Is CVA proxy aware?

Discontinued Products Comodo Vulnerability Analyzer - CVA
1

I’m guessing not as I couldn’t update from work but just thought I would check. Updates fine from home.

:slight_smile:

2

Hi,
CVA uses Internet Explorer’s Internet connection settings to connect to Internet.
So if IE can connect out it should also be able to connect.

Thanks
-umesh

3

I’m using an automatic configuration script and although CVA can update via “Update” under the miscellaneous section, it cannot under the scan section (when starting a scan). It reports the following error meesage:-

“ERROR: Can not connect to Comodo server!!! Either server is down or there is no internet connection.”

Btw, typo in above (can not).

:slight_smile:

4

Hi Graham,
Does it happen all the time or you have been able to scan atleast once in past?

Thanks
-umesh

5

If I keep selecting “Start”, it will eventually start scanning but then gives up with the error message mentioned. So no, it doesn’t complete the scan (show no vulnerable applications).

:slight_smile:

6

Hi

Tried using an IP address instead of a configuration script and the same problem. See attached screenshot.

[attachment deleted by admin]

7

Hi,
Perhaps we will have proxy-configuration option in next release to move away from IE related dependencies.

Thanks
-umesh

8

Sounds good :). Also, maybe an option to skip updating before scanning so you can use the current DB (incase of internet problems) or an option in settings to disable this feature.

:slight_smile:

9

Hi Graham,
The way CVA works is, it has got a thin DB on client which has to be in sync with server DB having vulnerability details. So any time CVA scanner runs, out it checks if it’s client DB is in sync with server or not.
So it’s not possible that without internet connection you can run scanner.
We can do so, but there are chances where you may not have upto date information.

Thanks
-umesh

10

Hi umesh

I see :). Do you have any idea’s why it doesn’t work (sych and scan) as it’s able to update under Miscellaneous?

:slight_smile:

11

Hi Graham1,
In next update we will place much clear error for the reason of failure.
As you can update but can’t scan is something weird.

Thanks
-umesh

12

Hi umesh

Even stranger, I was just able to scan the C: drive but then failed on the D: drive (partly scanned), saying it couldn’t contact the server. This is the first time it completed the C: drive.

:slight_smile:

13

Hi Graham1,
If you are able to complete even once, that means there is no fundamental problem as such with connection but at times it could be just timing out.

Thanks
-umesh