Windows 10: Intermittent problems with TLS handshake and being timed out

Hi

I have a new Dell laptop running Windows 10 and Kaspersky.

When using MS Edge for Internet banking, I can sometimes connect straight through security and right through to statements. Other times I get the error code INET E CONNECTION TIMEOUT very quickly. There seems to be no rhyme nor reason when this will happen or how far into the bank site I get.

Using Mozilla Firefox, I get the same intermittent problem but this time it gets stuck on TLS handshake and just goes round and round.

I have just been successful in getting right through to statements at Lloyds on both browsers and have also ordered an item online successfully. So, I tried Halifax - no joy, now I get the error message or TLS handshake and on Firefox I can't even get Google, as it sticks on handshake for that site too.

All the rest of the computer is fine and I can run BBC I-player OK.

Any suggestions as to how to cure this would be welcome as it is very frustrating.

Thanks.

:)

 

A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 40. The Windows SChannel error state is 813.

I am having this same error, but when trying to connect to vCenter server 4.0 with vSphere client. I am also unable to access via the new Edge browser via https, but am able to via Chrome. Something is very buggy with TLS handshaking.

OpenVPN client is also having trouble connecting to my VPN server reporting:

Mon Aug 03 13:03:31 2015 TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Mon Aug 03 13:03:31 2015 TLS Error: TLS object -> incoming plaintext read error

Mon Aug 03 13:03:31 2015 TLS Error: TLS handshake failed

If I use the same config, and certificates on a windows 7 machine, it all works fine.

 

Intermittent connection failures; "Request timed out" and "PING: transmit failed. General failure. Help?

This has been going on for months so I've formed a habit of leaving command prompt open running the "ping google.com-t" command to assess my connectivity (not sure if there is a better way to do this, but it seems
to serve its purpose).



We have multiple desktop and laptop computers in the house that all connect to the one modem-router, but my desktop is the only machine that has this issue.



Here's some steps I've tried so far that haven't solved the problem.



1. Using only the wired connection, with
wifi disabled under "Network Connections"

2. Using only the wireless connection, with
ethernet disabled under "Network Connections"

3. Using the wireless connection while also having
ethernet enabled.

4. Using only the wireless connection, with
ethernet disabled under "Network Connections", and physically disconnecting the
ethernet cable.



And yet I'm still having this problem, and have no idea how to determine the cause or solve the issue. One possible hint is that I recall getting an error message about an IP address conflict a few months ago. Never
did find out if this was the cause, and don't know how I would do this.



I often have trouble connecting even connecting to the wireless network at home. Often I'll try to
to the router's standard connection, or the router's 5G connection, or the
EoP unit only to get the "Can't connect to this network" error message.

Can anyone please help me identify what the problem is and how to resolve it?

 

Hi Gilbeh. Welcome to the TenForums @Gilbeh

First I would disable Kaspersky and test. Some AV products have new functionality within to secure financial transactions. I know this to be the case in Eset, maybe Kasp has added something.

Next I would open up trouble shooters, Start => Settings => Update and Security => trouble shoot, scroll down to network adapter. Run trouble shooter. There is also a Internet Connection trouble shooter at top of list. Your machine will likely forget wi-fi passwords, just an fyi. There is also a Network Reset process under Network and Internet. Apart from forgetting wi-fi passwords it usually doesn't cause new issues. That said if you have VPN or custom communication clients they may need to be reloaded, reset.

Please also check Dell to see if they have a new network adapter driver and or a new BIOS. Not suggestion to load new BIOS, just you should know if there is a new BIOS and what it corrects.

In device manager please find your network adapter, right click, click on properties and ensure under power management that the device cannot be turned off to save power.

Are you running any VPN software or additional security software like Trusteer that may be influencing?

Have you made any changes to your DNS server?

Change DNS Server Address on Windows 10 PC


Ken

 

Use this to check your email server connection. You also need to use the correct port for TLS, which can cause it to time out. Recheck the email server settings, if you have to, remove the mailbox and then get the right server settings ot set it up again. Make sure that you keep mail on server. How to Use Telnet to Test SMTP Communication

 

Thank you for your comments.

We have worked out that it seems to relate to the wifi. When using wifi and connecting to banks, it will sometimes go through but mostly gives the error messages. However, if you plug in the Ethernet cable, there is no problem. Very strange. It is only the laptops that this affects. iPads are fine. We are still working on it.

 

Good to know. Some routers have now added security software for wireless. Asus on one called it AiProtection by Trend Micro.

Any chance you have a nice new shinny router?

 

Yes we have. I am with Talk Talk and the previous router kept giving the red light daily so they sent a new one. Is there a way round it?

 

I've put this to the TalkTalk community to see whether my router has added security.

 

I've put this to the TalkTalk community to see whether my router has added security.

 

Lets see what comes of it. Not saying that the routers they supply are to be questioned but some of the suppliers here in Canada use to send out "Cra*" unless you go with their ultra services. They don't seem to get that they are the ones that get credibility issues when any part of the service hicups. Its not about the wire (glass) to house, its about the service right up to device.

Would be interested to see what comes back from forum.

 

It just came out that Russia had hacked Kaspersky. At this point, I would just dump Kaspersky and go with something else. The Wifi issue can be due to Kaspersky locking it down too tight. As for your Gateway if it is the Huawai HG533 or one of their other models, you can find information on the unit online, regarding the settings. The first thing that you should always do with you get a new Gateway, is to go through the various screens to get a lay of the land.

Email should be set for STARTTLS for imap and port 587.

 

Hi Gilbeh,
After many searches, I've finally found the solution to this very annoying problem. Hope it'll work for you too. Read on:
https://superuser.com/questions/1237194/https-ssl-or-tls-issue-with-browsers-on-windows-10
In short:
Open a Command prompt with Administrative rights and type:
netsh int ip reset
And reboot.
That's it *Smile