Solved

Kaspersky Endpoint Security Blocking OpenVPN Connect

Posted on 2016-11-01
11
234 Views
Last Modified: 2016-11-22
I have a windows 7 Pro computer that has Kaspersky Endpoint Security that is installed from Kaseya. The version is 10.2.5.3201. We installed OpenVPN Connect version 2.1.1.102 and when the enduser logs in to OpenVPN Connect they never get an ip. I completely disabled KES and same issue. If i uninstall KES OpenVPN connects fine. I have found that i need to disable IM, Web and Mail filter on KES in order for the VPN client to work. Anyone experience this before an know of a fix so i dont have to disable these filters on KES.
0
Comment
Question by:noclav
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 3
  • +1
11 Comments
 
LVL 95

Expert Comment

by:John Hurst
ID: 41869489
Since you know it is a conflict between Kaspersky and Open VPN, try a different VPN client.

We use Symantec Endpoint with NCP Secure Entry. I am not suggesting you change AV, but you could try a different VPN client.
0
 
LVL 11

Expert Comment

by:Maclean
ID: 41869506
Stop monitoring on SSL ports will help.

-Open Kaspersky
-Click 'Settings'.
-Click  'Additional'.
-Click 'Network'
-Uncheck 'Scan encrypted connections'.
-Above "Encrypted Connections, click on 'Select'
-Right-click on each line that has HTTPS or SSL mentioned and click on 'Disable'.
-Save all changes & reboot. Then check again.

It is a common issue with Kaspersky. "Disable" Does not seem to truly disable everything.
0
 
LVL 70

Expert Comment

by:Qlemo
ID: 41869744
You can also try to use a different port than 443 to keep KES from trying to scan traffic.
0
PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

 

Author Comment

by:noclav
ID: 41870568
Under settings tab i have Antivirus Protection, Scheduled Tasks, Advanced Settings. Under advanced i dont see a network option.
0
 
LVL 11

Expert Comment

by:Maclean
ID: 41871326
My bad. mixed up endpoint security 10 with Pure 3. I work with both depending on customer.
For EPS10 try this solution article (From Kaseya on Kaspersky ironicaly :)
0
 

Author Comment

by:noclav
ID: 41871357
thanks for the article but I saw that and that is for the servers. my issue is with the windows 7clients.
0
 
LVL 11

Expert Comment

by:Maclean
ID: 41871441
Disabling network drivers should be the same for both OS

I would download the reg file, check where it tries to change something in registry for W7, and compare.
Backup current settings, and make the change to test.
0
 
LVL 70

Expert Comment

by:Qlemo
ID: 41891233
Objection: The question was specific about this combination of products. Recommending a totally different combi is no solution in general. Also we do not know of any of the other suggestions would work. So the question should be considered unresolved and deleted.
0
 

Accepted Solution

by:
noclav earned 0 total points
ID: 41891932
I've requested that this question be deleted for the following reason:

This is a kaspersky issue that they are working on a patch to resolve this.
0
 
LVL 70

Expert Comment

by:Qlemo
ID: 41891933
Objection: In that case you should post that as a comment and then accept your own answer, so others having the same issue will know.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Do you know what to look for when considering cloud computing? Should you hire someone or try to do it yourself? I'll be covering these questions and looking at the best options for you and your business.
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question