When an endpoint is added to the Early Access Program Q3 2017 with a current version of Intercept X running alongside the latest version of Symantec Endpoint Protection, the install of Malicious Traffic Detection is blocked due to sntpservice.exe being detected by Symantec Download Insight as a low reputation file (Our information on this file is inconclusive). This is due to using new build Malicious Traffic Detection executable which is unknown to Symantec. The issue occurs at the point where the installer attempts to start the Sophos Network Protection service. Symantec Download Insight registers multiple detection, all of which displays a prompt to the user. The installer hangs as long as a prompt is displayed. Once all prompts have been dismissed by the user, the installer proceeds but fails. The overall update fails as well. The following sections are covered:
Applies to the following Sophos products and versions Early Access Program Q3 2017
Reboot the machine and force a new update to successfully install.
Note: If the installation still fails, set exclusions in Symantec Download Insight.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.