Sophos AP/APX users may experience issues registering to Sophos Central. More info available here: Central Wireless
We have had an increase in customers reporting that when using our "Threat Cases" component users are unable to use the Windows NT Kernal Logger for other traces.
When running xperf customers may see the error "xperf: error: NT Kernel Logger: Cannot create a file when that file already exists. (0xb7)."
The following sections are covered:
Applies to the following Sophos products and versions Central Server Core Agent 2.1.4Central Windows Core Agent 2.2.3
Unfortunately this is the nature of using a communal resource such as the NT Kernel Logger, the component "Sophos Data Recorder" requires this logging in order to generate threat cases.
The only workaround if you wish to use this is to turn off the feature "Enable Threat Case creation" section within the "Threat Protection" Policy.
Turning off this functionality will stop endpoints from being able to send Threat Cases up to Sophos Central. For more information on this functionality see Sophos Central: Threat Cases overview
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.