Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 9 replies
  • Subscribers 1 subscriber
  • Views 5641 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problem with 1Password for Windows helper

Manaburner

Hi again,

I'm using 1Password for Windows and since installing SAV, there's a problem with the 1Password helper. It's a WIndows process that communicates with a Firefox extension and since installing Sophos, that's no longer possible.

I didn't install the firewall module so I think it's related to the web protection component.

Is there a way to whitelist processes, so that they are not checked by web protection?

Thanks in advance

Regards,

Michael

:27879


This thread was automatically locked due to age.
  • 0

    Hello Michael,

    not knowing 1Password the obvious questions: What are the symptoms - do you get any error message and how did you determine that [communication with the Firefox extension is no longer possible]?

    Did you try whether disabling Web Protection allows it to work?

    Christian

    :27881
  • 0

    Hi Christian,

    the symptom is, that the 1Password extension in Firefox has an error that tells me, that it cannot connect with the helper.

    I'll try to use standard policy settings and test with them. I'll report back to you.

    Regards,

    Michael

    :27885
  • 0

    Hi Christian,

    I have created a test group, where the "Web Control" and the "Antvirus and HIPS" policies are active, and in this combination, the 1Password extension is showing the error. When I run only one of those in the test group, the helper is working fine.

    Regards,

    Michael

    :27889
  • 0

    Hello Michael,

    I'm not sure what you mean by "Antivirus and HIPS" policy active? Do you mean Web protection in the AV policy (guess it is set to the defaults On and As on-access)? If so it looks like an interaction between Web Protection and Web Control.

    Christian

    :27895
  • 0

    Hi Christian,

    there's a category in SEC, called Antivirus and HIPS, and a category called "Web Control". In both of them, I've created policies and assigned them to a "test" computer group.

    https://www.dropbox.com/s/xhuwxybk73zwwdq/2012-08-08_12h28_18.jpg

    Regards,

    Michael

    :27897
  • 0

    Hello Michael,

    there's always a policy assigned to a group (except Unassigned) - even if it's just the Default (or Standard in German). The policies' contents define the state of the different features. Thus it's important to know what the settings are. Also it's worth noting that the Default policies are not unchangeable.

    If you assign nk WebControl instead of Default (assuming you haven't changed this one) there's a change (as the default of Default - forgive the pun - is Disabled). So in this case it'd be Web Control which causes the problems with 1Password. But what have you changed from the default in your AV policy?

    Christian

    :27899
  • 0

    Hi Christian,

    ok, I should have said, that all other policies are set to Defaul for this group. 

    To create the AV policy, I copied the Default policy, and changed the following:

    1. E-Mail notification enabled

    2. Exclusions for file extension NSF, NTF and VMDK

    3. Exclusion for Folders C:\Lotus, C:\Program Files (x86)\IBM\Client Access\ and C:\Program Files (x86)\IBM\Lotus\Notes\

    4. Default action "Delete" if malware is found

    That's all.

    Regards,

    Michael

    :27905
  • 0

    Thanks, Michael

    now the changes in the AV policy shouldn't make a difference. Thus I think it could only be Web Control - when enabled 1Password won't work. Guess you've checked whether there are any events (just in case: From the SEC menu bar Events -> Web Events ...). If there are none you'd have to take this to Support.

    BTW: Did you have any issues with Sophos vs. Lotus which lead you to excluding these program folders?

    Christian

    :27907
  • 0

    Hi Christian,

    there aren't any events concerning 1Password.

    I think I'll have to ask the support, thanks :-)

    Concerning Lotus: that's a best practice setting, as it slows down Lotus Notes and can't look into the Notes databases anyway.

    Regards,

    Michael

    :27909