[7.386] Windows Defender is Blocked

This post is related to a previous post concerning the inability to Activate Windows. (See Post)

Now I find that Windows Defender is unable to acquire Definition Updates until the HTTP Proxy is DISABLED.

Microsoft.com and windowsupdate.com are both listed in a default HTTP Proxy Exception that was created when the BETA was installed.

I even created a new Exception for these two URLs that bypasses everything and Windows Defender still could not update it's definitions.

Disabled the HTTP Proxy and viola... Windows Defender updated!!

Parents

0 RFCat_vk_01 over 15 years ago

Windows defender uses the IE settings for internet access. So you will need to add the microsoft sites to the bypass settings in IE.

Ian M
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 jcargile over 15 years ago in reply to RFCat_vk_01

But Windows Defender updated AS SOON as the HTTP Proxy was disabled.
No IE settings were changed, so how could the IE settings have anything to do with it?
It was clearly Astaro that was blocking the definiton updates.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BAlfson over 15 years ago in reply to Kingbuzzo

Time for an 'Exception' for microsoft.com from anti-virus and extension-blocking.

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 jcargile over 15 years ago in reply to BAlfson

Here's the Exception I had already created for Microsoft.com.
This should cover it right?
Exception.PNG
- Exception.PNG
- View
- Hide
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BAlfson over 15 years ago in reply to jcargile

From my understanding, that should have done it.

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 FreudianSlip over 15 years ago in reply to BAlfson

Hi,

This is my exception list for m/s.

I think you need to specify more domains than just m/s.com to get things to work properly.

Freudy
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BAlfson over 15 years ago in reply to FreudianSlip

You're right Freudy, that windowsupdate.com needs to be added. That includes download.windowsupdate.com and all other subdomains, so you don't need that.

Cheers - Bob
PS Here's a reference for the format of expressions one can use in Astaro: Perl Regular Expressions HOWTO, by A.M. Kuchling

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 elm over 15 years ago in reply to BAlfson

I had the same problem. for me it helped to de-activate the SSL content scanning in the http proxy.
Can you check whether this helps for you, too?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 jcargile over 15 years ago in reply to elm

Yes I will.
Thanks for the info.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BAlfson over 15 years ago in reply to elm

@elm - How do you "de-activate the SSL content scanning" in the HTTP Proxy?

Thanks - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 jcargile over 15 years ago in reply to jcargile

Here is the default Microsoft.Com Exception I modified to skip everything.
Exception.PNG
It would NOT allow Windows Defender to Update.
Defender Update.PNG

I turned off "Scan HTTPS(SSL) Traffic" on the Global HTTP Proxy settings and Windows Defender updated.
- Exception.PNG
- View
- Hide
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 trollvottel over 15 years ago in reply to jcargile

I just reproduced the problem. The same happens when using Windows Update, until you install the Proxy CA Certificate for the computer account (important, because Windows Update and Defender work in System Service user context!).

mmc -> Add certmgr snapin for computer account -> trusted root certs -> import

Windows update and Defender work after doing so.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 trollvottel over 15 years ago in reply to jcargile

I just reproduced the problem. The same happens when using Windows Update, until you install the Proxy CA Certificate for the computer account (important, because Windows Update and Defender work in System Service user context!).

mmc -> Add certmgr snapin for computer account -> trusted root certs -> import

Windows update and Defender work after doing so.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data