ESET Smart Security Premium – Table of Contents

Encrypted network traffic

If your system is configured to use SSL/TLS scanning, a dialog window prompting you to choose an action will be displayed in two situations:

1.If a website uses an unverifiable or invalid certificate, and ESET Smart Security Premium is configured to ask the user in such cases (by default yes for unverifiable certificates, no for invalid ones), a dialog box will ask you whether to Allow or Block the connection. If the certificate is not located in the Trusted Root Certification Authorities store (TRCA), it is considered untrusted.

2.If SSL/TLS mode is set to Interactive mode, a dialog box for each website will ask whether to Scan or Ignore the traffic. Some applications verify that their SSL/TLS traffic is not modified or inspected by anyone. In such cases, ESET Smart Security Premium must Ignore that traffic to keep the application working.

In both cases, the user can choose to remember the selected action. Saved actions are stored in the Certificate rules.

Note

Illustrated examples

The following ESET Knowledgebase article may only be available in English:

•Certificate notifications in ESET Windows home products

•"Encrypted network traffic: Untrusted certificate" is displayed when visiting web pages

note

ESET Smart Security Premium can inspect supported encrypted traffic for security purposes. However, the dialog window does not provide detailed traffic analysis, DNS over HTTPS (DoH) monitoring, packet capture or protocol-level visualization. For troubleshooting and advanced network diagnostics, use operating system logging tools or third-party network analysis tools.