Jump to content

Encryption connection scanning (Kaspersky in the middle HTTPS scanning) is conflicting with Phoenix Contact mGuard industrial VPN service


agrajag
 Share

Recommended Posts

The mGuard RS series of VPN routers will fail when attempting to use the firewall administration interface while VPN’d into the unit, if the Kaspersky “Encryption connection scanning” setting is enabled.  There are multiple items that fail in the web interface that are symptoms of the failure.   The same symptoms take place across chrome, edge and firefox browsers.

  1. The mguard firewall administration interface will frequently fail while navigating in the administration UI with the message “could not connect to mguard service, retrying” and force a complete logout/login to reconnect.
  2. The “Interfaces” » Network Status table will never show external IP, Current Default Route, and Used DNS Servers values on that page (it will remain blank reguardless of what you do).
  3. When saving a configuration, the “reloading” pinwheel never goes away and the save button never returns without logging off and loggin in again.

I realize this is an extremely esoteric issue set, but I wanted to get this posted in case anyone else workign with thes industrial vpn firewall routers runs into issues as well.   I’ve reported this to Phoenix Contact as well, but disabling the “Encryption connection scanning” including for firefox has made this issue go away.

 

I’m kind of uncomfortable with this setting, now that I’m aware of it, being enabled anyway.  What justification is there for a 3rd party to be intercepting https traffic…  I guess to deal with malware scenarios but mozilla and chrome teams have advised vendors NOT to do this multiple times now.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share



×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.