This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

"ssl_error_bad_mac_alert" "PR_END_OF_FILE_ERROR"

Good morning, 

since we enrolled Sophos Central Endpoint protection we got the Problem, that sometimes, we get these Errors as Mentioned above.

PR_END_OF_FILE_ERROR
ssl_error_bad_mac_alert

if the User waits 5 Minutes and tries to connect the Website again, everything is working fine.

Any ideas?



This thread was automatically locked due to age.
Parents
  • Hi Alexander,

    Thanks for reaching out to us. 

    Looking into some of our previous support-cases, the following setting changes on the Sophos Firewall have had some positive results for other customers. 

    - tcp-selective-acknowledgement deactivated
    - firewall-acceleration deactivated
    - restrict client traffic during identity probe deactivated

    Let me know if this works for you.

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hello Lakhan, thanks for the answer.

    We are not using a Sophos Firewall on the customer side.

    the customer has only installed sophos central intercept X Endpoint protection.

  • PR_END_OF_FILE_ERROR usually happens when Sophos Endpoint updates IPS patterns or NTP module and is fixed by Browser restart. I have never seen the error to disappear before I restarted the browser. Mostly firefox.

    You can check these events from this log and align them with the reports of your users.

    C:\ProgramData\Sophos\AutoUpdate\Logs\SophosUpdate.log

    search for " Installing component"

    I have never seen the other MAC message.

  • we have this Problem since 3 Weeks already, we have restarted the Browser and the Computer multiple Times.

    And the Issue resolves itself most of the times by just waiting 5 Minutes.

    But i will check the Logs.

  • Hello Alexander,
    we have exactly the same problem. The error message is displayed during a Google search in FireFox and disappears by itself after 5min. However, I have noticed that the error does not occur with another search engine in FireFox or another browser.
    Have you already found a solution?

Reply
  • Hello Alexander,
    we have exactly the same problem. The error message is displayed during a Google search in FireFox and disappears by itself after 5min. However, I have noticed that the error does not occur with another search engine in FireFox or another browser.
    Have you already found a solution?

Children