Intermittent problems with TLS handshake and being timed out

Gilbeh · 10 Oct 2017

Hi

I have a new Dell laptop running Windows 10 and Kaspersky.

When using MS Edge for Internet banking, I can sometimes connect straight through security and right through to statements. Other times I get the error code INET E CONNECTION TIMEOUT very quickly. There seems to be no rhyme nor reason when this will happen or how far into the bank site I get.

Using Mozilla Firefox, I get the same intermittent problem but this time it gets stuck on TLS handshake and just goes round and round.

I have just been successful in getting right through to statements at Lloyds on both browsers and have also ordered an item online successfully. So, I tried Halifax - no joy, now I get the error message or TLS handshake and on Firefox I can't even get Google, as it sticks on handshake for that site too.

All the rest of the computer is fine and I can run BBC I-player OK.

Any suggestions as to how to cure this would be welcome as it is very frustrating.

Thanks.

Caledon Ken · 11 Oct 2017

Hi Gilbeh. Welcome to the TenForums @Gilbeh

First I would disable Kaspersky and test. Some AV products have new functionality within to secure financial transactions. I know this to be the case in Eset, maybe Kasp has added something.

Next I would open up trouble shooters, Start => Settings => Update and Security => trouble shoot, scroll down to network adapter. Run trouble shooter. There is also a Internet Connection trouble shooter at top of list. Your machine will likely forget wi-fi passwords, just an fyi. There is also a Network Reset process under Network and Internet. Apart from forgetting wi-fi passwords it usually doesn't cause new issues. That said if you have VPN or custom communication clients they may need to be reloaded, reset.

Please also check Dell to see if they have a new network adapter driver and or a new BIOS. Not suggestion to load new BIOS, just you should know if there is a new BIOS and what it corrects.

In device manager please find your network adapter, right click, click on properties and ensure under power management that the device cannot be turned off to save power.

Are you running any VPN software or additional security software like Trusteer that may be influencing?

Have you made any changes to your DNS server?

Change DNS Server Address on Windows 10 PC

Ken

bro67 · 11 Oct 2017

Use this to check your email server connection. You also need to use the correct port for TLS, which can cause it to time out. Recheck the email server settings, if you have to, remove the mailbox and then get the right server settings ot set it up again. Make sure that you keep mail on server. How to Use Telnet to Test SMTP Communication

Gilbeh · 12 Oct 2017

Thank you for your comments.

We have worked out that it seems to relate to the wifi. When using wifi and connecting to banks, it will sometimes go through but mostly gives the error messages. However, if you plug in the Ethernet cable, there is no problem. Very strange. It is only the laptops that this affects. iPads are fine. We are still working on it.

Caledon Ken · 12 Oct 2017

Good to know. Some routers have now added security software for wireless. Asus on one called it AiProtection by Trend Micro.

Any chance you have a nice new shinny router?

Gilbeh · 12 Oct 2017

Yes we have. I am with Talk Talk and the previous router kept giving the red light daily so they sent a new one. Is there a way round it?

Gilbeh · 12 Oct 2017

I've put this to the TalkTalk community to see whether my router has added security.

Gilbeh · 12 Oct 2017

I've put this to the TalkTalk community to see whether my router has added security.

Caledon Ken · 12 Oct 2017

Lets see what comes of it. Not saying that the routers they supply are to be questioned but some of the suppliers here in Canada use to send out "Cra*" unless you go with their ultra services. They don't seem to get that they are the ones that get credibility issues when any part of the service hicups. Its not about the wire (glass) to house, its about the service right up to device.

Would be interested to see what comes back from forum.

bro67 · 12 Oct 2017

It just came out that Russia had hacked Kaspersky. At this point, I would just dump Kaspersky and go with something else. The Wifi issue can be due to Kaspersky locking it down too tight. As for your Gateway if it is the Huawai HG533 or one of their other models, you can find information on the unit online, regarding the settings. The first thing that you should always do with you get a new Gateway, is to go through the various screens to get a lay of the land.

Email should be set for STARTTLS for imap and port 587.