Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

EV10 Client Security Warning for Search Vaults

Created: 18 Jul 2012 • Updated: 15 Nov 2012 | 5 comments
This issue has been solved. See solution.

Has any see this yet?  We believe we have found that a very small change to how the EV10 client creates the EVWebViewRedirect.htm file on the fly when selecting the Search Vaults button in Outlook causes a Security Warning Pop-up for some of our PCs. 

EV9 and before create the file without any CRLF ... but EV10 does the following...

<!-- saved from url=(0014)about:internet --><HTML><HEAD><META HTTP-EQUIV=REFRESH CONTENT="0; URL=http://EVPROD002/ .... etc....

but EV10 does the following...

<!-- saved from url=(0014)about:internet -->
<HTML><HEAD><META HTTP-EQUIV=REFRESH CONTENT="0; URL=http://EVPROD002/ ... etc..

If we remove the CRLF, the Security Warning PopUp does not happen... and if we add the CRLF to the EV9 version of the file, it causes the PopUp.

This only happens on particular builds of our PCs so we're digging into what IE security setting this might be (or perhaps an IE version bug).  Let me know if anyone else has seen this - or a similar issue where a CRLF causes such behavior - and how to resolve it.

Comments 5 CommentsJump to latest comment

Chuck Ford's picture

Ignore the 1st  "... but EV10 does the following..."

Rob.Wilcox's picture

Yes, seen it before.  It's called Mark-Of-The-Web..

I also thought that this had been fixed a few times in the recent past.  Have you tried a 10.0.1 client and/or a 9.0.3 HF client?

Chuck Ford's picture

Thanks Rob!.. now the question is why is the web page setting the MOTW as.. <!-- saved from url=(0014)about:internet -->  which is the cause of the prompt based on the IE intranet zone setting  "Websites in less privileged web content zone can navigate into this zone"?  Is the EV client always going to set that .htm file as "about:internet" or can I make it an intranet site if I configure something in EV?

Rob.Wilcox's picture

I believe it's meant to be this way, and use the MOTW, because that's the only way that it will work.  Historically there have been some changes in this area.  It is probably best to contact Support, and they can dig up the details of the changes, and the why's and whatfor's.  

It's my last day in a week, and I don't really have access to this stuff any more :(

SOLUTION