-
-
Notifications
You must be signed in to change notification settings - Fork 2.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Windows defender Firewall sometimes reports CefSharp.BrowserSubprocess #3075
Comments
This comment has been minimized.
This comment has been minimized.
As per the Release Notes. All networking is now done by a seperate process (in this case the default For additional information
This is not unexpected as all Other than suggesting you white-list |
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
I am having this issue when two cefSharp instances are trying to establish a webrtc peer to peer connection. When one is Chrome browser the connection works fine and no prompts. |
To circle back on this, it appears that the reason for this prompt is unrelated to the fact that CefSharp.BrowserSubprocess.exe is executing in a separate process. In our case, we have confirmed WebRTC usage is causing this prompt. cc: @mokkymiah |
WebRTC uses mDNS by default to prevent leaking your IP address. From what I can tell this was enabled by default in Chrome M76. https://groups.google.com/g/discuss-webrtc/c/6stQXi72BEU Adding a inbound rule to allow mDNS (UDP port 5353) is likely required. (If Chrome is installed on your machine there should be a inbound Google Chrome mDNS rule which you can use as reference). See also: https://bloggeek.me/psa-mdns-and-local-ice-candidates-are-coming/ If you don't allow mDNS then WebRTC will likely still work, there are security/privacy concerns if it's blocked/disabled. Switching to using the Network Service in process won't prevent the dialogue from being displayed. |
@amaitland Thanks, in my case I am still not able to establish peer to peer connection with two instances of cefSharp. It works fine on Chrome, or if one peer is using chrome. I even tried allowing any application access to all ports via firewall just to test it out. Still no joy. |
@mokkymiah That's likely totally unrelated to the this issue. See https://github.com/cefsharp/CefSharp/blob/master/CONTRIBUTING.md#cefsharp-vs-chromium-embedded-frameworkcef Test with |
Further discussion at https://magpcss.org/ceforum/viewtopic.php?f=6&t=17854 |
For my use case, since WebRTC was not technically required on the web page, I was able to disable the firewall prompt by including this code:
Thanks again, @amaitland ! |
Hello,
we are getting strange issue, that sometimes by the start of our application the CefSharp is blocked by Windows Defender Firewall while accessing the network.
Does anybody know how to prevent this?
Thx
Patrik
The text was updated successfully, but these errors were encountered: