Kaspersky Standard | Plus | Premium

How to change encrypted connections settings

Encrypted connections are established over the SSL and TLS protocols. By default, Kaspersky application scans such connections upon request from protection components, such as Mail Anti-Virus, Safe Money, URL Advisor, Private Browsing, Safe Browsing, and Anti-Banner.

To change encrypted connections settings:

1. Open the main application window.
2. Click in the lower part of the main window.

   This opens the Settings window.

3. Go to the Security settings section.
4. In the Advanced settings block, click the Network settings button.
5. In the Network settings window, go to the Encrypted connections scan section.
6. Select an action to perform when connecting to websites over an encrypted connection:
   • Do not scan encrypted connections. Kaspersky application does not scan encrypted connections.
   • Scan encrypted connections upon request from protection components. Kaspersky application only scans encrypted connections upon request from URL Advisor. This action is selected by default.
   • Always scan encrypted connections. Kaspersky application always scans encrypted connections.

   Clicking the Show certificates link opens a window with a list of trusted certificates that are used by popular websites. Certificates are added to this list if you click Add to trusted certificates and continue in a Kaspersky warning when visiting a website. After you add a certificate to the list, the website is considered trusted. You can add or remove certificates in the Trusted root certificates window using the Add and Delete buttons.

   If you have multiple user accounts on your computer, and one of the users accepts the new certificate, this certificate is also added to the trusted certificate list for all other users.

7. Select an action to perform if there are errors when scanning encrypted connections:
   • Ignore. If this action is selected, Kaspersky application terminates the connection with the website on which the scan error occurred.
   • Ask. If there is an error when scanning encrypted connection with a website, Kaspersky application shows a notification where you can select an action:
     • Ignore. Kaspersky application terminates the connection with the website on which the scan error occurred.
     • Allow and add domain to exclusions. Kaspersky application adds the website address to the list of trusted addresses. Kaspersky application does not scan encrypted connections on websites from the list of trusted addresses. You can view such websites by clicking the Configure trusted addresses link.

     This option is selected by default.

   • Allow and add domain to exclusions. Kaspersky application adds the website to the list of trusted addresses. Kaspersky application does not scan encrypted connections on websites from the list of trusted addresses. These websites are displayed in the Trusted addresses window, which can be opened by clicking the Configure trusted addresses link.
8. Click the Configure trusted addresses link to open the Trusted addresses window and perform the following actions:
   1. Click the Add button to add the website to the list of exclusions for encrypted connections scan.
   2. Enter the domain name of the website in the Domain name field.
   3. Click the Add button.

      Kaspersky application will not scan encrypted connections with this website. Please note that adding a website to the list of trusted addresses may limit the functionality of scanning the website by protection components, such as Safe Money, URL Advisor, Private Browsing, Safe Browsing, and Anti-Banner.