The Known Issues List has been updated with a new IPS problem. We have received reports of issues with IPS causing connection problems with wireless network adapters.
In some cases the wireless connection is broken all the time, in other installations we've seen intermittent connection issues. Connections with wired Ethernet are not affected.
To solve the issue you can simply switch off the IPS setting in Central:
As we are still trying to fully understand the issue, sending us SDU logs is much appreciated.
Update: We have found the root cause. While we are still interested in learning if you're affected, we do not need more SDU logs.
Vince
Known Issues List for AMSI and IPS EAP - 2019-10-28.pdf
Where do I find this setting at?
Thank You,
Jacqueline
Hi Jacqueline,
Assuming you are asking for where to switch off IPS in the settings shown in the screenshot before, here are the steps to get to the setting.
See also the screenshots in attached document.
Where to find the IPS settings.pdf
Hey Vincent, the latest fix list for the 2.5.2 endpoint release indicates the Network Protection module was updated -- is this a fix for this Wifi issue? Referenced here: downloads.sophos.com/.../sesc_core_rneng.html
CTO, Convergent Information Security Solutions, LLC
https://www.convergesecurity.com
Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Hi Bruce,
Unfortunately that is not yet the case. We have found the root cause of the Wi-Fi issue, and are working on a fix, but it has not been released yet.
This release has nothing new with regards to the components in the EAP. We will update the EAP soon, but i will announce this in the forum so you are aware of any changes beforehand.
Best regards,
Understood, thanks! I was just itching to test the Wifi fix.
Just got 2.0.16 Intercept X update on my test clients --- any idea as to fixes we can look for (specifically the wifi issue)?
Just a quick reply as Stephen has answered your question here as well: https://community.sophos.com/products/intercept/early-access-program/f/feedback-and-issues/116564/new-version-released-and-installed-any-updates-as-to-fixes-in-this-version.
This release updates Intercept X components, see this blog post: https://community.sophos.com/products/intercept/early-access-program/b/blog/posts/enhanced-protection-eap-extended-with-new-intercept-x-features. These features are silent in a first phase, we'll update you when they go live.
We'll keep you informed on any updates for AMSI and IPS (and Intercept X).
Regards,