Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 14 subscribers
  • Views 7884 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Random RDP Dropouts

acs

Hello All

Have a client that has a mix of full fat and thin clients, the full fat clients being W10 Pro are connecting into a RDS server.  What am noticing is that one computer is randomly experiencing RDP dropouts.  Initially thought it was the NIC and cabling then swapped for a USB to NIC dongle.

The user is still experiencing the same issue and randomly it has happened with another user on a W10 laptop.  Wondering if Sophos Intercept X is possibly the culprit here? Not Sophos XG or anything like that, want to rule out Sophos as it's becoming annoying for the client now.

Anyone else has issues with RDP and Sophos?

Thank you

Terry



This thread was automatically locked due to age.
Parents
  • 0

    Have you tried disabling the Sophos IPS feature?

    To do so, in the Threat Protection policy, there is the option under "Protect network traffic", named:

    • Prevent malicious network traffic with packet inspection (IPS)

    Once the client receives the policy, the SophosIPS.exe process will terminate.  That is the most likely feature I suspect. 

    Failing which, additionally disable Web Control and Web Protection features but I'd be surprised if it was related as it's not a browser process. but to do so, in the Threat Protection policy, under the section: "Real-time Scanning - Internet" there are the 2 options for web protection:

    • Scan downloads in progress
    • Block access to malicious websites

    To disable Web Control, that needs to be in the Web Control policy.

    Once Web Protection features and Web Control is disabled the SophosNetFilter.exe process will exit.

Reply
  • 0

    Have you tried disabling the Sophos IPS feature?

    To do so, in the Threat Protection policy, there is the option under "Protect network traffic", named:

    • Prevent malicious network traffic with packet inspection (IPS)

    Once the client receives the policy, the SophosIPS.exe process will terminate.  That is the most likely feature I suspect. 

    Failing which, additionally disable Web Control and Web Protection features but I'd be surprised if it was related as it's not a browser process. but to do so, in the Threat Protection policy, under the section: "Real-time Scanning - Internet" there are the 2 options for web protection:

    • Scan downloads in progress
    • Block access to malicious websites

    To disable Web Control, that needs to be in the Web Control policy.

    Once Web Protection features and Web Control is disabled the SophosNetFilter.exe process will exit.

Children
No Data
Unfiltered HTML