Advanced options
177
Figure 68. Notification on SSL connection detection
To scan encrypted connections, Kaspersky Anti-Virus replaces the security certif-
icate requested with a self-signed one. In some cases, programs that are estab-
lishing connections will not accept this certificate, resulting in no connection be-
ing established. In such situations we recommend selecting the
Skip
option from
the notice regarding the scan of a secure connection:
When connecting to a trusted web resource, such as your bank‟s web
page, where you manage your personal account. In this case, it is im-
portant to receive confirmation of the authenticity of the bank's certifi-
cate.
If the program establishing the connection checks the certificate of the
website being accessed. For example, MSN Messenger checks the au-
thenticity of the Microsoft Corporation digital signature when it estab-
lishes a connection with the server.
You can configure SSL connection scan settings under
Traffic Monitoring
of the
program settings window (see Figure 69):
Check all encrypted connections
– scan all traffic incoming on SSL protocol
for viruses.
Prompt for scan when a new encrypted connection is detected
– display a
message prompting the user for action every time an SSL connection is es-
tablished.