Most web resources use encrypted connections. Kaspersky experts recommend that you enable Encrypted connections scan. Is scanning encrypted connections interferes with work-related activity, you can add a website to exclusions referred to as trusted addresses. If a trusted application uses an encrypted connection, you can disable encrypted connections scan for this application. For example, you can disable encrypted connections scan for cloud storage applications that use two-factor authentication with their own certificate.
To exclude a web address from encrypted connection scans:
By default, Kaspersky Endpoint Security does not scan encrypted connections when errors occur and adds the website to a special list of Domains with scan errors. Kaspersky Endpoint Security compiles a separate list for each user and does not send data to Kaspersky Security Center. You can enable blocking the connection when a scan error occurs. You can view a list of domains with encrypted connections scan errors only in the local interface of the application.
To view the list of domains with scan errors:
A list of domains with scan errors opens. To reset the list, enable blocking connection when scan errors occur in the policy, apply the policy, then reset the parameter to its initial value and apply the policy again.
Kaspersky specialists make a list of global exceptions — trusted websites that Kaspersky Endpoint Security does not check regardless of the application settings.
To view the global exclusions from encrypted traffic scans:
The Global exclusions from encrypted traffic scan window opens. The window displays the table compiled by Kaspersky experts with information about the websites and applications for which Kaspersky Endpoint Security does not scan encrypted network connections. The table may be updated when Kaspersky Endpoint Security databases and modules are updated.Page top