Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Kaspersky Endpoint Security Blocking OpenVPN Connect

Posted on 2016-11-01
11
Medium Priority
?
645 Views
Last Modified: 2016-11-22
I have a windows 7 Pro computer that has Kaspersky Endpoint Security that is installed from Kaseya. The version is 10.2.5.3201. We installed OpenVPN Connect version 2.1.1.102 and when the enduser logs in to OpenVPN Connect they never get an ip. I completely disabled KES and same issue. If i uninstall KES OpenVPN connects fine. I have found that i need to disable IM, Web and Mail filter on KES in order for the VPN client to work. Anyone experience this before an know of a fix so i dont have to disable these filters on KES.
0
Comment
Question by:noclav
  • 3
  • 3
  • 3
  • +1
10 Comments
 
LVL 99

Expert Comment

by:John Hurst
ID: 41869489
Since you know it is a conflict between Kaspersky and Open VPN, try a different VPN client.

We use Symantec Endpoint with NCP Secure Entry. I am not suggesting you change AV, but you could try a different VPN client.
0
 
LVL 11

Expert Comment

by:Maclean
ID: 41869506
Stop monitoring on SSL ports will help.

-Open Kaspersky
-Click 'Settings'.
-Click  'Additional'.
-Click 'Network'
-Uncheck 'Scan encrypted connections'.
-Above "Encrypted Connections, click on 'Select'
-Right-click on each line that has HTTPS or SSL mentioned and click on 'Disable'.
-Save all changes & reboot. Then check again.

It is a common issue with Kaspersky. "Disable" Does not seem to truly disable everything.
0
 
LVL 71

Expert Comment

by:Qlemo
ID: 41869744
You can also try to use a different port than 443 to keep KES from trying to scan traffic.
0
Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

 

Author Comment

by:noclav
ID: 41870568
Under settings tab i have Antivirus Protection, Scheduled Tasks, Advanced Settings. Under advanced i dont see a network option.
0
 
LVL 11

Expert Comment

by:Maclean
ID: 41871326
My bad. mixed up endpoint security 10 with Pure 3. I work with both depending on customer.
For EPS10 try this solution article (From Kaseya on Kaspersky ironicaly :)
0
 

Author Comment

by:noclav
ID: 41871357
thanks for the article but I saw that and that is for the servers. my issue is with the windows 7clients.
0
 
LVL 11

Expert Comment

by:Maclean
ID: 41871441
Disabling network drivers should be the same for both OS

I would download the reg file, check where it tries to change something in registry for W7, and compare.
Backup current settings, and make the change to test.
0
 
LVL 71

Expert Comment

by:Qlemo
ID: 41891233
Objection: The question was specific about this combination of products. Recommending a totally different combi is no solution in general. Also we do not know of any of the other suggestions would work. So the question should be considered unresolved and deleted.
0
 

Accepted Solution

by:
noclav earned 0 total points
ID: 41891932
I've requested that this question be deleted for the following reason:

This is a kaspersky issue that they are working on a patch to resolve this.
0
 
LVL 71

Expert Comment

by:Qlemo
ID: 41891933
Objection: In that case you should post that as a comment and then accept your own answer, so others having the same issue will know.
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ransomware - Defeated! Client opened the wrong email and was attacked by Ransomware. I was able to use file recovery utilities to find shadow copies of the encrypted files and make a complete recovery.
It’s a season to be thankful, and we’re thankful for users like you who engage on site, solve technology problems, and network with others in the industry. What tech are we most thankful for? Keep reading.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

824 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question