Advisory: Support Portal Maintenance. Login is currently unavailable, more info available here.
Hey Everyone,
i have many customers with intercept x advanced on their fileserver. But two of them have big problems. One fileserver is with Windows Server 2008 R2 OS and the other Server 2016.
Both have the same error: When the fileserver is running for a while, the network shares are suddenly not reachable anymore. Nothing helps but only a restart of the windows system. The restart isnt successful, they stuck on "Shutting Down..."-Animation. Only a cold shutdown will help to boot the system and fix the problem for some hours or days.
Even when disabling all Features of the endpoint the problem occurs. Only uninstalling intercept x is an workaround for us, so the "normal" server protection-modules are currently running on the server without hitman pro.
has anyone have the same issue?
i found an old topic on the forum but they dont provide a solution:
https://community.sophos.com/intercept-x-endpoint/f/discussions/94727/issues-with-server-protection-on-file-server
Thanks!
Hello InterceptXXX,
By Any chance have you already applied the hotfix for Intercept X to those machines in question? If not? I would recommend you to apply this Hotfix stated on this Article
And see if issue still persist.
Hi GlennSen,
yes, i already tried this (this is one of the first things i try in such situations), but i doesnt change anything.
Do you have a archiving software on these machines or others that are accessing those shares?
RichardP
Snr. New Product Introduction Engineer | CISSP | Sophos Technical SupportSupport Videos | Product Documentation | @SophosSupport | Sign up for SMS AlertsIf a post solves your question use the 'Verify Answer' link.
Hi RichardP,no, software like this. only windows users with network drives, their profiles.
For some users are folderredirection enabled.
I would suggest you open a support ticket. We will need an SDU and process monitor that covers the action and debug level logging enabled for the SFS.
SophosFileScanner.log
HKLM\SOFTWARE\Sophos\Sophos File Scanner\Application
"LogLevel"=dword:00000004
SophosFS.log