Solving problems with Network traffic scanner

If you experience problems with your browser or email client, the first step is determining if Network traffic scanner is responsible. To do that, try temporarily disabling Network traffic scanner in Advanced setup > Detection engine > Network traffic scanner (remember to turn it back on after you are finished, otherwise, your browser and email client will remain unprotected). If your problem disappears after turning it off, here is a list of common problems and a way to solve them:

Update or secure communication problems

If your application complains about the inability to update or that a communication channel is not secure:

• If you have SSL/TLS enabled, try temporarily turning it off. If that helps, you can keep using SSL/TLS and make the update work by excluding the problematic communication:
  Disable SSL/TLS. Rerun the update. There should be a dialog informing you about encrypted network traffic. Ensure the application matches the one you are troubleshooting, and the certificate looks like coming from the server it is updating from. Then choose to remember the action for this certificate and click ignore. If no more relevant dialogs are shown, you can switch the filtering mode back to automatic, and the problem should be solved.

• If the application in question is not a browser or email client, you can completely exclude it from Web access protection (doing this for the browser or email client would leave you exposed). Any application that had its communication filtered in the past should already be in the list provided to you when adding an exception, so manually adding one should not be necessary.

Problem accessing a device on your network

If you cannot use any device's functionality on your network (this could mean opening a web page of your webcam or playing video on a home media player), try adding its IPv4 and IPv6 addresses to the list of excluded addresses.

Problems with a specific website

You can exclude specific websites from Web access protection using URL address management. For example, if you cannot access https://www.gmail.com/intl/en/mail/help/about.html, try adding *gmail.com* to the list of excluded addresses.

Error "Some of the applications capable of importing the root certificate are still running"

When you enable SSL/TLS, ESET Endpoint Security ensures that installed applications trust the way it filters SSL protocol by importing a certificate to their certificate store. Some applications may require a restart to import a certificate. This includes Firefox and Opera. Verify that none of them are running (the best way to do this is to open Task Manager and ensure there is no firefox.exe or opera.exe under the Processes tab), then hit retry.

Error about an untrusted issuer or invalid signature

This most likely means that the import described above failed. First, ensure that none of the mentioned applications are running. Then disable SSL/TLS and enable it back on. This reruns the import.