Web protocols

By default, ESET Endpoint Antivirus is configured to monitor the HTTP protocol used by most Internet browsers.

In Windows Vista and later, HTTP traffic is always monitored on all ports for all applications. In Windows XP, you can modify the Ports used by HTTP protocol in Advanced setup (F5) > Web and email > Web access protection > Web protocols > HTTP scanner setup. HTTP traffic is monitored on the specified ports for all applications, and on all ports for applications marked as Web and email clients.

ESET Endpoint Antivirus also supports HTTPS protocol checking. HTTPS communication uses an encrypted channel to transfer information between server and client. ESET Endpoint Antivirus checks communication utilizing the SSL (Secure Socket Layer), and TLS (Transport Layer Security) protocols. The program will only scan traffic on ports defined in Ports used by HTTPS protocol, regardless of operating system version.

Encrypted communication will be not scanned when default settings are in use. To enable the scanning of encrypted communication, navigate to SSL/TLS in Advanced setup, click Web and email > SSL/TLS and select Enable SSL/TLS protocol filtering.