PAM client closes when Kaspersky Endpoint scans encrypted connections

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

We upgraded to 4.1.1 and applied 4.1.1.03 on top:

Afterwards some endpoints running Windows 11 had a problem with the PAM client:

1.- Login

2.- Load principal page

3.- After at 1 second, the CA PAM client is closed automatically

We applied the following configuration to Kaspersky Endpoint:

This resolved the issue.

Are there recommendations from the PAM side?

Environment

Release : 4.1.1

Cause

There does not appear to be a problem with PAM. Kaspersky Endpoint appears to interfere with the connection. PAM 4.1.1 uses newer stronger ciphers for communication between client and server, which could make a difference.

Resolution

If the above Kaspersky Endpoint configuration is acceptable, we suggest using that setting so that this software does not interfere with the secure connection between PAM client and PAM server. Otherwise Kaspersky Endpoint Support should be consulted for alternative solutions. According to our current understanding this problem is outside of the control of PAM.