ESET's Web Protection + SSL filtering are not working when Protect from DPI is enabled

[SeriousHoax]

Please answer the following questions for yourself before submitting an issue

• [X] Filters were updated before reproducing an issue
• [X] I checked the knowledge base and found no answer
• [X] I checked to make sure that this issue has not already been filed

AdGuard version

7.18.1

Browser version

Microsoft Edge Stable, Chrome Stable

OS version

Windows 11 23H2 (OS Build 22631.3880)

Traffic filtering

• [X] yes, I do

Ad Blocking

AdGuard Base filter

Privacy

AdGuard Tracking Protection filter, AdGuard URL Tracking filter, Legitimate URL Shortener, Fanboy's Anti-Facebook List

Social

AdGuard Social Media filter

Annoyances

AdGuard Cookie Notices filter, AdGuard Popups filter, AdGuard Mobile App Banners filter, AdGuard Other Annoyances filter, AdGuard Widgets filter

Security

No response

Other

No response

Language-specific

No response

Which DNS server do you use?

Cloudflare for Families - Malware Blocking

DNS protocol

DNS-over-HTTPS

Custom DNS

No response

What Stealth Mode options do you have enabled?

Block trackers, Remove tracking parameters, Hide your search queries, Disable Windows Telemetry, Protect from DPI

Support ticket ID

No response

Issue Details

Steps to reproduce:

1. Install ESET Smart Security Premium where AdGuard for Windows is already installed
2. Browse websites that is blacklisted by ESET. eg: https://vstcrackmac.com/norton-antivirus-crack-download/
3. Visit malicious resources which is supposed to be blocked by ESET's SSL filtering: https://raw.githubusercontent.com/TairikuOokami/Windows/main/Microsoft%20Defender%20Disable.bat

Expected Behavior

1. Blacklisted websites should be blocked.
2. Malicious resources should be blocked.

Actual Behavior

Neither is blocked.

Screenshots

Screenshot 1

 

Additional Information

1. I tried disabling the WFP driver in AdGuard and restarted the system. Nothing changed.
2. Checking Use redirect driver mode makes ESET's web protection work but malicious resources that are supposed to be blocked by HTTPS scanning/SSL filtering are not blocked.

[AlexandrPkhm]

Hi @SeriousHoax

In this particular case, could you please try to add ESET Smart Security Premium to the AdGuard exclusions, and vice versa, exclude AdGuard from ESET Smart Security Premium protection. Please let us know the results.

[SeriousHoax]

Hi @SeriousHoax

In this particular case, could you please try to add ESET Smart Security Premium to the AdGuard exclusions, and vice versa, exclude AdGuard from ESET Smart Security Premium protection. Please let us know the results.

Hi @AlexandrPkhm

I have tried it, but the result is the same. In ESET there is a separate option to exclude ESET from doing Man-In-The-Middling for certain apps. Even setting Adguard.exe and AdguardSvc.exe to that exclusion didn't make any difference. Also added all ESET related exe to AdGuard's exclusions.

[AlexandrPkhm]

@SeriousHoax

In this case, could you please reproduce the problem and record AdGuard logs. We will need them to diagnose and troubleshoot this issue.

Here's what we need you to do:

1. Collect the debug log as it's explained here.
2. Remember the exact time when the issue was reproduced. We will need it to find the corresponding records in the log file.
3. Send the archive to devteam@adguard.com and mention this issue number in the subject.

[SeriousHoax]

@AlexandrPkhm

Hi! I just realized that it only happens if Protect from DPI option in Stealth settings is turned on. I have sent the debug log to the email as you requested.

[AlexandrPkhm]

@SeriousHoax

Could you please try to enable Protect from DPI feature and then proceed to Settings → General settings → Advanced settings and disable Filter localhost option? After this is done, check and let us know if the issue with ESET still persists.

[SeriousHoax]

@AlexandrPkhm

I have done what you asked but it didn't make any difference. Still no website blocking and HTTPS scanning for ESET.

[vankos]

@SeriousHoax, Hello! Unfortunately, the 'Protect from DPI' option is not compatible with ESET web protection