This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

M86 Mobile Client and Sophos 9.5

We use a M86 webfilter appliance and thier mobile client on our laptops to keep them behind the filter when they are not in our buildings.  It keeps a lot of spyware and other bad things off of our laptops and up until now it has worked fairly well.

We recently upgraded from 9.0 to 9.5 and now if I install the M86 Mobile Client after Sophos has been installed, it destroys the IP stack so that I no longer get an IP from my DHCP server.  If I hard code the IP, I can ping IP addresses, but DNS doesn't work at all.  I have to uninstall the mobile client to get the computer usable again.

If I install the Mobile Client prior to installing Sophos, it all works.    My group policy installs Sophos on the first boot after joining the domain.  If it's a laptop, we then install the M86 Mobile Client.  We cannot do that at this time and I'll have to disable my current Sophos installation policy and wait until the mobile client is installed and then install Sophos. 

With Sophos 9.0 it didn't do this.

:7709


This thread was automatically locked due to age.
  • Hi,

    From what you describe the first thing I would consider would be the new LSP component of SAV 9.5.  

    Are you enabling the "Web protection" option in SAV on these machines?

    It could be a conflict of LSPs, does the other software register one?

    The output of:

    netsh winsock show catalog > winsock.txt

    would be interesting in the broken state.

    Regards,

    Jak

    :7725
  • Before M86 Installation:

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Layered Chain Entry
    Description:                        Sophos Web Intelligence LSP
    Provider ID:                        {6D4F7829-C41A-48B0-8926-4B0E9E6EC145}
    Provider Path:                      C:\Documents and Settings\All Users\Application Data\Sophos Web Intelligence\swi_lsp.dll
    Catalog Entry ID:                   1045
    Version:                            2
    Address Family:                     2
    Max Address Length:                 16
    Min Address Length:                 16
    Socket Type:                        1
    Protocol:                           6
    Protocol Chain Length:              2
    Protocol Chain: 1044 : 1001
    
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Layered Chain Entry
    Description:                        Sophos Web Intelligence LSP
    Provider ID:                        {9162D29C-5C39-4FD2-8088-D25CC24DC236}
    Provider Path:                      C:\Documents and Settings\All Users\Application Data\Sophos Web Intelligence\swi_lsp.dll
    Catalog Entry ID:                   1046
    Version:                            2
    Address Family:                     2
    Max Address Length:                 16
    Min Address Length:                 16
    Socket Type:                        2
    Protocol:                           17
    Protocol Chain Length:              2
    Protocol Chain: 1044 : 1002
    
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        MSAFD Tcpip [TCP/IP]
    Provider ID:                        {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
    Provider Path:                      %SystemRoot%\system32\mswsock.dll
    Catalog Entry ID:                   1001
    Version:                            2
    Address Family:                     2
    Max Address Length:                 16
    Min Address Length:                 16
    Socket Type:                        1
    Protocol:                           6
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        MSAFD Tcpip [UDP/IP]
    Provider ID:                        {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
    Provider Path:                      %SystemRoot%\system32\mswsock.dll
    Catalog Entry ID:                   1002
    Version:                            2
    Address Family:                     2
    Max Address Length:                 16
    Min Address Length:                 16
    Socket Type:                        2
    Protocol:                           17
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        MSAFD Tcpip [RAW/IP]
    Provider ID:                        {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
    Provider Path:                      %SystemRoot%\system32\mswsock.dll
    Catalog Entry ID:                   1003
    Version:                            2
    Address Family:                     2
    Max Address Length:                 16
    Min Address Length:                 16
    Socket Type:                        3
    Protocol:                           0
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        RSVP UDP Service Provider
    Provider ID:                        {9D60A9E0-337A-11D0-BD88-0000C082E69A}
    Provider Path:                      %SystemRoot%\system32\rsvpsp.dll
    Catalog Entry ID:                   1004
    Version:                            6
    Address Family:                     2
    Max Address Length:                 16
    Min Address Length:                 16
    Socket Type:                        2
    Protocol:                           17
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        RSVP TCP Service Provider
    Provider ID:                        {9D60A9E0-337A-11D0-BD88-0000C082E69A}
    Provider Path:                      %SystemRoot%\system32\rsvpsp.dll
    Catalog Entry ID:                   1005
    Version:                            6
    Address Family:                     2
    Max Address Length:                 16
    Min Address Length:                 16
    Socket Type:                        1
    Protocol:                           6
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] SEQPACKET 3
    Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:                      %SystemRoot%\system32\mswsock.dll
    Catalog Entry ID:                   1012
    Version:                            2
    Address Family:                     17
    Max Address Length:                 20
    Min Address Length:                 20
    Socket Type:                        5
    Protocol:                           -3
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] DATAGRAM 3
    Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:                      %SystemRoot%\system32\mswsock.dll
    Catalog Entry ID:                   1013
    Version:                            2
    Address Family:                     17
    Max Address Length:                 20
    Min Address Length:                 20
    Socket Type:                        2
    Protocol:                           -3
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] SEQPACKET 0
    Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:                      %SystemRoot%\system32\mswsock.dll
    Catalog Entry ID:                   1014
    Version:                            2
    Address Family:                     17
    Max Address Length:                 20
    Min Address Length:                 20
    Socket Type:                        5
    Protocol:                           -2147483648
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] DATAGRAM 0
    Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:                      %SystemRoot%\system32\mswsock.dll
    Catalog Entry ID:                   1015
    Version:                            2
    Address Family:                     17
    Max Address Length:                 20
    Min Address Length:                 20
    Socket Type:                        2
    Protocol:                           -2147483648
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] SEQPACKET 1
    Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:                      %SystemRoot%\system32\mswsock.dll
    Catalog Entry ID:                   1016
    Version:                            2
    Address Family:                     17
    Max Address Length:                 20
    Min Address Length:                 20
    Socket Type:                        5
    Protocol:                           -1
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] DATAGRAM 1
    Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:                      %SystemRoot%\system32\mswsock.dll
    Catalog Entry ID:                   1017
    Version:                            2
    Address Family:                     17
    Max Address Length:                 20
    Min Address Length:                 20
    Socket Type:                        2
    Protocol:                           -1
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] SEQPACKET 2
    Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:                      %SystemRoot%\system32\mswsock.dll
    Catalog Entry ID:                   1018
    Version:                            2
    Address Family:                     17
    Max Address Length:                 20
    Min Address Length:                 20
    Socket Type:                        5
    Protocol:                           -2
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Base Service Provider
    Description:                        MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] DATAGRAM 2
    Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:                      %SystemRoot%\system32\mswsock.dll
    Catalog Entry ID:                   1019
    Version:                            2
    Address Family:                     17
    Max Address Length:                 20
    Min Address Length:                 20
    Socket Type:                        2
    Protocol:                           -2
    Protocol Chain Length:              1
    
    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type:                         Layered Service Provider
    Description:                        Sophos Web Intelligence LSP
    Provider ID:                        {8BFC85A0-09DF-4E9D-8C89-DC87DA833CC8}
    Provider Path:                      C:\Documents and Settings\All Users\Application Data\Sophos Web Intelligence\swi_lsp.dll
    Catalog Entry ID:                   1044
    Version:                            2
    Address Family:                     2
    Max Address Length:                 16
    Min Address Length:                 16
    Socket Type:                        0
    Protocol:                           0
    Protocol Chain Length:              0
    
    Name Space Provider Entry
    ------------------------------------------------------
    Description:                        Tcpip
    Provider ID:                        {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
    Name Space:                         12
    Active:                             1
    Version:                            0
    
    
    Name Space Provider Entry
    ------------------------------------------------------
    Description:                        NTDS
    Provider ID:                        {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
    Name Space:                         32
    Active:                             1
    Version:                            0
    
    
    Name Space Provider Entry
    ------------------------------------------------------
    Description:                        Network Location Awareness (NLA) Namespace
    Provider ID:                        {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
    Name Space:                         15
    Active:                             1
    Version:                            0
    :7747
  • After M86 install: with some editing to get under 20000 chars

    WCPE
    -
    Entry Type:            Layered Chain Entry
    Description:           BSLSP Sophos Web Intelligence LSP
    Provider ID:           {39F4D560-7532-43AC-A8C6-EC5CE00EF4E4}
    Provider Path:         SYS32\InetCntrl0012.dll
    Catalog Entry ID:      1076
    Version:               2
    Address Family:        2
    Max Address Length:    16
    Min Address Length:    16
    Socket Type:           1
    Protocol:              6
    Protocol Chain Length: 3
    Protocol Chain: 1075 : 1044 : 1001
    
    WCPE
    -
    Entry Type:            Layered Chain Entry
    Description:           BSLSP Sophos Web Intelligence LSP
    Provider ID:           {771B7928-EEDD-4FA5-BA0F-6EA1D631DBA4}
    Provider Path:         SYS32\InetCntrl0012.dll
    Catalog Entry ID:      1077
    Version:               2
    Address Family:        2
    Max Address Length:    16
    Min Address Length:    16
    Socket Type:           2
    Protocol:              17
    Protocol Chain Length: 3
    Protocol Chain: 1075 : 1044 : 1002
    
    WCPE
    -
    Entry Type:            Layered Chain Entry
    Description:           BSLSP MSAFD Tcpip [TCP/IP]
    Provider ID:           {D98802EA-7C22-4B96-BEB3-5726245904E0}
    Provider Path:         SYS32\InetCntrl0012.dll
    Catalog Entry ID:      1078
    Version:               2
    Address Family:        2
    Max Address Length:    16
    Min Address Length:    16
    Socket Type:           1
    Protocol:              6
    Protocol Chain Length: 2
    Protocol Chain: 1075 : 1001
    
    WCPE
    -
    Entry Type:            Layered Chain Entry
    Description:           BSLSP MSAFD Tcpip [UDP/IP]
    Provider ID:           {273A0B10-1A80-4BE7-8483-195ABFEC52D7}
    Provider Path:         SYS32\InetCntrl0012.dll
    Catalog Entry ID:      1079
    Version:               2
    Address Family:        2
    Max Address Length:    16
    Min Address Length:    16
    Socket Type:           2
    Protocol:              17
    Protocol Chain Length: 2
    Protocol Chain: 1075 : 1002
    
    WCPE
    -
    Entry Type:             Layered Chain Entry
    Description:            BSLSP MSAFD Tcpip [RAW/IP]
    Provider ID:            {30D4CA8E-1379-4779-9CA8-AEDD553D94F7}
    Provider Path:          SYS32\InetCntrl0012.dll
    Catalog Entry ID:       1080
    Version:                2
    Address Family:         2
    Max Address Length:     16
    Min Address Length:     16
    Socket Type:            3
    Protocol:               0
    Protocol Chain Length:  2
    Protocol Chain: 1075 : 1003
    
    WCPE
    -
    Entry Type:             Layered Chain Entry
    Description:            BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] SEQPACKET 3
    Provider ID:            {5E75D9B5-0654-4ABD-B3C9-669024B1E03D}
    Provider Path:          SYS32\InetCntrl0012.dll
    Catalog Entry ID:       1081
    Version:                2
    Address Family:         17
    Max Address Length:     20
    Min Address Length:     20
    Socket Type:            5
    Protocol:               -3
    Protocol Chain Length:  2
    Protocol Chain: 1075 : 1012
    
    WCPE
    -
    Entry Type:             Layered Chain Entry
    Description:            BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] DATAGRAM 3
    Provider ID:            {16756CB7-6CD1-4D1F-B4ED-6E30ACAD6C78}
    Provider Path:          SYS32\InetCntrl0012.dll
    Catalog Entry ID:       1082
    Version:                2
    Address Family:         17
    Max Address Length:     20
    Min Address Length:     20
    Socket Type:            2
    Protocol:               -3
    Protocol Chain Length:  2
    Protocol Chain: 1075 : 1013
    
    WCPE
    -
    Entry Type:             Layered Chain Entry
    Description:            BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] SEQPACKET 0
    Provider ID:            {540BB3E9-B041-4D12-B2F9-D353C846A2EA}
    Provider Path:          SYS32\InetCntrl0012.dll
    Catalog Entry ID:       1083
    Version:                2
    Address Family:         17
    Max Address Length:     20
    Min Address Length:     20
    Socket Type:            5
    Protocol:               -2147483648
    Protocol Chain Length:  2
    Protocol Chain: 1075 : 1014
    
    WCPE
    -
    Entry Type:             Layered Chain Entry
    Description:            BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] DATAGRAM 0
    Provider ID:            {FE2CDEF2-68BF-403F-8796-E476AA3FB6A4}
    Provider Path:          SYS32\InetCntrl0012.dll
    Catalog Entry ID:       1084
    Version:                2
    Address Family:         17
    Max Address Length:     20
    Min Address Length:     20
    Socket Type:            2
    Protocol:               -2147483648
    Protocol Chain Length:  2
    Protocol Chain: 1075 : 1015
    
    WCPE
    -
    Entry Type:             Layered Chain Entry
    Description:            BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] SEQPACKET 1
    Provider ID:            {9E329F71-E2B0-4AA0-8214-2619321C9316}
    Provider Path:          SYS32\InetCntrl0012.dll
    Catalog Entry ID:       1085
    Version:                2
    Address Family:         17
    Max Address Length:     20
    Min Address Length:     20
    Socket Type:            5
    Protocol:               -1
    Protocol Chain Length:  2
    Protocol Chain: 1075 : 1016
    
    WCPE
    -
    Entry Type:             Layered Chain Entry
    Description:            BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] DATAGRAM 1
    Provider ID:            {F5E92C10-8EBC-4591-BBFD-E4C236D58B3E}
    Provider Path:          SYS32\InetCntrl0012.dll
    Catalog Entry ID:       1086
    Version:                2
    Address Family:         17
    Max Address Length:     20
    Min Address Length:     20
    Socket Type:            2
    Protocol:               -1
    Protocol Chain Length:  2
    Protocol Chain: 1075 : 1017
    
    WCPE
    -
    Entry Type:             Layered Chain Entry
    Description:            BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] SEQPACKET 2
    Provider ID:            {C6F7BDF2-26CE-4729-95CD-842A0BDF02E5}
    Provider Path:          SYS32\InetCntrl0012.dll
    Catalog Entry ID:       1087
    Version:                2
    Address Family:         17
    Max Address Length:     20
    Min Address Length:     20
    Socket Type:            5
    Protocol:               -2
    Protocol Chain Length:  2
    Protocol Chain: 1075 : 1018
    
    WCPE
    -
    Entry Type:             Layered Chain Entry
    Description:            BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] DATAGRAM 2
    Provider ID:            {79FD7BA9-42C3-4B63-B79F-AE1FC6F645E6}
    Provider Path:          SYS32\InetCntrl0012.dll
    Catalog Entry ID:       1088
    Version:                2
    Address Family:         17
    Max Address Length:     20
    Min Address Length:     20
    Socket Type:            2
    Protocol:               -2
    Protocol Chain Length:  2
    Protocol Chain: 1075 : 1019
    
    WCPE
    -
    Entry Type:             Layered Chain Entry
    Description:            Sophos Web Intelligence LSP
    Provider ID:            {6D4F7829-C41A-48B0-8926-4B0E9E6EC145}
    Provider Path:          All Users\AppData\Sophos Web Intelligence\swi_lsp.dll
    Catalog Entry ID:       1045
    Version:                2
    Address Family:         2
    Max Address Length:     16
    Min Address Length:     16
    Socket Type:            1
    Protocol:               6
    Protocol Chain Length:  2
    Protocol Chain: 1044 : 1001
    
    WCPE
    -
    Entry Type:              Layered Chain Entry
    Description:             Sophos Web Intelligence LSP
    Provider ID:             {9162D29C-5C39-4FD2-8088-D25CC24DC236}
    Provider Path:           All Users\AppData\Sophos Web Intelligence\swi_lsp.dll
    Catalog Entry ID:        1046
    Version:                 2
    Address Family:          2
    Max Address Length:      16
    Min Address Length:      16
    Socket Type:             2
    Protocol:                17
    Protocol Chain Length:   2
    Protocol Chain: 1044 : 1002
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             MSAFD Tcpip [TCP/IP]
    Provider ID:             {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
    Provider Path:           SYS32\mswsock.dll
    Catalog Entry ID:        1001
    Version:                 2
    Address Family:          2
    Max Address Length:      16
    Min Address Length:      16
    Socket Type:             1
    Protocol:                6
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             MSAFD Tcpip [UDP/IP]
    Provider ID:             {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
    Provider Path:           SYS32\mswsock.dll
    Catalog Entry ID:        1002
    Version:                 2
    Address Family:          2
    Max Address Length:      16
    Min Address Length:      16
    Socket Type:             2
    Protocol:                17
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             MSAFD Tcpip [RAW/IP]
    Provider ID:             {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
    Provider Path:           SYS32\mswsock.dll
    Catalog Entry ID:        1003
    Version:                 2
    Address Family:          2
    Max Address Length:      16
    Min Address Length:      16
    Socket Type:             3
    Protocol:                0
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             RSVP UDP Service Provider
    Provider ID:             {9D60A9E0-337A-11D0-BD88-0000C082E69A}
    Provider Path:           SYS32\rsvpsp.dll
    Catalog Entry ID:        1004
    Version:                 6
    Address Family:          2
    Max Address Length:      16
    Min Address Length:      16
    Socket Type:             2
    Protocol:                17
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             RSVP TCP Service Provider
    Provider ID:             {9D60A9E0-337A-11D0-BD88-0000C082E69A}
    Provider Path:           SYS32\rsvpsp.dll
    Catalog Entry ID:        1005
    Version:                 6
    Address Family:          2
    Max Address Length:      16
    Min Address Length:      16
    Socket Type:             1
    Protocol:                6
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] SEQPACKET 3
    Provider ID:             {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:           SYS32\mswsock.dll
    Catalog Entry ID:        1012
    Version:                 2
    Address Family:          17
    Max Address Length:      20
    Min Address Length:      20
    Socket Type:             5
    Protocol:                -3
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] DATAGRAM 3
    Provider ID:             {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:           SYS32\mswsock.dll
    Catalog Entry ID:        1013
    Version:                 2
    Address Family:          17
    Max Address Length:      20
    Min Address Length:      20
    Socket Type:             2
    Protocol:                -3
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] SEQPACKET 0
    Provider ID:             {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:           SYS32\mswsock.dll
    Catalog Entry ID:        1014
    Version:                 2
    Address Family:          17
    Max Address Length:      20
    Min Address Length:      20
    Socket Type:             5
    Protocol:                -2147483648
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] DATAGRAM 0
    Provider ID:             {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:           SYS32\mswsock.dll
    Catalog Entry ID:        1015
    Version:                 2
    Address Family:          17
    Max Address Length:      20
    Min Address Length:      20
    Socket Type:             2
    Protocol:                -2147483648
    Protocol Chain Length:   1
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] SEQPACKET 1
    Provider ID:             {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:           SYS32\mswsock.dll
    Catalog Entry ID:        1016
    Version:                 2
    Address Family:          17
    Max Address Length:      20
    Min Address Length:      20
    Socket Type:             5
    Protocol:                -1
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] DATAGRAM 1
    Provider ID:             {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:           SYS32\mswsock.dll
    Catalog Entry ID:        1017
    Version:                 2
    Address Family:          17
    Max Address Length:      20
    Min Address Length:      20
    Socket Type:             2
    Protocol:                -1
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] SEQPACKET 2
    Provider ID:             {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:           SYS32\mswsock.dll
    Catalog Entry ID:        1018
    Version:                 2
    Address Family:          17
    Max Address Length:      20
    Min Address Length:      20
    Socket Type:             5
    Protocol:                -2
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Base Service Provider
    Description:             MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] DATAGRAM 2
    Provider ID:             {8D5F1830-C273-11CF-95C8-00805F48A192}
    Provider Path:           SYS32\mswsock.dll
    Catalog Entry ID:        1019
    Version:                 2
    Address Family:          17
    Max Address Length:      20
    Min Address Length:      20
    Socket Type:             2
    Protocol:                -2
    Protocol Chain Length:   1
    
    WCPE
    -
    Entry Type:              Layered Service Provider
    Description:             Sophos Web Intelligence LSP
    Provider ID:             {8BFC85A0-09DF-4E9D-8C89-DC87DA833CC8}
    Provider Path:           All Users\AppData\Sophos Web Intelligence\swi_lsp.dll
    Catalog Entry ID:        1044
    Version:                 2
    Address Family:          2
    Max Address Length:      16
    Min Address Length:      16
    Socket Type:             0
    Protocol:                0
    Protocol Chain Length:   0
    
    WCPE
    -
    Entry Type:              Layered Service Provider
    Description:             BSafe Layered Service Provider
    Provider ID:             {97016DAA-8EEA-4CE5-94A9-B313D851D255}
    Provider Path:           SYS32\InetCntrl0012.dll
    Catalog Entry ID:        1075
    Version:                 1
    Address Family:          2
    Max Address Length:      16
    Min Address Length:      16
    Socket Type:             1
    Protocol:                6
    Protocol Chain Length:   0
    
    Name Space Provider Entry
    -
    Description:             Tcpip
    Provider ID:             {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
    Name Space:              12
    Active:                  1
    Version:                 0
    
    Name Space Provider Entry
    -
    Description:             NTDS
    Provider ID:             {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
    Name Space:              32
    Active:                  1
    Version:                 0
    
    Name Space Provider Entry
    -
    Description:             Network Location Awareness (NLA) Namespace
    Provider ID:             {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
    Name Space:              15
    Active:                  1
    Version:                 0
    :7755
  • Hello, It does look like a conflict of LSPs as the "after" shows the additional "BSafe Layered Service Provider" (InetCntrl0012.dll) having been added.  It's not on this list:

    http://www.sophos.com/support/knowledgebase/article/111203.html

    though so you might want to get in touch with Support.

    For the short term you might have to disable one of the LSPs as I assume each product works fine in isolation.  If you choose to disable the Sophos LSP, turning off "web protection" in the policy or locally and rebooting should remove Sophos.  You might want to check after the machine starts up there are no entries for Sophos in the same command you ran previously.  I assume everything works again?

    Regards,

    Jak

    :7763
  • Thanks Jak!!

    I was heading down that path when I saw your post.  If I disable the Sophos web protection, (I did so with a new Sophos AV policy from my Enterprise console) then wait for the policy to update, I can then install the M86 mobile client without issues.  It continues to be just fine if I enable the web protection again.  Obviously the order of the items in the LSP matters.  I've seen one tool that shows and can disable LSP providers (LSPFix.exe), but haven't seen anything that might let you try to change the order of the providers.

    Russ

    :7793