Troubleshooting
Bitdefender Endpoint Security Tools does not block websites in Firefox
This section explains how to troubleshoot the issue of Bitdefender Endpoint Security Tools not blocking websites in Mozilla Firefox.
Note
The information applies to Bitdefender Endpoint Security Tools installations on Windows prior to kit version 6.6.5.82.
Issue
In some cases, clients may report that Bitdefender Endpoint Security Tools does not block certain websites in Mozilla Firefox, although everything is working fine in other browsers.
This particular issue happens only on Firefox because this browser does not use certificates from Windows Certificate Store. It has its own certificates location, which is unique on per-profile basis.
Solution
To fix this issue, you can choose one of the following solutions:
Create a new Firefox profile
Close the Firefox browser if it is running.
Start Command Prompt with administrative rights.
Run the following command to start Profile Manager for Firefox:
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" –p
In the configuration window, create a new profile.
Click the Start Firefox button and test the browser.
If you wish to create silently a new profile in Command Prompt (also with administrative rights), navigate to the Firefox folder:
cd C:\Program Files (x86)\Mozilla Firefox
and run the following command:
firefox -CreateProfile name-of-the-user
Reinstall the Bitdefender certificate
Access the certificates list for the browser interface. For example, in Firefox, you find the list in Options > Privacy & Security > Security > Certificates > View Certificates.
Check if Bitdefender's entry is present there. If it is present, delete it. If not, skip to the next step.
Boot the machine in safe mode.
Delete the files from the following folders:
C:\Program Files\Bitdefender\Endpoint Security\mitm_cache
C:\Program Files\Bitdefender\Endpoint Security\mitm_cache\cache
Reboot the machine in normal mode.
Start Command Prompt with administrative rights and run the following command:
"C:\Program Files\Bitdefender\Endpoint Security\mitm_install_tool_dci.exe" install /suffix Net-Defender
Confirm in the Bitdefender security agent interface the certificate installation.
Websites not blocked by Content Control
In this section, you will learn how to troubleshoot websites that are not blocked by Content Control.
When you install the Content Control module on an endpoint, BEST adds a Bitdefender certificate to Windows. This certificate is used for web traffic monitoring and web access control. Before you start troubleshooting, check the following guidelines:
Verify if Content Control is installed. For Web Access Control, refer to Blocking or allowing specific websites with Content Control.
Check if BEST is up to date. For more information, refer to Update Bitdefender Endpoint Security Tools (BEST) and Bitdefender Endpoint Security Tools manually.
Verify if the Bitdefender Personal CA.Net-Defender certificate is available in Certificate Manager. If you are a Firefox user, you can check for a Bitdefender entry in the certificate list in Options> Privacy & Security> Certificates.
Notice if you can reproduce the issue in a different browser, or on other endpoints. If you are a Chrome user, refer to Disabling the QUIC protocol.
Clear the browser's cache. If no traffic is made and the content is served locally, the security agent has nothing to scan.
If the issue still occurs, follow these steps to reinstall a Content Control component on an affected endpoint:
Check the if the following certificate is available in Windows Certificate Manager: Bitdefender Personal CA.Endpoint0000
If found, delete it. Otherwise, skip to the next step.
Boot in safe mode.
Delete all files from the following path:
C:\Program Files\Bitdefender\Endpoint Security\mitm_cache
Boot in normal mode.
Run the following command as Administrator:
C:\Program Files\Bitdefender\Endpoint Security\mitm_install_tool_DCI.exe /install_silent Net-Defender