Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 14 subscribers
  • Views 7803 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Random RDP Dropouts

acs

Hello All

Have a client that has a mix of full fat and thin clients, the full fat clients being W10 Pro are connecting into a RDS server.  What am noticing is that one computer is randomly experiencing RDP dropouts.  Initially thought it was the NIC and cabling then swapped for a USB to NIC dongle.

The user is still experiencing the same issue and randomly it has happened with another user on a W10 laptop.  Wondering if Sophos Intercept X is possibly the culprit here? Not Sophos XG or anything like that, want to rule out Sophos as it's becoming annoying for the client now.

Anyone else has issues with RDP and Sophos?

Thank you

Terry



This thread was automatically locked due to age.
  • 0

    Hi Terry,

    Thanks for reaching out to us. 

    The easiest way to test if Sophos is playing a part in things would be to uninstall Sophos from the affected device and to monitor over the course of a day or so.

    If you do not wish to completely remove Sophos from the device, you can also create a testing Policy from Sophos Central to be applied to the one endpoint. In the new Policy, I recommend disabling some features progressively to see if one of them is the root cause of the problem. 

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
  • 0

    Have you tried disabling the Sophos IPS feature?

    To do so, in the Threat Protection policy, there is the option under "Protect network traffic", named:

    • Prevent malicious network traffic with packet inspection (IPS)

    Once the client receives the policy, the SophosIPS.exe process will terminate.  That is the most likely feature I suspect. 

    Failing which, additionally disable Web Control and Web Protection features but I'd be surprised if it was related as it's not a browser process. but to do so, in the Threat Protection policy, under the section: "Real-time Scanning - Internet" there are the 2 options for web protection:

    • Scan downloads in progress
    • Block access to malicious websites

    To disable Web Control, that needs to be in the Web Control policy.

    Once Web Protection features and Web Control is disabled the SophosNetFilter.exe process will exit.

Unfiltered HTML