Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: Privacy Settings not working with HTTPS

  1. #1
    big_dawg Guest

    Default Privacy Settings not working with HTTPS

    Can someone out there check their machine and make sure privacy settings are working with HTTPS.
    I have two different machines one with ZAP 7.0.462 other with ZAISS 7.0.462 both have suddenly quit filtering HTTPS.
    The way I check this is by going to HTTPS:\\www.java.com the HTTPS version is not blocked at all while the HTTP version of Java.com is blocked fine. I have all my privacy settings set to maximum. I block everything on a site and go in manually and unblock trusted sites.
    Thanks in advanced to those who check for me.
    BTW please make sure your AV/AS is updated as of 02/29/2008 this is my about on this machine.

    ZoneAlarm Security Suite version:7.0.462.000
    TrueVector version:7.0.462.000
    Driver version:7.0.462.000
    Anti-virus engine version:3
    Anti-virus SDK version:5.0.1.82
    Anti-virus signature DAT file version:945634292
    Anti-spyware engine version:5.0.189.0
    Anti-spyware signature DAT file version:01.200802.3405
    AntiSpam version:5.0.6.8903

    Big_Dawg

    Message Edited by Big_Dawg on 02-29-2008 01:40 AM

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,283

    Default Re: Privacy Settings not working with HTTPS

    Hi!as far as I know, privacy control never filtered https sessions. HTTPS sessions are encrypted and will not be intercepted by the ZA privacy control.If you need more information you better check with ZA technical support: www.zonelabs.com/tsform Cheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    big_dawg Guest

    Default Re: Privacy Settings not working with HTTPS

    Ok I finally received a reply from ZA on this. Here is there reply to my question.


    Yes, ZA should filter both forms of traffic for viruses and firewall threats, the privacy will also work on https. Are you having trouble with it not filtering or something of that nature?

    Ed
    Tech Support
    ZoneAlarm, a division of Checkpoint Software

    I believe this is correct ZA used to filter HTTPS on my system. Fax can you or anyone else test your ZAP or ZAISS install to see if indeed it is just an issue on my three installs or is an issue with ZA. To test just set all filter settings to maximum you will have to customize both the cookies and mobile code tabs and check every option make sure https:\\www.java.com or http:\\www.java.com are allowed under the sites list. Clear on cache and navigate to each site to see if both are indeed blocked.

    Thanks
    Big_Dawg

    Message Edited by Big_Dawg on 03-03-2008 09:18 AM

  4. #4
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,283

    Default Re: Privacy Settings not working with HTTPS

    Hi!
    Uuuhm... I don't think privacy ever worked with https...
    If it supposed to work with https than there is a bug since looong time ago.

    Follow up with TS and let us know.

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  5. #5
    big_dawg Guest

    Default Re: Privacy Settings not working with HTTPS

    Up until a couple weeks ago it was filtering HTTPS on my systems. I am very sure of this because I recently joined a credit union and had to allow the site in order to complete the application (and it is an HTTPS site). I run with all settings blocked except the cookie expiration all others are check on every tab. If you normally do not run with all mobile code blocked you probably would have never noticed the change in recent days. I believe Ed is saying that it should block HTTPS do you know any techs at ZA you can contact and get confirmation on this. I have replied to the email Ed sent me requesting he confirm this as well.
    Big_Dawg

    Message Edited by Big_Dawg on 03-03-2008 09:41 AM

  6. #6
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,283

    Default Re: Privacy Settings not working with HTTPS

    Hi!
    no I don't know whom you can contact... you should follow-up (reply) to the ZA TS

    ... and I am 99% positive that ZA privacy ever worked with https. ZA may block your bank site because it could contain part of the links that are not encrypted. Some banks, to make connection faster, encrypt only the sending of certain information (e.g. IDs/PWs).

    When communication is encrypted there is no way to intercept it unless you use 'fake' certificates in-between like some security tool do nowadays to filter https pages.

    Cheers,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  7. #7
    big_dawg Guest

    Default Re: Privacy Settings not working with HTTPS

    Reply was sent. Hopefully he will check with other techs to confirm. I see your reasoning and maybe I just always believed it filtered the secure sites. I was running KAV beta up until recently which does filter certificates I believe. Maybe some the combo of KAV and ZAP made for a filtering system .
    Big_Dawg

  8. #8
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,283

    Default Re: Privacy Settings not working with HTTPS

    Hi!yes KAV does this weird replace of certificate to filters https.I personally don't like the idea of a third party software able to break-in into SSL.When doing SSL I want to be sure the communication is encrypted end-to-end to protect my sensitive and confidential data.If something is breaking into it I have no insurance that another third party software (malware) may not take advantage and use a shortcut to sniff my communication.Cheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  9. #9
    big_dawg Guest

    Default Re: Privacy Settings not working with HTTPS

    Just a follow up on this,
    The Tech handling this issue with ZA said he tested ZAP with HTTPS and said that mobile code blocking feature did work with his system. They do not with mine for HTTPS. He did mention that the ad blocking portion does not seem to work with HTTPS. Here is the email reply he sent.


    I double checked my testing and used the Privacy Advisor and it appears that Ads on https://www.java.com were not blocked but Objects(MIME, Java, etc) were blocked although the secure site did not fully load with Privacy turned on to the max. To me this would suggest that HTTPS does not filter for Ads or Cookies by the Privacy but the Mobile Code Control still applies to secure sites and that can make accessing secure sites impossible under certain circumstances. I uses the latest version of IE with the latest version of ZA Internet Security Suite on a fully up to date Windows XP machine. Now from my experiences as a Tech Support agent, I would say that the Privacy does in fact filter HTTPS because I answer a lot of questions regarding not being able to access sites like, online banking and bill pay, shopping websites and other secure sites by have people adjust their privacy settings and they reply to me letting me know that this has fixed the problem. I did not fully test it!
    however to discern which exact settings we're causing the problems and I can conclude that Mobile Code Control will filter HTTPS.

    Ed
    Tech Support
    ZoneAlarm, a division of Checkpoint Software.
    Thanks
    Big_Dawg
    IF anyone has any ideas for getting my mobile code backup and running for HTTPS I would be glad to see them.

  10. #10
    Join Date
    Dec 2005
    Posts
    9,057

    Default Re: Privacy Settings not working with HTTPS

    Which browser is being used?
    The Privacy is really designed for the Internet Explorer and still works best with the Internet Explorer.

    Oldsod.
    Best regards.
    oldsod

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •