion is indeed seen by the program. But i still fail to understand why does it still blocks download...
Any ideas?
-
I am running avast business v17.4.2520 (build 17.4.3482.0).
-> https://forum.avast.com/index.php?board=65.0