[KB5833] Manage SSL/TLS protocol filtering in ESET Windows home and small office products

Issue

• Network traffic scanner
• Exclude an Application or IP address from Network traffic scanner
• SSL/TLS
• Remove a certificate from the list of Certificate rules
• SSL/TLS mode
• SSL/TLS application scan rules

Solution

Network traffic scanner

Network traffic scanner is enabled by default. To disable or re-enable protocol filtering for troubleshooting:

1. Open the main program window of your ESET Windows product.

2. Press the F5 key to open Advanced setup.

3. Click Detection engine, expand Network traffic scanner and click the toggle next to Enable Network traffic scanner to enable or disable this feature. Click OK to save the changes and exit Advanced setup.

   Risk of disabling SSL/TLS protocol filtering

   With more online content using an "HTTPS everywhere" approach, SSL/TLS scanning is increasingly important because threats can be hidden inside encrypted communications.

   ESET products are designed to detect threats at the application level regardless of network filtering settings. However, for the most secure configuration, we recommend leaving SSL/TLS protocol filtering enabled whenever you can.

   

Exclude an Application or IP address from Network traffic scanner

1. Open the main program window of your ESET Windows product.

2. Press the F5 key to open Advanced setup.

3. Click Protections → Web access protection, expand Web access protection and click Edit next to Excluded applications or Excluded IPs (the example below applies to Excluded applications option).

   

4. Click Add. Select an application or type in an IP address and click OK → OK.

   

5. The new application/IP address has been added to the Protocol filtering exclusion list. To edit or remove an application/IP address, select the applicable application/IP address and click Edit or Delete. Click OK → OK to save the changes and exit Advanced setup.

   

SSL/TLS

SSL/TLS is enabled by default. You can disable or re-enable SSL/TLS Scanning for troubleshooting purposes.

1. Open the main program window of your ESET Windows product.

2. Press the F5 key to open Advanced setup.

3. Click Protections → SSL/TLS and click the toggle next to Enable SSL/TLS protocol filtering to enable or disable this feature. Click OK to save the changes and exit Advanced setup.

   

Remove a certificate from the list of Certificate rules

1. Open the main program window of your ESET Windows product.

2. Press the F5 key to open Advanced setup.

3. Click Protections → SSL/TLS and click Edit next to Certificate rules.

   

4. Select the applicable certificate, click Delete and click OK → OK to save the changes and exit Advanced setup.

   

SSL/TLS mode

Use the drop-down menu to select the filtering mode you want to use. See detailed descriptions of each available filtering mode.

1. Open the main program window of your ESET Windows product.

2. Press the F5 key to open Advanced setup.

3. Click Protections → SSL/TLS and select a mode from the SSL/TLS mode drop-down menu. Click OK to save the changes and exit Advanced setup.

   

SSL/TLS application scan rules

Exclude a new application from SSL/TLS scanning. See additional information about SSL/TLS application scan rules. 

1. Open the main program window of your ESET Windows product.

2. Press the F5 key to open Advanced setup.

3. Click Protections → SSL/TLS and click Edit next to Application scan rules.

   

4. Click Add. Click the Browse icon next to the Application field and select the applicable application. Select the Scan action and click OK → OK → OK to save the changes and exit Advanced setup.