Author Topic: URL exclusion in WebShield AVAST not working.  (Read 13469 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
URL exclusion in WebShield AVAST not working.
« on: March 12, 2017, 03:07:56 PM »
Hello all,

Issue: No access to DRAC5 interface website. (Dell PE2950) at home in test environment.

Workstation: Windows 10 x64 Pro English
Avast version: Free  17.2.2288
Virus def. : 170311-0
Browser: IE 11

Unable to access the website from DRAC5 when the option "Enable HTTPS scanning" is enabled in WebShield.
Because there is no update available for the DRAC5, I want Avast to exclude the url from the DRAC5 in Webshield.
When I add the website to the exclusion list (http://ipaddres) I can't still not access the webinterface.
I have to disable the option "Enable HTTPS scanning" to get access to the webinterface.

Does someone know how I can exclude the DRAC5 webinterface from scanning by Webshield, so I can you the option "Enable HTTPS scanning" ?

Kind regards,
S.O.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: URL exclusion in WebShield AVAST not working.
« Reply #1 on: March 13, 2017, 05:08:00 AM »
-> https://www.avast.com/faq.php?article=AVKB168 (Excluding files/websites)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

REDACTED

  • Guest
Re: URL exclusion in WebShield AVAST not working.
« Reply #2 on: March 14, 2017, 06:23:43 PM »
Hello,

Tried that manual and still no success.

I had add the IP address as https://ipaddress and still no luck.

Kind regards,
S.O.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: URL exclusion in WebShield AVAST not working.
« Reply #3 on: March 14, 2017, 07:30:55 PM »
I don't believe you have given the address you are actually trying to exclude, but an example of what you have entered (as it doesn't appear to be valid).

What is the full URL you are trying to exclude, what you have actually typed in the exclusion field ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: URL exclusion in WebShield AVAST not working.
« Reply #4 on: March 17, 2017, 06:26:55 PM »
Hello David,

To access the DRAC I type https://192.168.254.10 in my browser.

I added https://192.168.254.10 in "Settings" >> "General" >> " Exclusions" >> " Urls"

See attachment for screen snip.

Kind regards,

S.O.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: URL exclusion in WebShield AVAST not working.
« Reply #5 on: March 17, 2017, 06:42:53 PM »
1.  Try typing a /after the IP and before the * wildcard e.g. https://192.168.254.10/*

2. I don't know if https would be correct on a local IP address.

3. Next, given that this is a local IP and you are using a browser to access it. I don't know if the Web Shield would be scanning local IPs.

That said You could put this in the Web Shield Exclusions AvastUI > Settings > Components > Web Shield > Customise > Exclusions. You could also consider excluding the DRAC executable in the 'Processes to exclude' option.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: URL exclusion in WebShield AVAST not working.
« Reply #6 on: March 19, 2017, 09:27:06 PM »
Hello,

I tested option 1 >> No success

Also added exclusion to the location bullet 3.

Still the same issue.
 :-\

Kind regard,

S.O.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: URL exclusion in WebShield AVAST not working.
« Reply #7 on: March 19, 2017, 10:43:20 PM »
I'm at a loss as to what else to suggest, the only thing that comes to mind is changing the https to http in the exclusion. As I said I just wonder about https in local communication.

In earlier versions of avast there used to be a setting to ignore local communication, but I can't find that option at the moment.

OK did some digging and it is still there.
AvastUI > Settings > Troubleshooting > scroll down (I hadn't gone down far enough) to Redirect Settings. Check the ignore local communication and see if that works. Or try adding the local IP address to the Ignored addresses: field.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: URL exclusion in WebShield AVAST not working.
« Reply #8 on: March 22, 2017, 10:05:25 PM »
Hello David,

First of all, thank you for the time  ;)

I have tried to add the IP address to AvastUI > Settings > Troubleshooting >Redirect Settings with no luck  :(
Also tried only the IP address, tried https://ipaddress and tried http://ipaddress with no success.

The setting "Ignore local communication" was already enabled by default.
Tried this setting disabled but also no success.

It looks to me, that exclusions doesn't apply to the option "Enable HTTPS scanning".
I don't know if this is by design or a bug.

Kind regards,

S.O.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: URL exclusion in WebShield AVAST not working.
« Reply #9 on: March 22, 2017, 10:33:20 PM »
Unfortunately as an avast user, I don't know if https isn't accepted or work in exclusions.

Some time ago when https traffic wasn't scanned it wasn't possible to enter an https url in exceptions, well that isn't entirely correct (it tagged it with http). But it didn't work.

Did you try excluding the process I suggested before:
Quote from: DavidR
That said You could put this in the Web Shield Exclusions AvastUI > Settings > Components > Web Shield > Customise > Exclusions. You could also consider excluding the DRAC executable in the 'Processes to exclude' option.

Something else to try if this isn't already enabled - Web Shield settings - enable the 'Scan traffic from well-known browser processes only.'
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: URL exclusion in WebShield AVAST not working.
« Reply #10 on: March 22, 2017, 10:53:10 PM »
Hi David

I am not sure what to enter in the "Processes to exclude" option.
By entering the website I get a certificate warning. This is correct because the cert. past due.
But when the option "Enable HTTPS scanning" is enabled, web browser doesn't put up the screen with the cert. warning at all.
The website doesn't open at all.
IE 11 show only " Waiting for 192.168.24.10" and the circle goes round and round....

Do you have any ideas where I can find the values I have to enter in "Processes to exclude".

Also tried "enable the Scan traffic from well-known browser processes only." but that doesn't give any better response.

Kind regards,

S.O.


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: URL exclusion in WebShield AVAST not working.
« Reply #11 on: March 22, 2017, 11:50:41 PM »
What is the executable that runs this DRAC (you will have to excuse my ignorance, I have no idea how this works), it is connecting to the internet acting like a browser and the web shield would be trying to monitor that traffic. It is that executable that you have to enter.

Use the browse button (image) to navigate to the executable.

Edit typo.
« Last Edit: March 22, 2017, 11:58:00 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: URL exclusion in WebShield AVAST not working.
« Reply #12 on: March 25, 2017, 08:57:12 PM »
Hi David,

Accessing DRAC5 is the same as opening an https:// website.
The only thing is that this website controls a Dell server remotely.

So you can see and give command to the server without an normal operating system.
It runs on a dedicated hardware card with its own web-interface.

See attachment where you see an example.

Grtz, S.O.




Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: URL exclusion in WebShield AVAST not working.
« Reply #13 on: March 25, 2017, 09:25:48 PM »
Given that I don't have said hardware card "It runs on a dedicated hardware card with its own web-interface."

I'm in an even worse situation than you, as I can't test it. I'm at a loss as to what is going on.

This really needs an avast team member to pick this up.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Alikhan

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2220
Re: URL exclusion in WebShield AVAST not working.
« Reply #14 on: March 25, 2017, 10:37:51 PM »
Hi,

I'll forward this to the devs behind the Web Shield.

You should get a reply by Monday.
« Last Edit: March 25, 2017, 11:07:35 PM by Alikhan »
Windows 10 Home 64-bit • Avast Free (latest stable version) •  Malwarebytes 4 Premium (On-Demand) • Windows Firewall Control • Google Chrome • LastPass • CCleaner • O&O ShutUp10 •