Kaspersky
Solved

untrusted root center, Site Blocked "Connection not protected" and can't exclude it. "I understand the risks" is not available. [Solved][Closed]


Userlevel 1
I just installed a pbx virtual machine with a self-signed certificate. Kaspersky Total Security is blocking the site "Connection not protected" However, I am not getting the option to bypass it. The link with "I understand the risks and wish to continue" is not there.



Detailed Report reads:

26.04.2019 08.54.57;SSL connection with invalid certificate detected;192.168.0.3;192.168.0.3;This certificate or the certificate chain is built on an untrusted root center.;Firefox;04/26/2019 08:54:57


It is not a browser problem. The same thing happens with Firefox 66.0.3, Google Chrome 73.0.3683.103 and with IE 11.

I tried the the solution of excluding the website from encrypted connections scan scope as listed here but that still did not help.
https://support.kaspersky.com/common/safemoney/12489#block4


Any suggestion is appreciated.

Thank you,
Gerardo
icon

Best answer by Igor Kurzin 29 April 2019, 10:50

Hi, the resolution would be to add 192.168.0.3 to exclusions. In Kaspersky product open Settings -> Application Control -> Manage applications -> search for Chrome (or another browser) -> in the search results below double click on Chrome (or another browser) -> in the opened window go to tab Exclusions -> click "Do not scan all traffic" and select the option "Do not scan encrypted traffic" -> check the option "Only for specified IP addresses" -> enter the IP address 192.168.0.3 -> Save.

Restart Chrome and check.
View original

This topic has been closed for comments

13 replies

Userlevel 7
Badge +8
Welcome to the new Kaspersky Community! :)

Did You try also in NetWork -> Encrypted Connection Scanning -> Advanced Settings -> enabling -> Do not decrypt SSL connections with EV certificates ?
Userlevel 1
Hi harlan4096. Thank you for your suggestion. Disabling decryption of EV certificates does not help.


Thank you,
Gerardo
Userlevel 7
Badge +8
Please provide more info about the system environment: a virtual machine in VirtualBox? which system? the KTS (version?) where You get certificate issues is running inside that virtual machine?

Thanks.
Userlevel 7
Badge +5
Hi, the resolution would be to add 192.168.0.3 to exclusions. In Kaspersky product open Settings -> Application Control -> Manage applications -> search for Chrome (or another browser) -> in the search results below double click on Chrome (or another browser) -> in the opened window go to tab Exclusions -> click "Do not scan all traffic" and select the option "Do not scan encrypted traffic" -> check the option "Only for specified IP addresses" -> enter the IP address 192.168.0.3 -> Save.
Restart Chrome and check.
Userlevel 1
Hi Igor,

Sorry for the delay getting back to you. Your solution worked perfectly!

Thank you very much for your help!

Regards,
Gerardo
Hello Kaspersky Team,
I face the same issue with Kaspersky Security Cloud. Could you assist?


Thank you in advance
Userlevel 7
Badge +9
I face the same issue with Kaspersky Security Cloud. Could you assist?

Hello @billyber,
Welcome!
  • Have you followed @Igor Kurzin instructions?
IF "yes", please provide the following:

1⃣ Operating system: (a) full name? (b) version? (c) build? (d) release? To find Operating system information: type winver in (Windows) search bar, press enter, the required information is displayed.
2⃣ KSCLOUD (a) version? (b) patch(x)? x=letter, (c) free? or licensed? {see note at the end of my reply}
3⃣Any other Kaspersky software:
IF "yes":
(a) Full name? (b) version? (c) patch(x)? x=letter, (d) free? or licensed?
4⃣ Go to KSCloud application, select More Tools, select Reports, select Detailed Reports, leave ALL Events as default, select the shortest time frame the alerts are shown, preferably 24hrs or 7days, select Export, save the file as a TEXT file, upload to your post, using the Upload icon

Thank you🙏🏽.

Note: Kaspersky free software has (config) limitations, advertising & no Technical Support. If we know this, we ensure we never waste your time, advising you, for example: "contact Technical Support".
1️⃣ Operating system: (a) Windows 10 Pro (b) 1903 (c) OS Build 18362.356 (d) N/A To find Operating system information: type winver in search bar, press enter, the required information is displayed.

2️⃣ KSCLOUD (a) 20.0.14.1085(d)? (b) (d), (c) Licensed {see note at the end of my reply}

3️⃣Any other Kaspersky software:
IF "yes": No
(a) Full name? (b) version? (c) patch(x)? x=letter, (d) free? or licensed?

4️⃣ Go to KSCloud application, select More Tools, select Reports, select Detailed Reports, leave ALL Events as default, select the shortest time frame the alerts are shown, preferably 24hrs or 7days, select Export, save the file as a TEXT file, upload to your post, using the Upload icon See attachment
Userlevel 7
Badge +9
Windows 10 Pro, 1903, 18362.356, KSCLOUD 20.0.14.1085(d) (Premium), Report attached.
Hello @billyber,
Thanks for posting back and the report🙏🏽.
Please wait for my reply.
Thank you
Userlevel 7
Badge +9
Hello @billyber,
  1. Is the issue happening irrespective of the browser chosen?
  2. Have you also installed / activated Virtual environments/software?
  3. Did the issue exist before Teamviewer was installed and used?
Please run GSI & Windows Logs, upload the zip folder to cloud and PM the link to me please?
Thank you.

Hi, the resolution would be to add 192.168.0.3 to exclusions. In Kaspersky product open Settings -> Application Control -> Manage applications -> search for Chrome (or another browser) -> in the search results below double click on Chrome (or another browser) -> in the opened window go to tab Exclusions -> click "Do not scan all traffic" and select the option "Do not scan encrypted traffic" -> check the option "Only for specified IP addresses" -> enter the IP address 192.168.0.3 -> Save.
Restart Chrome and check.


Hi I have the same problem but on MS Edge, this work with Chrome, but MicrosoftEdge is not showing in the list of applications so I cannot setup the exclusion. How can I add MicrosoftEdge to the list of “Manage Applications”

Userlevel 7
Badge +9

Hello  @cguanes,

Welcome!

Edge is not supported in some situations, to know specifically for your issue and so we can guide you, please tell us:

Windows Operating system name & version ?

Kaspersky software name, version & patch

Edge full name and version

Please post back?

Thank you:pray_tone3:

how do I do this for my whole subnet ?