IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Kaspersky Endpoint Security and Slack [In progress]
JeffreyIMDS
post 20.01.2017 14:05
Post #1


Member
**

Group: Members
Posts: 39
Joined: 14.08.2013




Hello,

After the latest Slack update Kaspersky Endpoint Security 10 Service Pack 1 MR2 has blocked my connection with Slack using the Windows Desktop client. I have tried different setups in the General Protection Settings, Trusted Applications to include Slack to this list however none seem to have effect. I have tested Slack with Kaspersky disabled and it seems to connect without problems also after the initial connect I can enable Kaspersky again and everything will work without a problem.

The Trusted Application entries I tried:

%LOCALAPPDATA%\slack\slack.exe
%LOCALAPPDATA%\slack\app-2.4.1\slack.exe

I also added the Slack directory to the Scan Exclusions just as a test I did this by doing this

%LOCALAPPDATA%\slack\

The full installation path of Slack is

C:\Users\<user>\AppData\Local\slack\

I hope anyone that can help me !

Regards,

Jeff

This post has been edited by JeffreyIMDS: 20.01.2017 14:07
Go to the top of the page
 
+Quote Post
Artem Ershov
post 20.01.2017 15:27
Post #2


Technical Support Engineer
**************

Group: KL Russia
Posts: 6599
Joined: 15.06.2015




Hi,

Could you please check if full path resolves this problem?
Please also clarify KSC version you are using.

BR


--------------------
In english: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces(RUS) | klnagchk log(RUS)
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 |Трассировки KES8 | Отчет утилиты klnagchk

Please evaluate support help by using "Rating" option!
Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!


Подписаться на новости о корпоративных продуктах
Go to the top of the page
 
+Quote Post
JeffreyIMDS
post 20.01.2017 15:48
Post #3


Member
**

Group: Members
Posts: 39
Joined: 14.08.2013




QUOTE(Artem Ershov @ 20.01.2017 13:27) *
Hi,

Could you please check if full path resolves this problem?
Please also clarify KSC version you are using.

BR


KSC 10.3.407 will that suffice? It is very strange because this only happened after the latest Slack update before that it worked like a charm. The Slack client reports that there is no internet connection available however until I disable KES I can connect just fine.

The full path

Test 1 (DID NOT WORK):
C:\Users\<user>\AppData\Local\slack\slack.exe


Test 2 (DID WORK):
C:\Users\<user>\AppData\Local\slack\slack.exe
C:\Users\<user>\AppData\Local\slack\app-2.4.1\slack.exe

Only when adding both did it seem to connect however this makes it very hard to maintain for the rest of my users if there is no way to set a variable path. I don't understand why Slack is not considered as an application that can be Trusted as such as a normal application as well?

Go to the top of the page
 
+Quote Post
Artem Ershov
post 20.01.2017 17:22
Post #4


Technical Support Engineer
**************

Group: KL Russia
Posts: 6599
Joined: 15.06.2015




Is it possible to use this workaround?
Maybe it is because our network interceptor.
Can you please disable every component of KES and turn them one-by-one until you find problem?

BR


--------------------
In english: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces(RUS) | klnagchk log(RUS)
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 |Трассировки KES8 | Отчет утилиты klnagchk

Please evaluate support help by using "Rating" option!
Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!


Подписаться на новости о корпоративных продуктах
Go to the top of the page
 
+Quote Post
JeffreyIMDS
post 23.01.2017 10:57
Post #5


Member
**

Group: Members
Posts: 39
Joined: 14.08.2013




QUOTE(Artem Ershov @ 20.01.2017 15:22) *
Is it possible to use this workaround?
Maybe it is because our network interceptor.
Can you please disable every component of KES and turn them one-by-one until you find problem?

BR


If it is workable for you to include 80+ Slack exclusions per update that they release, then the answer is yes. But I ensure you that it is not workable currently. I will try and disable every component and see what it is but I would hope that there is a more reliable solution in the long run from Kaspersky itself. Slack is not an unknown application to the world to say the least but that's my side of the story.

This post has been edited by JeffreyIMDS: 23.01.2017 11:01
Go to the top of the page
 
+Quote Post
Kirill Tsapovsky
post 23.01.2017 13:04
Post #6


Technical Support Specialist
**************

Group: KL Russia
Posts: 11634
Joined: 3.12.2013
From: Moscow




QUOTE(JeffreyIMDS @ 23.01.2017 09:57) *
If it is workable for you to include 80+ Slack exclusions per update that they release, then the answer is yes. But I ensure you that it is not workable currently. I will try and disable every component and see what it is but I would hope that there is a more reliable solution in the long run from Kaspersky itself. Slack is not an unknown application to the world to say the least but that's my side of the story.


In order to properly analyze and be able to resolve the issue, please provide the following diagnostic information:

-KES traces + Wireshark log for Test 1 scenario
-KES traces + Wireshark log for Test 2 scenario

Before collecting, please make sure you update KES to MR3 (10.2.5.3201), and Slack to its latest available version (please state which one you use).

Thank you.


--------------------
In English: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces | klnagchk log
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 |Трассировки KES8 | Отчет утилиты klnagchk

Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!
Please evaluate support help by using "Rating" option!
Go to the top of the page
 
+Quote Post
FaePo
post 7.02.2017 11:01
Post #7


Member
**

Group: Members
Posts: 14
Joined: 7.12.2012




Hi all,

We report the same issue in a customer network. They're using Slack and Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 (10.2.4.674 respectively 10.2.5.301 on a few clients).

Why isn't it possible to use a variable like %user% in trusted applications? Our customer has an own programmed tool which is blocked by Kaspersky as well. Also for this tool we're not able to create an exclusion because it's running under the user profile in Appdata and the path is variable.

Regards
FaePo
Go to the top of the page
 
+Quote Post
Dmitry Eremeev
post 7.02.2017 13:12
Post #8


Technical Support Specialist
**************

Group: KL Russia
Posts: 11025
Joined: 30.07.2014
From: Moscow




QUOTE(FaePo @ 7.02.2017 10:01) *
Hi all,

We report the same issue in a customer network. They're using Slack and Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 (10.2.4.674 respectively 10.2.5.301 on a few clients).

Why isn't it possible to use a variable like %user% in trusted applications? Our customer has an own programmed tool which is blocked by Kaspersky as well. Also for this tool we're not able to create an exclusion because it's running under the user profile in Appdata and the path is variable.

Regards
FaePo


Hello,

please attach diagnostic information asked earlier.
All diagnostic information must be collected regarding MR3.
Thank you.


--------------------
In english: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces(RUS) | klnagchk log(RUS)

На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 |Трассировки KES8 | Отчет утилиты klnagchk

Подписаться на новости о корпоративных продуктах

Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!

Please evaluate support help by using "Rating" option!


Go to the top of the page
 
+Quote Post
ilukeberry
post 20.03.2017 19:03
Post #9


Advanced Member I
***

Group: Members
Posts: 101
Joined: 13.10.2015
From: /dev/null




Any solution to this?!?!! We have one user who's slack doesn't work with KES 10 SP1 MR3 on all other computers works fine... As soon as I disable KES it starts working again and i'm checking logs in KSC and no sign of KES blocking it. dash1.gif

Slack logs:

2017-03-07T09:02:47.468Z - info: Welcome to Slack 2.5.1 x64
2017-03-07T09:02:47.468Z - info: App load time: 1170ms
2017-03-07T09:02:47.538Z - info: SET_UPDATE_STATUS : "checking-for-update"
2017-03-07T09:02:48.938Z - error: Failed to check for updates: net::ERR_NETWORK_ACCESS_DENIED
2017-03-07T09:02:48.938Z - info: SET_UPDATE_STATUS : "error"
2017-03-07T09:02:49.170Z - info: SET_NETWORK_STATUS : "online"
2017-03-07T09:02:49.188Z - info: Main window finished load. Launched on login: false
2017-03-07T09:02:49.948Z - info: SET_NETWORK_STATUS : "offline"
2017-03-07T09:02:49.960Z - info: UPDATE_TEAM_USAGE : {}
2017-03-07T09:02:50.224Z - info: SAVE_WINDOW_SETTINGS : {

This post has been edited by ilukeberry: 20.03.2017 19:09


--------------------
de mysteriis dom sathanas
Go to the top of the page
 
+Quote Post
Kirill Tsapovsky
post 20.03.2017 19:14
Post #10


Technical Support Specialist
**************

Group: KL Russia
Posts: 11634
Joined: 3.12.2013
From: Moscow




QUOTE(ilukeberry @ 20.03.2017 18:03) *
Any solution to this?!?!! We have one user who's slack doesn't work with KES 10 SP1 MR3 on all other computers works fine... As soon as I disable KES it starts working again and i'm checking logs in KSC and no sign of KES blocking it. dash1.gif

Slack logs:

2017-03-07T09:02:47.468Z - info: Welcome to Slack 2.5.1 x64
2017-03-07T09:02:47.468Z - info: App load time: 1170ms
2017-03-07T09:02:47.538Z - info: SET_UPDATE_STATUS : "checking-for-update"
2017-03-07T09:02:48.938Z - error: Failed to check for updates: net::ERR_NETWORK_ACCESS_DENIED
2017-03-07T09:02:48.938Z - info: SET_UPDATE_STATUS : "error"
2017-03-07T09:02:49.170Z - info: SET_NETWORK_STATUS : "online"
2017-03-07T09:02:49.188Z - info: Main window finished load. Launched on login: false
2017-03-07T09:02:49.948Z - info: SET_NETWORK_STATUS : "offline"
2017-03-07T09:02:49.960Z - info: UPDATE_TEAM_USAGE : {}
2017-03-07T09:02:50.224Z - info: SAVE_WINDOW_SETTINGS : {


Hello.

If you are having the same issue, please collect the diagnostic information as requested earlier.

Thank you.


--------------------
In English: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces | klnagchk log
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 |Трассировки KES8 | Отчет утилиты klnagchk

Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!
Please evaluate support help by using "Rating" option!
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

 



Lo-Fi Version Time is now: 25.04.2017 02:59