Java Pages dont work unless FW disabled

JPD
JPD Posts: 5
in Business Security

Some time over the past few weeks an F-Secure update has stopped the ability of Java applets from running.  These are legitimate consoles used for managing storage or simply for Java testing. I cant find anything in Google on this but its deffinately not browser related...

 

Anyone got any ideas, its annoying have to 'allow all traffic' for something that should already be allowed...

 

Thanks

JP

Like

Comments

  • Jari-P
    Jari-P Posts: 79 F-Secure Product Expert

    Hi JPD,

     

    Latest Java version is using IPv6 traffic. Please allow IPv6 from the F-Secure client.

     

    F-Secure -> Settings -> Network connections -> Settings -> Select IPv6 traffic filtering options : normal

    Like
  • JPD
    JPD Posts: 5

    Hi Jari-P

     

    Thanks for your reply, this is already set to Normal.

     

    JP

    Like
  • Jari-P
    Jari-P Posts: 79 F-Secure Product Expert

    Hi JPD,

     

    Try reinstalling Java and F-Secure application one more time. If the problem persist please contact our technical support.

     

    http://www.f-secure.com/en/web/business_global/support/contact/request

     

    Please provide fsdiag file also in the ticket

     

    http://www.f-secure.com/en/web/home_global/support/contact/fsdiag

     

     

     

    Like
  • jackma
    jackma Posts: 57

    Hi,

     

    please make sure the "remote host" value of your firewall rule looks like this:

    0.0.0.0/0,::0

     

    and not like this:

    0.0.0.0/0 (missing the ipv6 parameter).

     

    "0.0.0.0/0" (ipv4) and "::0" (ipv6) basically means "anything / any host".

    Like
  • JMu
    JMu Posts: 1

    There is a typo in there? The correct string is  0.0.0.0/0,::/0

     

    Also I changed from the PM Advanced Mode: Firewall Engine / IPV6 Filtering Mode = Normal.

     

    Cannot believe this is for a network banking software which uses Java.... :)

    Like
  • JPD
    JPD Posts: 5

    All

     

    Might be worth pionting out that this issue doesnt affect everyone and as for adding IPv6 info, well IPv6 is disabled on the local machines and the Mgt Console is v9.0 so doesnt have the option to omit IPv6...

     

    Sorry for the delay in responding, i appreciate everyones efforts though...

    Like
  • KG-Admin
    KG-Admin Posts: 6

    Had the same issue, but after changing IPv6=Normal scanning (under the advanced view-firewall settings) and ensuring that the firewall rules were correctly setup for IPv6, my java issues seem to have disappeared. At least on the test clients.

     

    Testing amongst users and awaiting feedback from them, but it looks promising at least

    Like
  • KG-Admin
    KG-Admin Posts: 6

    Ok, feedback confirms this as the solution (in my case at least). There were some inconsistencies with some users not been able to use Java, but in ALL those cases it was shown that multiple Java versions were present.

     

    By removing all versions except for the latest (7u7) and having the correct rule in the PM, Java works as its supposed to. Hope this helps

    Like
This discussion has been closed.

Categories