Sarvesh Singh 1 Posted June 7, 2016 Posted June 7, 2016 Hi, We have installed ESS v9.0.381. When we visit banking websites (https://www.onlinesbi.com/) from regular browser, it doesn't ask to switch to secure browser except website https://netbanking.hdfcbank.com/netbanking, we have checked in Internet Explorer but in Google chrome none of the banking websites asks to open secure browser. when we add websites manually then it works only for Internet explorer. Banking protection should detect all the categories of banking and finance related websites. Please check why this is not happening automatically.
Administrators Marcos 5,446 Posted June 7, 2016 Administrators Posted June 7, 2016 Chrome v51 x64 will be supported as of v10 which is currently in the beta phase. If you use a 32-bit version of Chrome, try switching to pre-release updates in the advanced update setup.
Sarvesh Singh 1 Posted June 7, 2016 Author Posted June 7, 2016 (edited) I have checked updating chrome to v51 x64 and installed EIS v10, but its not working.... I checked with IE its working properly. and there are 2 websites, one is asking for secured browser and another one isn't. Not asking for secured browser: https://www.onlinesbi.com/ Asking for secured browser: https://netbanking.hdfcbank.com/netbanking Edited June 7, 2016 by Sarvesh Singh
Administrators Marcos 5,446 Posted June 7, 2016 Administrators Posted June 7, 2016 To put it right, support for Chrome v51 x64 will be added in another build of v10 beta which is planned to be released in approximately one month.
Sarvesh Singh 1 Posted June 8, 2016 Author Posted June 8, 2016 Noted for Google Chrome. But what about Internet Explorer, some of the banking web site doesn't open in secured browser with IE. Example is given above.
itman 1,800 Posted June 8, 2016 Posted June 8, 2016 Not asking for secured browser: https://www.onlinesbi.com/ I just ran a QUALS test on this web site. There are major security issues with it. This might explain why Eset's secure browser is having an issue with the web site. Personally, I would not do any online banking at that web site.
Sarvesh Singh 1 Posted June 8, 2016 Author Posted June 8, 2016 Not asking for secured browser: https://www.onlinesbi.com/ I just ran a QUALS test on this web site. There are major security issues with it. This might explain why Eset's secure browser is having an issue with the web site. Personally, I would not do any online banking at that web site.QUALS_Onlinesbi.png Thanks itman for ur input... This is the banking website and you might have understood that how much security we people need here. It's acceptable that website might have some security issues. But ESET should provide automated option to open banking sites in secured browser... If ESET doesn't then what is the use of bamking protection...
TomFace 539 Posted June 8, 2016 Posted June 8, 2016 (edited) Not asking for secured browser: https://www.onlinesbi.com/ I just ran a QUALS test on this web site. There are major security issues with it. This might explain why Eset's secure browser is having an issue with the web site. Personally, I would not do any online banking at that web site.QUALS_Onlinesbi.png Thanks itman for ur input... This is the banking website and you might have understood that how much security we people need here. It's acceptable that website might have some security issues. But ESET should provide automated option to open banking sites in secured browser... If ESET doesn't then what is the use of bamking protection... Did you try to enter/add the website manually in to the banking protection section? hxxp://support.eset.com/kb6040/ Edited June 8, 2016 by TomFace
Sarvesh Singh 1 Posted June 8, 2016 Author Posted June 8, 2016 Yeah I have tried and its working... But it is not possible to add each and every website. I have few more banking websites with I am facing this issue. That's the reason I am asking if there is any solution to solve this...
itman 1,800 Posted June 8, 2016 Posted June 8, 2016 (edited) Yeah I have tried and its working... But it is not possible to add each and every website. I have few more banking websites with I am facing this issue. That's the reason I am asking if there is any solution to solve this... I assume the version of IE you are using is IE 11? Effective April, 2016, MS updated IE 11 to no longer support the SSL 3.0 protocol: https://blogs.microsoft.com/firehose/2015/04/15/april-update-for-internet-explorer-11-disables-ssl-3-0/ The web site in question uses the SSL 3.0 protocol which is an insecure method for doing encrypted communication. So you are going to have issues connecting to any site using SSL 3.0 protocol with IE 11. I assume you have manually reset IE 11 to allow communication with the SSL 3.0 protocol? Please note that Eset nor any other security solution's banking protection will protect from threats that can exploit use of insecure protocols. Additionally, it is not uncommon for web site servers to downgrade to a lower SSL/TLS protocol when connection issues arise. By allowing the browser to use the SSL protocol, it is possible your connection could be downgraded to SSL 2.0 protocol. If that occurs, Eset will block the connection. By default, Eset does not allow SSL 2.0 connections. Edited June 8, 2016 by itman
itman 1,800 Posted June 8, 2016 Posted June 8, 2016 Hum ........... Eset looks like we have a problem; at least in ver. 8. I have SSL 3.0 disabled in IE 11. Yet, I can connected to this Bank of India web site that only supports SSL 3.0 as shown below with Eset SSL protocol scanning enabled. I also tried excluding this web site from SSL protocol scanning and could also connect to the site w/o issue. I also checked the registry key associated with this i.e. "SSL3Fallback" and it is properly set. Appears SSL protocol scanning is interfering with the browser's protocol fallback capability.
Sarvesh Singh 1 Posted June 15, 2016 Author Posted June 15, 2016 Where are the ESET personnel, no replies??
StrychNinX 0 Posted June 22, 2016 Posted June 22, 2016 browser problem i really need a solution for this.
Administrators Marcos 5,446 Posted June 23, 2016 Administrators Posted June 23, 2016 Our testers have confirmed that BPP works in Chrome x64 with ESET v10.0.171.0 and with the Banking & Payment protection module 1072.
Recommended Posts