After re-enabling SSL filtering ESET will scan incoming email so protection is ensured. We have a new version of the Internet protection ready which will automatically re-import the root certificate in case an old one is used and a TLS error is reported by Thunderbird.