How to scan encrypted connections in Kaspersky Anti-Virus 2012?
We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.
Accept and close



Kaspersky Anti-Virus 2012


How to scan encrypted connections in Kaspersky Anti-Virus 2012?

Back to "Advanced Settings"
2012 Aug 29 ID: 6688

General info about SSL Protocol

Kaspersky Anti-Virus 2012 can scan network traffic for viruses using the SSL protocol

SSL Protocol (Secure Socket Layer) allows detecting the server authenticity via browser and also provides encrypted "personal" connection channel between user computer and the server. This protocol is widely used both for web-servers and mail servers. Gmail is a vivid example of such mail server. 

SSL connection protects data exchange channel in the Internet. The SSL protocol allows identifying the sides which exchange data based on electronic certificates, encrypts the transferred data and provides data integrity when transferring. 

These protocol peculiarities are often misused by cyber-criminals to spread Malware as most anti-virus products do not check SSL-traffic. 

Kaspersky Lab experts recommendations

Kaspersky Lab experts recommend checking SSL-traffic if you are on a suspicious web-resource and when you navigate to another page data transfer by SSL-connection starts. Most probably a malicious program is being transferred by the encrypted protocol. 

To scan encrypted connection Kaspersky Anti-Virus 2012 substitutes the required security certificate by the self-signed certificate. 

Sometimes the programs that establish connection, refuse accepting this self-signed certificate and as a result do not establish connection. Kaspersky Lab's experts recommend disable check of SSL-traffic:

  • when connecting to trusted web-resource, for example with the web-page of your bank on which you manage your personal account. In this case it is important to get authenticity confirmation of the bank certificate. 
  • if the program which establishes connection checks the certificate of the required web-resource without dialog with the user. For example, the program MSN Messenger when establishing secure connection with the server, checks authenticity of the Microsoft Corporation digital signature. 

How to configure encrypted connections scan in Kaspersky Anti-Virus 2012?

For Kaspersky Anti-Virus 2012 to scan encrypted connections on your computer, perform the following: 

  1. open the main application window
  2. in the right upper corner of the main application window, click the Settings button
  3. in the left upper corner of the Settings window, go to Advanced Settings
  4. in the left part of the Settings window, select Network
  5. in the right part of the Settings window in the section Encrypted connections scan, check the box Scan encrypted connections
  6. in case if the option is enabled for the first time, the Wizard will apper
  7. if the Wizard has not appeared, click the Install certificate button, if you want to install the Kaspersky Lab certificate as the root certificate. Follow the Configuration Wizard instructions to install the Kaspersky Lab certificate. Later traffic scan by SSL protocol will be processed using installed Kaspersky Lab's certificate.
  8. in the Settings window, click OK
  9. close the main application window.

Information Certificate is installed automatically only if you use Microsoft Internet Explorer, Mozilla Firefox or Google Chrome. To scan encrypted connections in the browser Opera, you have to install Kaspersky Lab certificate manually.

Was this information helpful?
Yes No

Applies To:



Have you found what you were looking for?

Please let us know how we can make this website more comfortable for you

Send feedback Send feedback

Thank you!

Thank you for submitting your feedback.
We will review your feedback shortly.