Is there a bug in KSC 12???????

[Nadeem]

We are facing kind of pandemic issue regarding KSC 12 version. Many of our clients who upgraded from KSC 11 to 12 are not being able to implement the Policies anymore. Simple example. One client tried to access a website but denied even though we put that URL in white list. However, when you remove the security check from policy and let everything access freely, you can access that website as well. Also, can’t able to implement blocking policy for especially, YouTube, Facebook, WhatsApp. we are having this problem at multiple sites with multiple clients. same issue everywhere. Is there any bug in new version of KSC 12????? Please HELP.

[alexcad]

The policy settings should be mandatory - 
the lock must be closed for this.

Please ensure that the policy has been applied to the client.
 

Regards
Alex

[Nadeem]

Alex 

thanks for the help. However, having difficulty to understand the language ( Russian?  I believe). Also, i see it shows KSC version 11, we are having problem with version 12? Or would it be same?

[ipcitsupport]

Hi Nadeem,

 

We have the same issue with KES 11.4

Some of our web control rules are not applied anymore.

We were blocking Youtube & Facebook during working hours, but the sites are not blocked at all anymore. We thought it is a problem of HTTPS because other websites that are HTTP only are still blocked, 

Any help to fix this issue would be appreciated (or maybe it has already been discussed & solved before, please point me to the correct thread)

[Nadeem]

Hi IpCit support, I will get back to you with the solution in 24 Hours God Willing :)

[Nadeem]

In the mean time this might help.

To not receive KES notifications for resources with untrusted certificates, please add those addresses to encrypted connections scanning exclusions as per instructions from this article: https://support.kaspersky.com/KESWin/11.5.0/en-US/175151.htm

Check situation after that, let us know about the results.To not receive KES notifications for resources with untrusted certificates, please add those addresses to encrypted connections scanning exclusions as per instructions from this article: https://support.kaspersky.com/KESWin/11.5.0/en-US/175151.htm

Check situation after that, let us know about the results.

[podrska]

If you want to block https you must enable option “Scan ancrypted connections”.

[ipcitsupport]

Thank you podrska, this fixed our problem!