Jump to content

Eset not working with VPN extensions


Recommended Posts

Hi,

   When I use my adguard vpn extension in firefox the “web protection” is not working as expected.

1-      It allows to download malwares

2-      eset warning page is missing

I’ve tested that with both adguard and ivacy VPN add-ons same issue.

 

Link to comment
Share on other sites

You will have to provide specifics of malware not being blocked when a browser VPN extension is in effect. For example, Eset detects the malware w/o the extension in use, but it does not when the extension is in use.

Link to comment
Share on other sites

It’s been detected by real time protection not web protection.

For example:

Go to https://www.eicar.org/download-anti-malware-testfile/

Try downloading the zip EICAR when vpn active, the archive should be scanned by web protection but not the real time, the download completed without notification.

(Clear your browsing cash) repeat the above but the vpn off a notification should be appear.

This also happened for infected JS after they downloaded the real time detected them.

 

In the other point https://rank.egybest.club/tv

Alert of (Potentially unwanted content found) should ask the user if you want to ignore or go back, but not with vpn active.

Link to comment
Share on other sites

  • ESET Insiders

I tested with VPN enabled (system wide VPN not extension) and web protection works OK for me.

Maybe extension is encrypting network traffic which is not decrypted by Eset, so content is scanned only after it's downloaded?

Link to comment
Share on other sites

Here's my take on what is going on when these VPN browser extensions are used.

Eset Web protection feature monitors HTTP/HTTPS network traffic since this is the protocol used by browsers. I strongly suspect that these VPN extensions are using a different protocol to download files. One possibility is secure FTP.

Now Eset Web protection will detect and monitor port redirects from 80/443. However, I assume the original port has to be one of the aforementioned.

A network traffic monitor has to be deployed to determine exactly how these browser VPN extensions download files.

Link to comment
Share on other sites

I saw Bitdefender's web protection doesn't work at all in Firefox when Windscribe extension is enabled. No issue on Chromium browsers. I told Bitdefender about it, and they had no intention to do anything about it. 

I'm wondering if these two things are similar. 

Link to comment
Share on other sites

This might be it:

  • Impossible detection: AdGuard VPN tunnel uses HTTPS/2 protocol, which makes it virtually impossible to flag and block. This makes it ideal for anything from unblocking Netflix or bypassing restrictive firewalls, especially in censorship-heavy countries like China.
  • Future-proofing: The company is planning a switch to HTTPS/3 and QUIC in the future for even better server communication.

https://vpnoverview.com/vpn-reviews/adguard-vpn/

I don't believe Eset supports HTTPS/2 yet? And most definitely, not HTTPS/3 and QUIC.

Edited by itman
Link to comment
Share on other sites

The strange thing the VPN app working fine with eset but not the extension.

I’ve also tested with Kaspersky both app and extension work.

 

@Marcos

 

Yes, I use Firefox 106, I also test the chrome 107, same result.

Windows 11 22H2 OS.

Link to comment
Share on other sites

I did the test here AMTSO Security Features Check Tools - AMTSO It’s working like you said.

But here Download Anti Malware Testfile – Eicar when I disabled the real time and keep web protection sometimes eicar.com downloaded or I need to refresh the page to download.

Still eset alert page is missing and for sure web protection not working as without VPN.

Link to comment
Share on other sites

2 hours ago, User13 said:

But here Download Anti Malware Testfile – Eicar when I disabled the real time and keep web protection sometimes eicar.com downloaded

Never ever disable Eset real-time protection to perform testing.

Eset is an integrated product and uses all its all its components in various combinations in malware detection. In this case, Web access protection will interface with real-time protection for malware sigs., blacklists, etc.. Finally when you disable Eset's real-time protection, Windows Defender on Win 10/11 should immediate start up and set itself as Windows real-time protection. Eset Web access protection is designed to interface with Eset real-time protection; not WD real-time protection. Bottom line - you were actually testing WD's web access protection which in reality, doesn't exist.

Edited by itman
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...