Jump to content

To many CRL and OCSP connections from EES.


borman

Recommended Posts

Hello.

Recently switched to Eset Endpoint Security v.11. I noticed that ekrn.exe to many times for a day establish connection with sites that check certificates (digicert, comodo, etc). How to stop this flood? I did not find an option to turn it off.

The second question. How to activate a pop-up window, in the lower right corner, about a successful signature update? I tried all the options. The window never appears.

Link to comment
Share on other sites

  • Administrators

You could possibly turn off the SSL filtering to at least reduce the number certificate verifications but why would you trade off safety for reducing the amount of communication with CA servers. Does it badly affect performance or you are seeing a higher increase in Internet traffic because of this?

Regarding the notifications about engine updates, you can enable them in the Desktop notifications setup:

image.png

Link to comment
Share on other sites

1: Privacy issue and network flood. Distracts from the main things.

2: Option "Detection Engine was succesfully updated" many years only ON. That's why I ask why there is no notification on desktop.

Edited by borman
Link to comment
Share on other sites

  • Administrators

Browsers themselves verify SSL certificates so I assume you would have to block HTTPS communication completely on a firewall to prevent certificate verification.

Link to comment
Share on other sites

You have a bug in gui EES v10/11. Real option that showing pop-up after signatures update is not visible in gui and you cannot enable. But it can be fixed with two way:

1: Change registry

[HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Config\gui\UI_CONFIG\Notifications\EkrnScannerUpdated]
"ShowOnDesktop"=dword:00000001

or easy way

2: Edit settings backup XML file

 </ITEM>
     <ITEM NAME="EkrnScannerUpdated">
      <NODE NAME="ShowOnDesktop" TYPE="number" VALUE="1" />
      <NODE NAME="SendEmail" TYPE="number" VALUE="0" />
      <NODE NAME="WriteToLog" TYPE="number" VALUE="1" />
     </ITEM>

Link to comment
Share on other sites

  • Administrators

There is no bug. Checking the checkbox in my previous screenshot enables notifications about engine updates:

image.png

 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...