Opening a file on a network shared folder, it opens pdfxeditor and before open the file it shows "Connecting to site..."
checking which traffic has done it try to connect to http://nas/_vti_pvt/service.cnf
Note: The problem appears only when open pdf with no pdfxeditor application already opened.
http connect when opening a network file
Moderators: TrackerSupp-Daniel, Tracker Support, Paul - Tracker Supp, Vasyl-Tracker Dev Team, Chris - Tracker Supp, Sean - Tracker, Ivan - Tracker Software, Tracker Supp-Stefan
-
- User
- Posts: 1
- Joined: Wed Jul 26, 2017 10:42 am
-
- Site Admin
- Posts: 6815
- Joined: Mon Oct 15, 2012 9:21 pm
- Location: London, UK
Re: http connect when opening a network file
Hi Idelana,
Thanks for the post - This is a known issue. Please disable the SharePoint plugin under Edit --> Preferences --> Plugins and that should solve the issue.
Thanks,
Thanks for the post - This is a known issue. Please disable the SharePoint plugin under Edit --> Preferences --> Plugins and that should solve the issue.
Thanks,
If posting files to this forum, you must archive the files to a ZIP, RAR or 7z file or they will not be uploaded.
Thank you.
Best regards
Will Travaglini
Tracker Support (Europe)
Tracker Software Products Ltd.
http://www.tracker-software.com
Thank you.
Best regards
Will Travaglini
Tracker Support (Europe)
Tracker Software Products Ltd.
http://www.tracker-software.com
-
- User
- Posts: 2
- Joined: Tue Aug 08, 2017 12:36 am
Re: http connect when opening a network file
Hello,
When viewing PDF file on a WebSite from local PC(PDF-XChangeEditor installed), our PaloAlto'IPS detected a packet of access to "GET /_vti_pvt/service.cnf" as an attack.
We tried to disable the SharePoint plugin under Edit --> Preferences --> Plugins, but that packet hsn't disappeared.
Is there any other method to disable that access?
and,,
Why does PDF-XChangeEditor access /_vti_pvt/service.cnf file?
When viewing PDF file on a WebSite from local PC(PDF-XChangeEditor installed), our PaloAlto'IPS detected a packet of access to "GET /_vti_pvt/service.cnf" as an attack.
We tried to disable the SharePoint plugin under Edit --> Preferences --> Plugins, but that packet hsn't disappeared.
Is there any other method to disable that access?
and,,
Why does PDF-XChangeEditor access /_vti_pvt/service.cnf file?
-
- Site Admin
- Posts: 6815
- Joined: Mon Oct 15, 2012 9:21 pm
- Location: London, UK
Re: http connect when opening a network file
Hi Yoshiyuki,
Thanks for the post - We access that firstly to determine if a file opened is stored in a SharePoint folder and/or a network folder, and secondly to check the version of SharePoint being used. We're improving the way that this is being handled build by build so that it shouldn't cause a slowdown or other issues.
Are you able to add an exception to the Editor to PaloAlto'IPS? If not, is this causing a major issue for you?
Thanks,
Thanks for the post - We access that firstly to determine if a file opened is stored in a SharePoint folder and/or a network folder, and secondly to check the version of SharePoint being used. We're improving the way that this is being handled build by build so that it shouldn't cause a slowdown or other issues.
Are you able to add an exception to the Editor to PaloAlto'IPS? If not, is this causing a major issue for you?
Thanks,
If posting files to this forum, you must archive the files to a ZIP, RAR or 7z file or they will not be uploaded.
Thank you.
Best regards
Will Travaglini
Tracker Support (Europe)
Tracker Software Products Ltd.
http://www.tracker-software.com
Thank you.
Best regards
Will Travaglini
Tracker Support (Europe)
Tracker Software Products Ltd.
http://www.tracker-software.com
-
- User
- Posts: 2
- Joined: Tue Aug 08, 2017 12:36 am
Re: http connect when opening a network file
Hi Will
We know PDF-XChange Editor is really useful and powerful PDF Editor.
So we would like to clear a doubt.
I checked packets of PDF-XChange Editor opening PDF file on Internet Website by WireShark.
I found the pakets below,
--------------------------------------
GET /_vti_pvt/service.cnf HTTP/1.1
Accept: */*
Content-Length: 0
User-Agent: Session
Host: xxxxxx.xxx.xxxxx.local
Connection: Keep-Alive
--------------------------------------
Please let me know a meaning of why User-Agent is "Session" ?
We heard that some malware send the same packets(User-Agent: Session).
So PaloAlto's IPS function detected that packet as an attack, we heard.
And unfortunately we can't add an exception, and also we can't set IPS signature detecting User-Agent's doubt off because it's useful.
But this is not causing a major issue, we only know why PDF-XChange set User-Agent "Session".
We know PDF-XChange Editor is really useful and powerful PDF Editor.
So we would like to clear a doubt.
I checked packets of PDF-XChange Editor opening PDF file on Internet Website by WireShark.
I found the pakets below,
--------------------------------------
GET /_vti_pvt/service.cnf HTTP/1.1
Accept: */*
Content-Length: 0
User-Agent: Session
Host: xxxxxx.xxx.xxxxx.local
Connection: Keep-Alive
--------------------------------------
Please let me know a meaning of why User-Agent is "Session" ?
We heard that some malware send the same packets(User-Agent: Session).
So PaloAlto's IPS function detected that packet as an attack, we heard.
And unfortunately we can't add an exception, and also we can't set IPS signature detecting User-Agent's doubt off because it's useful.
But this is not causing a major issue, we only know why PDF-XChange set User-Agent "Session".
-
- Site Admin
- Posts: 6815
- Joined: Mon Oct 15, 2012 9:21 pm
- Location: London, UK
Re: http connect when opening a network file
Hi Yoshiyuki,
I've spoken with the development team on this and they've said that the 'User-Agent' is basically just the name of the 'agent' contacting the server. They said that it was strange that your antivirus requires a specific session name as it's not restricted by any standard. We can mimic Firefox or Internet Explorer, etc. if you'd prefer, but there shouldn't be any need.
Thanks,
I've spoken with the development team on this and they've said that the 'User-Agent' is basically just the name of the 'agent' contacting the server. They said that it was strange that your antivirus requires a specific session name as it's not restricted by any standard. We can mimic Firefox or Internet Explorer, etc. if you'd prefer, but there shouldn't be any need.
Thanks,
If posting files to this forum, you must archive the files to a ZIP, RAR or 7z file or they will not be uploaded.
Thank you.
Best regards
Will Travaglini
Tracker Support (Europe)
Tracker Software Products Ltd.
http://www.tracker-software.com
Thank you.
Best regards
Will Travaglini
Tracker Support (Europe)
Tracker Software Products Ltd.
http://www.tracker-software.com
-
- Site Admin
- Posts: 2353
- Joined: Thu Jun 30, 2005 4:11 pm
- Location: Canada
Re: http connect when opening a network file
Hi Yoshiyuki.
Cheers.
Note: after disabling (enabling) the plug-ins, you need to restart the editor to take effect..We tried to disable the SharePoint plugin under Edit --> Preferences --> Plugins, but that packet hsn't disappeared.
Is there any other method to disable that access?
Cheers.
Vasyl Yaremyn
Tracker Software Products
Project Developer
Please archive any files posted to a ZIP, 7z or RAR file or they will be removed and not posted.
Tracker Software Products
Project Developer
Please archive any files posted to a ZIP, 7z or RAR file or they will be removed and not posted.