To many CRL and OCSP connections from EES.

[borman 0]

Hello.

Recently switched to Eset Endpoint Security v.11. I noticed that ekrn.exe to many times for a day establish connection with sites that check certificates (digicert, comodo, etc). How to stop this flood? I did not find an option to turn it off.

The second question. How to activate a pop-up window, in the lower right corner, about a successful signature update? I tried all the options. The window never appears.

[Marcos 5,735]

You could possibly turn off the SSL filtering to at least reduce the number certificate verifications but why would you trade off safety for reducing the amount of communication with CA servers. Does it badly affect performance or you are seeing a higher increase in Internet traffic because of this?

Regarding the notifications about engine updates, you can enable them in the Desktop notifications setup:

[borman 0]

1: Privacy issue and network flood. Distracts from the main things.

2: Option "Detection Engine was succesfully updated" many years only ON. That's why I ask why there is no notification on desktop.

Edited September 10, 2024 by borman

[Marcos 5,735]

Browsers themselves verify SSL certificates so I assume you would have to block HTTPS communication completely on a firewall to prevent certificate verification.

[borman 0]

You have a bug in gui EES v10/11. Real option that showing pop-up after signatures update is not visible in gui and you cannot enable. But it can be fixed with two way:

1: Change registry

[HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Config\gui\UI_CONFIG\Notifications\EkrnScannerUpdated]
"ShowOnDesktop"=dword:00000001

or easy way

2: Edit settings backup XML file

 </ITEM>
     <ITEM NAME="EkrnScannerUpdated">
      <NODE NAME="ShowOnDesktop" TYPE="number" VALUE="1" />
      <NODE NAME="SendEmail" TYPE="number" VALUE="0" />
      <NODE NAME="WriteToLog" TYPE="number" VALUE="1" />
     </ITEM>

[Marcos 5,735]

There is no bug. Checking the checkbox in my previous screenshot enables notifications about engine updates: