This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos And NCR Counterpoin SQL (Critical issue)

I am a counterpoint installer working in an environment with sophos endpoint. Before the sophos software was installed the communication between the workstations and application server running counterpoint was smooth. With the introduction of sophos the communication is slowed to a crawl and more often than not completely blocked. Is there a way to allow NCR Counterpoint to not be impeded in any way? The technicians who installed sophos we are in contact with say that they have done everything possible to make sure counterpoint can function but everything is still crawling or blocked. What else is there that can be done. Please help this is very urgent for our clientele.

This thread was automatically locked due to age.

0 Gowtham Mani over 6 years ago

Hi Ashley Smith,

Is the application being detected or is it slowed down when Sophos antivirus is installed alongside?

Also, can you confirm the components that you have installed on the Sophos client?

Regards,

Gowtham Mani
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ashley Smith over 6 years ago in reply to Gowtham Mani

The application is slowed down when sophos is installed along side. Also the components installed are Sophos endpoint agent
Cancel
Vote Up 0 Vote Down

Cancel
0 jak over 6 years ago in reply to Ashley Smith

Are the computers managed by Sophos Central (Cloud) or Enterprise Console (SEC)?

What features have you disabled to see what helps improve things?

For example, does disabling real-time/on-access scanning help? If so, I would think an exclusion could be made.

Does it help to disable malicious traffic detection for example?

I assume the "issue" is due to Sophos on the client computer rather than on the server which hosts the SQL database?

Without knowing more about the software it's hard to comment as to what layer/feature of Sophos could be conflicting.

Regards,

Jak
Cancel
Vote Up 0 Vote Down

Cancel
0 Ashley Smith over 6 years ago in reply to jak

The software communicates primarily through opening port the port 51968.
Cancel
Vote Up 0 Vote Down

Cancel
0 jak over 6 years ago in reply to Ashley Smith

OK, not much to go on. Given that, I might suspect Malicious Traffic Detection. Have you tried disabling that feature?

If you're using SEC it is under: https://docs.sophos.com/esg/enterprise-console/5-5/help/en-us/webhelp/index.htm#concepts/What_is_HIPS.htm

If you're using Central it is labelled "Detect network traffic to command and control servers" in the Threat Protection policy.

Regards,

Jak
Cancel
Vote Up 0 Vote Down

Cancel