ATI 2021 Update 4 [Build 39184 13 11 March 2021] - what is it doing?
As far a I can see it only addresses a few minor issues - lot of major issues still outstanding (see release notes).
Ian
PS I have installed it on one of my PCs and so far nothing has gone amiss.
Quick update on my VPN issue, I have managed to reconfigure the VPN to get around the issue which was causing ATI 2021 to hang on the user settings before eventually opening and refusing to connect to the Acronis Cloud or sign in to my account!
The VPN defaulted to using WireGuard protocol which caused the above but changing the protocol to IKEv2 allows ATI to launch correctly again!
Further update on the VPN issue, the protocol wasn't the issue after all but the option to bypass the VPN for selected apps! Turned off that option and all protocols work fine with ATI 2021 build 39184!
Note to self to not jump to early conclusions before testing fully!
Steve,
Your find suggests that the Cyber Protection feature of TI is doing it's job but failed to identify the issue in a manner that would point the user to remedy it. Something support would like to know I'm sure.
This also suggests that you have protection turned on, do you?
Bob, if Cyber Protection is getting involved with the VPN issues I was seeing, then it is doing so without being turned on as I have all Protection turned off permanently!
Steve,
I thought you would say that. All I can say is, that suggests that Acronis Cloud service dislikes the option you mention of allowing apps to bypass the VPN which would allow for a security hole that was flagged as not trusted.
It also suggests the use of outbound network traffic firewall rules being circumvented which could point to the need to whitelist any apps that would need the ability to bypass the VPN in TI. Do you have such applications? If you do then now that you have TI operating you might try adding these apps to the exclusion list then activating the option in the VPN again and see if that works.
Bob, my understanding of the option to 'Bypass VPN' for either apps or internet addresses in the SurfShark VPN application was that any connectivity from the apps selected would not be passed through the VPN but just go direct as if the VPN wasn't active. I may not understand this correctly but by not using the option for any Acronis apps seems to have fixed the issue unless something was changed at the Acronis end since I installed #39184?
The strange thing about this is that I have had SurfShark installed since November 2020 with no such issues until the upgrade to 39184 when this issue suddenly appeared without any other changes made!
Since this issue, my bypass list just includes 1 app (my email client) and 5 websites which includes acronis along with facebook, twitter, google and a personal site.
Recovery concerns still not resolved TI-218191
Recovery priority low in Ati thus-
Hi Logitech21,
Can you please create a new thread for your issue?
Steve,
You're probably right about your VPN app and its application of the option. I have no knowledge of SurfShark so cannot comment.
I note in your list of applications you have a personal web site listed as one of the apps that bypass the VPN. I suspect that may be the trigger for the issue. Is this personal site secure? Do you use Trusted Certificates on it? Do you use SSH Keys for secure connection? If your VPN complains about the site and that is why you have it bypass, none of these measures are probably in place. I do know that WireGuard uses SSH Keys.
If none of these measures are in play, I think that would be a problem or flagged as a problem by TI. This suggests that even though you have several services disabled with respect to Cyber Protection it is not enough to stop all processes which I think, given the fact that those services are still logging, must be the case.
Bob, the personal web site is only listed as bypass for the URL, not for any apps, I have since changed settings so that no apps are listed for bypass.
The reason for the web URL bypass is simply because I have Spamhaus spam filtering in place for the website and the IP address given to me when using the VPN is often featured in block lists because of the use of VPN's by spammers etc. The site uses SSL and has 2FA in place for my admin access. There have been no complaints from the VPN at all throughout this issue, only the strange behaviour from ATI 2021 #39184 as mentioned originally in my comments.
Note: for all my testing, ATI has all services in place with nothing disabled related to protection.
Steve,
Okay, I wouldn't expect your VPN to complain. It could be that Ti expects to see IPsec in place and it might not be. Nevertheless I am certain support would want to know your findings.
Ian,
I found that the update to version 39184 brought with it a new version update of the Protection feature. With Protection turned off I ran the update which took roughly 5 minutes to download and install. I then turned on Protection. This resulted in a scan running. Now I have a fast machine (Z490 - i7 10500 - 32GB ram) the scan only took about 3 minutes so I suspect it only ran against critical areas. The scan report was clean but more impressive was that PC resources were very low during this entire process.
After that initial scan I decided to run a Full scan. That process took roughly 20 minutes. That is inline with Windows Defender and the third party security I use elsewhere. The PC here has 9 disks installed so this scan ran against all of them. Interestingly, I have a archive drive where an old copy of Acronis Backup 11.5 is located, that folder was flagged and quarantined as malicious, Trojan.
Prior to the above I uninstalled my usual third party security suite. I will run Acronis True Image Protection exclusively on this PC from this point forward. I am doing this as my research indicates that the Cyber Protect product is currently best in class.
Bob, that is interesting. I will look into this when I get back to Melbourne - only have the iPad with me.
Ian