Unknown allowed site in Browsing Protection

NikK

After upgrade to FSIS 2014-2 I decided to check all settings. To my surprise in the allowed sites for Browsing Protection I had a completely unknown site added. The thing is I've never manually allowed or blocked any site!

I've seen this once before when an unknown application tried to connect to internet and Deepguard asked me about it. After I allowed the application to continue, I then had a new entry in the list of allowed sites.

Is Deepguard really doing this? If so, why?

Simon

I think maybe it correlates to Banking Protection.  I too have a 'new' list of sites in the 'Allowed' tab, and these are all I have allowed through Banking Protection when going to a non-'bank' site with Banking Protection still active, so you get the option to end BP or allow the site.

NikK

Good to know, but in my case I'm sure it's not that since it was a casino site, and I don't think I've ever visited one.

Simon

Ouch! 

NikK

Can a Product Expert explain if Deepguard is adding allowed sites in Browsing Protection?

Simon

Sorry to go off topic, but I've just had a notification of this thread being updated, but the link to the post is either broken or missing. Are your notifications working OK, Nik?

NikK

No, same here:

 

"You have ${digest.notificationCount} updates for your F-Secure Community Subscriptions"

Simon

Yes, that's what I'm getting. Hope they fix that soon, as I rely on these notifications!

[Deleted User]

Hello Simon & NikK

 

Thank you for reporting the email notification issue.

 

We'll be looking into the problem and try to fix it ASAP.

NikK

Thanks Ben. I think the topic of this thread was lost in the notification discussion, so please:

 

Can a Product Expert explain if Deepguard is adding allowed sites in Browsing Protection?

[Deleted User]

Hello NikK,

 

Concerning the main topic of this thread, Banking Protection can add sites to the allowed list of website(as Simon mentioned), but Deepguard shouldn't get involved in that or add any site.

 

NikK are you the only user on this machine? 

NikK

Thanks for responding.

 

Yes, I am the only user. And I've never myself allowed any site, neither in Banking Protection or Browsing Protection.

If it's not Deepguard doing this, then the only explanation I see is that another program can access F-Secure Admin settings, which sounds not likely.

 

The first time I noticed this was when an unknown(rare, not commonly used) application tried to connect to its home web page to check for updates. When Deepguard asked about it I allowed it. After that I had the "unknown" programs home page in the list of allowed sites in Browsing Protection.

So it sounds likely that Deepguard did this.

 

The second time it happened I have no idea where it came from, and this time it was a Casino site. And I never visit casino sites.

NikK

I should add that I've tried to reproduce this by removing the application from Deepguard settings and running the application again and allow it when Deepguard detects the connection, but without luck.

 

When I use Banking Protection I always first close all other programs and I don't visit other sites during the bank sessions, so I couldn't have allowed one "by mistake". Certainly not a Casino site, since I never visit such sites.

 

I'm stuck troubleshooting this one. How could, a to me completely unknown web site, end up as an allowed site without my knowledge?

Simon

Just a total shot in the dark, but could the casino site have been a pop-up (or pop-under) which was attached or referred to another site, and somehow both have been allowed? 

Siltanen

Hello all,

 

We haven't seen this happening before, however if you manage to reproduce the problem I suggest you open a support ticket detailing what site you were visiting and/or what application did you run.

 

 

NikK

I can't reproduce it, but I will open a support ticket anyway. Will keep you informed of any progress.

gpb23878109

Cannot connect to trusted comopnies ie Fostwire. always blocked with a firewall!

[Deleted User]

Hello gpb23878109,

 

Sorry for the delay in the reply. Do you still have this issue with multiple websites? We would need more information in order to investigate what could be the problem here.

Which product do you use? Does disabling the firewall help to connect with all these companies websites?

 

What are the errors you encounter when trying to connect to these companies websites?

Is this issue limited to a specific browser?