Allowing Access to Kaspersky Antivirus so It Can Update Automatically

Summary

This articles talks about how you can allow Kaspersky Anti Virus to work through a transparent proxy.

Problem

The Kaspersky Antivirus will not update automatically. The issue is caused as the application does not support transparent interception of HTTPS traffic, and attempts to access IP addresses instead of hostnames.

Solution

    1. Add the following to the Transparent HTTPS incompatible sites category:
      • 149.13.68.128/26
      • 130.117.190.128/25
      • 38.113.165.0/24
      • 119.255.133.27-119.255.133.36
      • 62.128.100.35-62.128.100.93
      • 202.177.216.227-202.177.216.236
      • 38.113.165.68-38.113.165.86
      • 195.122.169.15
      • 195.122.169.18
      • 212.73.221.199
      • 212.73.221.202
      • 212.73.221.205
      • 80.239.169.135
      • 80.239.174.44
      • 80.239.174.47
      • 80.239.197.100
      • 80.239.197.103
      • 95.211.85.42
      • 80.239.174.44
      • 80.239.169.132
      • 80.239.174.402
      • 12.47.219.832
      • 12.47.219.862
      • 12.73.221.205
      • 193.45.6.10

See our help topic, Creating custom categories.

    1. Create a transparent authentication policy, where the Behavior is either:
      • Allow Transparent HTTPS incompatible sites
      • Allow Transparent HTTPS incompatible sites and filter others using name from certificate

Depending on your organizational requirements.

See our help topic, Creating authentication policies.