Eset blocking entire internet access.

[Bradh 0]

Over the past week have received calls from several clients that they cant get on the Internet with any of the browsers. After investigating they can still ping sites at the Command prompt.

Fix was to uninstall Eset Nod32 and reinstall. These are clients at different locations using XP, Win7 and Win 10.

So far 10 PC affected. Bad update??????

 

Brad

[Marcos 5,235]

We haven't been reported any such issues. Do you mean that even pinging a particular domain didn't work? ESET NOD32 Antivirus doesn't contain a firewall driver that might be involved in an issue when the communication is blocked completely. Does temporarily disabling web protection or protocol filtering make a difference?

[rlcronin 3]

I've had a similar experience with the last two Windows 10 fast-ring insider builds, although in my case it wasn't all connectivity that was lost, just https connections didn't work until I uninstalled and reinstalled. Maybe related. Maybe not. I don't expect eset to do anything about it in my case since I knowingly opted for the fast ring, so anything that breaks is my responsibility to deal with myself.

--

bc

[bandon 0]

i currently have the same problem, but for me it's even worse

i have internet connection because steam can show who is online, but i can't download anything, no steam game updates, no sites.

as soon as i uninstalled nod32 i had full internet acces again, but when i try to reinstall the problem instantly comes back, i can't even activate nod32 after it's installed

 

the problem started this morning, as soon as i started the computer, but yesterday as i close down the computer windows 10 did do an update, so maybe this is a compatibility issue? still if it is you should look into it becuase the problem will prevent any affected users from getting a fix downloaded without uninstalling nod32 first

 

is there a way for me to fix this right now, because it annoys me greatly that i have to use a free version of avast while i paid for nod32

[Sander 0]

i found out that going to options>advanced options>web and mail and disable that it should work again 

 

i have no idea if there is going to be an update for it to fix it but it would be nice

 

so far i only encountered it at windows 10

[Marcos 5,235]

Does the problem occur with any browser? And with both http and https websites? If so, enable advanced protocol filtering logging in the advanced setup -> Tools -> Diagnostics, reproduce the issue and then pm me the 2 pcapng files from the Diagnostics folder. Also enclose the output from ESET Log Collector as per the instructions at hxxp://support.eset.com/kb3466/.

[michaelnos 0]

I have the same problem in a domain environment with Era server, after about 12:00 on 24 Mar 2016, some users started to complain about no internet access on https sites. Can ping sites etc, so tested it on one pc, after eset is uninstalled pc restarted, the https sites work, when installing again and updating, it is again blocking https sites.

Please advice.

[michaelnos 0]

Yes the problem occur with any browser, temporarily disabling nod32 doesn't work

[bandon 0]

i'm happy to report i failed to reproduce the issue

i tried though

i had some trouble when i installed nod32 without uninstaling avg (my bad, nod32 did warn me it could cause issues)

but once nod32 had been succesfully installed again the problem didn't occure, i have saved your instructions for what to do, so if it should happen again i should be able to give you those filles right away

 

thanks for the help though

[jopierce 0]

I've run into this problem twice on fast ring builds of windows 10, currently on 14295 but it happened on the previous build as well.

Both times it was triggered after updating Nvidia graphics drivers and rebooting.

Browsers (chrome/edge/IE) work in safe mode and if I disable Eset from safe mode, browsers continue to work in normal mode.

 

Disabling protocol filtering also seems to fix it.

I just ran a capture. I'll PM the 2 PCPANG files.

[Marcos 5,235]

Please try the following and let us know about your findings:
 
1. Temporarily disable SSL/TLS filtering
2. In Internet Explorer -> Internet options -> Advanced, disable all SSL and TLS versions and leave only TLS 1.2 selected.
3. In Internet Explorer try to open https://www.ukf.sk/ and let us know if it opens alright
4. Revert the SSL/TLS changes back.

 

Have you recently installed some Windows updates after which the issue started to manifest?

[jopierce 0]

Please try the following and let us know about your findings:

 

1. Temporarily disable SSL/TLS filtering

2. In Internet Explorer -> Internet options -> Advanced, disable all SSL and TLS versions and leave only TLS 1.2 selected.

3. In Internet Explorer try to open https://www.ukf.sk/ and let us know if it opens alright

4. Revert the SSL/TLS changes back.

 

Have you recently installed some Windows updates after which the issue started to manifest?

No, that does not work.

It behaves exactly the same, blocking all traffic just as it did with TLS 1.0, 1.1 enabled.

 

The only update I installed recently was new Nvidia drivers since the last time this happened.

The last time it happened, I did a full system reset and it worked fine until those drivers updated.

 

I am on windows 10 preview 14295.rs1_release.160318-1628

[hyaenna 0]

Hello everyone,

 

the same for me. The only way to have eset and internet together is to disable filtering protocol in INTERNET AND MESSAGING (don't know if these words are good, I saw it in french).

Don't know why but for those who paid this AV, it's bad...

[Marcos 5,235]

No, that does not work.

It behaves exactly the same, blocking all traffic just as it did with TLS 1.0, 1.1 enabled.

Does that mean that disabling SSL/TLS filtering doesn't make any difference and you're unable to open the said website using TLS 1.2 if it's the only secure protocol allowed in the IE setup? Could also somebody else confirm or deny these findings?

[jopierce 0]

 

No, that does not work.

It behaves exactly the same, blocking all traffic just as it did with TLS 1.0, 1.1 enabled.

Does that mean that disabling SSL/TLS filtering doesn't make any difference and you're unable to open the said website using TLS 1.2 if it's the only secure protocol allowed in the IE setup? Could also somebody else confirm or deny these findings?

 

That is exactly what this means.

Disabling SSL/TLS filtering alone does not work at all. I have to completely disable protocol filtering to hit any websites.

[Proxdata 0]

I have the same problem. New computers with NOD32 Antivirus new installed. After reboot, no InternetAccess,. I Uninstalled NOD32 Antivirus and all works fine again. Installing Antivirus again, works. After reboot, NOT working!

Windows 10.

There must be a fix for this or I will install Panda on my custumers PCs.

[Marcos 5,235]

Does switching to pre-release updates make a difference?

[jopierce 0]

Does switching to pre-release updates make a difference?

Not completely but it did give me some interesting behavior.

On pre-release, I enabled protocol filtering and everything was blocked.

I disabled protocol filtering and it worked fine.

I refreshed this page, re-enabled protocol filtering and I can currently post to this site w/filtering turned on, however, I cannot get to any other sites.

[Marcos 5,235]

If somebody continues to encounter issues with http or https communication even with Internet protection module 1226.26 installed, please uninstall EAV v9 and install it from scratch. We've found a bug which occurs during a major system upgrade that would cause http / https communication to stop working. If you have Windows 10 and are on the fast ring, temporarily switch to slow ring until the issue is fixed by a newer Internet protection module. ESS nor any other products are not affected.

[wydmex 0]

I've got the same issues and enjoy living my life in the fast ring on Windows 10, but not so much when I'm using Windows Defender 

Any ideas when this issue might be fixed and I can reinstall the product I'm paying for? 

 

Thanks!

[stream2stream 0]

I too have the same problem but it seems to be related to v8, I disabled the Web Access Protection under the Advanced Options and it seems to work now (windows 10).  BTW it only started happening recently with a win10 machine that I hadn't used for a while, so it's running through quite a few updates which may fix the problem, but for now disabling WAP seems to be a temporary way forward.  What's the implication of doing this in terms of overall security on the machine??

[Marcos 5,235]

Disabling web access protection from gui should work only in case when a particular url is blocked and an alert is displayed. If you don't get any alert, rather disabling protocol filtering should help.

Of course, disabling neither option is recommended as it would expose your computer at risk. I'd suggest uninstalling v8 and installing v10 with default settings to see if it solves the issue.

[SteveC 0]

Apparently we're back to this again. I'm having the same issues as described above (blocked internet access for everything), can we get this fixed? 

 

Platform: Windows 7 Professional

Edited August 17, 2017 by SteveC
add more information

[Marcos 5,235]

1 minute ago, SteveC said:

Apparently we're back to this again. I'm having the same issues as described above, can we get this fixed?

If you are really using ESET NOD32 Antivirus, there's no chance that ESET would block all network communication as it doesn't contain a firewall. Only HTTP(S), POP3(S) and IMAP(S) communication can be blocked. Please clarify what communication is blocked. If http, is also https blocked or vice-versa?

Does pausing web access protection make a difference? If not, what about temporarily disabling protocol filtering in the advanced setup?

[SteveC 0]

No internet access, no email on all laptops and 1 desktop that have ESET installed, heck even ESET can't update the database. I know I have access though, my iPad connects like a charm. Last program update from ESET (not the database update mind you), made everything go wonky.