We use a M86 webfilter appliance and thier mobile client on our laptops to keep them behind the filter when they are not in our buildings. It keeps a lot of spyware and other bad things off of our laptops and up until now it has worked fairly well.
We recently upgraded from 9.0 to 9.5 and now if I install the M86 Mobile Client after Sophos has been installed, it destroys the IP stack so that I no longer get an IP from my DHCP server. If I hard code the IP, I can ping IP addresses, but DNS doesn't work at all. I have to uninstall the mobile client to get the computer usable again.
If I install the Mobile Client prior to installing Sophos, it all works. My group policy installs Sophos on the first boot after joining the domain. If it's a laptop, we then install the M86 Mobile Client. We cannot do that at this time and I'll have to disable my current Sophos installation policy and wait until the mobile client is installed and then install Sophos.
With Sophos 9.0 it didn't do this.
Hi,
From what you describe the first thing I would consider would be the new LSP component of SAV 9.5.
Are you enabling the "Web protection" option in SAV on these machines?
It could be a conflict of LSPs, does the other software register one?
The output of:
netsh winsock show catalog > winsock.txt
would be interesting in the broken state.
Regards,
Jak
Before M86 Installation:
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Layered Chain Entry
Description: Sophos Web Intelligence LSP
Provider ID: {6D4F7829-C41A-48B0-8926-4B0E9E6EC145}
Provider Path: C:\Documents and Settings\All Users\Application Data\Sophos Web Intelligence\swi_lsp.dll
Catalog Entry ID: 1045
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 1
Protocol: 6
Protocol Chain Length: 2
Protocol Chain: 1044 : 1001
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Layered Chain Entry
Description: Sophos Web Intelligence LSP
Provider ID: {9162D29C-5C39-4FD2-8088-D25CC24DC236}
Provider Path: C:\Documents and Settings\All Users\Application Data\Sophos Web Intelligence\swi_lsp.dll
Catalog Entry ID: 1046
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 2
Protocol: 17
Protocol Chain Length: 2
Protocol Chain: 1044 : 1002
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD Tcpip [TCP/IP]
Provider ID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1001
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 1
Protocol: 6
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD Tcpip [UDP/IP]
Provider ID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1002
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 2
Protocol: 17
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD Tcpip [RAW/IP]
Provider ID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1003
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 3
Protocol: 0
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: RSVP UDP Service Provider
Provider ID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Provider Path: %SystemRoot%\system32\rsvpsp.dll
Catalog Entry ID: 1004
Version: 6
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 2
Protocol: 17
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: RSVP TCP Service Provider
Provider ID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Provider Path: %SystemRoot%\system32\rsvpsp.dll
Catalog Entry ID: 1005
Version: 6
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 1
Protocol: 6
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] SEQPACKET 3
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1012
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -3
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] DATAGRAM 3
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1013
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -3
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] SEQPACKET 0
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1014
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -2147483648
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] DATAGRAM 0
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1015
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -2147483648
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] SEQPACKET 1
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1016
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -1
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] DATAGRAM 1
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1017
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -1
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] SEQPACKET 2
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1018
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -2
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] DATAGRAM 2
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1019
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -2
Protocol Chain Length: 1
Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Layered Service Provider
Description: Sophos Web Intelligence LSP
Provider ID: {8BFC85A0-09DF-4E9D-8C89-DC87DA833CC8}
Provider Path: C:\Documents and Settings\All Users\Application Data\Sophos Web Intelligence\swi_lsp.dll
Catalog Entry ID: 1044
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 0
Protocol: 0
Protocol Chain Length: 0
Name Space Provider Entry
------------------------------------------------------
Description: Tcpip
Provider ID: {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
Name Space: 12
Active: 1
Version: 0
Name Space Provider Entry
------------------------------------------------------
Description: NTDS
Provider ID: {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
Name Space: 32
Active: 1
Version: 0
Name Space Provider Entry
------------------------------------------------------
Description: Network Location Awareness (NLA) Namespace
Provider ID: {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
Name Space: 15
Active: 1
Version: 0After M86 install: with some editing to get under 20000 chars
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP Sophos Web Intelligence LSP
Provider ID: {39F4D560-7532-43AC-A8C6-EC5CE00EF4E4}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1076
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 1
Protocol: 6
Protocol Chain Length: 3
Protocol Chain: 1075 : 1044 : 1001
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP Sophos Web Intelligence LSP
Provider ID: {771B7928-EEDD-4FA5-BA0F-6EA1D631DBA4}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1077
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 2
Protocol: 17
Protocol Chain Length: 3
Protocol Chain: 1075 : 1044 : 1002
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP MSAFD Tcpip [TCP/IP]
Provider ID: {D98802EA-7C22-4B96-BEB3-5726245904E0}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1078
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 1
Protocol: 6
Protocol Chain Length: 2
Protocol Chain: 1075 : 1001
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP MSAFD Tcpip [UDP/IP]
Provider ID: {273A0B10-1A80-4BE7-8483-195ABFEC52D7}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1079
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 2
Protocol: 17
Protocol Chain Length: 2
Protocol Chain: 1075 : 1002
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP MSAFD Tcpip [RAW/IP]
Provider ID: {30D4CA8E-1379-4779-9CA8-AEDD553D94F7}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1080
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 3
Protocol: 0
Protocol Chain Length: 2
Protocol Chain: 1075 : 1003
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] SEQPACKET 3
Provider ID: {5E75D9B5-0654-4ABD-B3C9-669024B1E03D}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1081
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -3
Protocol Chain Length: 2
Protocol Chain: 1075 : 1012
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] DATAGRAM 3
Provider ID: {16756CB7-6CD1-4D1F-B4ED-6E30ACAD6C78}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1082
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -3
Protocol Chain Length: 2
Protocol Chain: 1075 : 1013
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] SEQPACKET 0
Provider ID: {540BB3E9-B041-4D12-B2F9-D353C846A2EA}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1083
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -2147483648
Protocol Chain Length: 2
Protocol Chain: 1075 : 1014
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] DATAGRAM 0
Provider ID: {FE2CDEF2-68BF-403F-8796-E476AA3FB6A4}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1084
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -2147483648
Protocol Chain Length: 2
Protocol Chain: 1075 : 1015
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] SEQPACKET 1
Provider ID: {9E329F71-E2B0-4AA0-8214-2619321C9316}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1085
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -1
Protocol Chain Length: 2
Protocol Chain: 1075 : 1016
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] DATAGRAM 1
Provider ID: {F5E92C10-8EBC-4591-BBFD-E4C236D58B3E}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1086
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -1
Protocol Chain Length: 2
Protocol Chain: 1075 : 1017
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] SEQPACKET 2
Provider ID: {C6F7BDF2-26CE-4729-95CD-842A0BDF02E5}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1087
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -2
Protocol Chain Length: 2
Protocol Chain: 1075 : 1018
WCPE
-
Entry Type: Layered Chain Entry
Description: BSLSP MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] DATAGRAM 2
Provider ID: {79FD7BA9-42C3-4B63-B79F-AE1FC6F645E6}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1088
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -2
Protocol Chain Length: 2
Protocol Chain: 1075 : 1019
WCPE
-
Entry Type: Layered Chain Entry
Description: Sophos Web Intelligence LSP
Provider ID: {6D4F7829-C41A-48B0-8926-4B0E9E6EC145}
Provider Path: All Users\AppData\Sophos Web Intelligence\swi_lsp.dll
Catalog Entry ID: 1045
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 1
Protocol: 6
Protocol Chain Length: 2
Protocol Chain: 1044 : 1001
WCPE
-
Entry Type: Layered Chain Entry
Description: Sophos Web Intelligence LSP
Provider ID: {9162D29C-5C39-4FD2-8088-D25CC24DC236}
Provider Path: All Users\AppData\Sophos Web Intelligence\swi_lsp.dll
Catalog Entry ID: 1046
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 2
Protocol: 17
Protocol Chain Length: 2
Protocol Chain: 1044 : 1002
WCPE
-
Entry Type: Base Service Provider
Description: MSAFD Tcpip [TCP/IP]
Provider ID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Provider Path: SYS32\mswsock.dll
Catalog Entry ID: 1001
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 1
Protocol: 6
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: MSAFD Tcpip [UDP/IP]
Provider ID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Provider Path: SYS32\mswsock.dll
Catalog Entry ID: 1002
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 2
Protocol: 17
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: MSAFD Tcpip [RAW/IP]
Provider ID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Provider Path: SYS32\mswsock.dll
Catalog Entry ID: 1003
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 3
Protocol: 0
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: RSVP UDP Service Provider
Provider ID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Provider Path: SYS32\rsvpsp.dll
Catalog Entry ID: 1004
Version: 6
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 2
Protocol: 17
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: RSVP TCP Service Provider
Provider ID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Provider Path: SYS32\rsvpsp.dll
Catalog Entry ID: 1005
Version: 6
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 1
Protocol: 6
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] SEQPACKET 3
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: SYS32\mswsock.dll
Catalog Entry ID: 1012
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -3
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A8D30207-C86D-4624-9294-7D5BAB957045}] DATAGRAM 3
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: SYS32\mswsock.dll
Catalog Entry ID: 1013
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -3
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] SEQPACKET 0
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: SYS32\mswsock.dll
Catalog Entry ID: 1014
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -2147483648
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DB4788E-7C0B-442E-9DC4-37037F17A44D}] DATAGRAM 0
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: SYS32\mswsock.dll
Catalog Entry ID: 1015
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -2147483648
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] SEQPACKET 1
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: SYS32\mswsock.dll
Catalog Entry ID: 1016
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -1
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{55A5E7E1-C51E-4966-A911-E32BF8B83BD5}] DATAGRAM 1
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: SYS32\mswsock.dll
Catalog Entry ID: 1017
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -1
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] SEQPACKET 2
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: SYS32\mswsock.dll
Catalog Entry ID: 1018
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -2
Protocol Chain Length: 1
WCPE
-
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{ABF6BD03-2B0B-40AC-AA45-4B94D6543293}] DATAGRAM 2
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: SYS32\mswsock.dll
Catalog Entry ID: 1019
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -2
Protocol Chain Length: 1
WCPE
-
Entry Type: Layered Service Provider
Description: Sophos Web Intelligence LSP
Provider ID: {8BFC85A0-09DF-4E9D-8C89-DC87DA833CC8}
Provider Path: All Users\AppData\Sophos Web Intelligence\swi_lsp.dll
Catalog Entry ID: 1044
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 0
Protocol: 0
Protocol Chain Length: 0
WCPE
-
Entry Type: Layered Service Provider
Description: BSafe Layered Service Provider
Provider ID: {97016DAA-8EEA-4CE5-94A9-B313D851D255}
Provider Path: SYS32\InetCntrl0012.dll
Catalog Entry ID: 1075
Version: 1
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 1
Protocol: 6
Protocol Chain Length: 0
Name Space Provider Entry
-
Description: Tcpip
Provider ID: {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
Name Space: 12
Active: 1
Version: 0
Name Space Provider Entry
-
Description: NTDS
Provider ID: {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
Name Space: 32
Active: 1
Version: 0
Name Space Provider Entry
-
Description: Network Location Awareness (NLA) Namespace
Provider ID: {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
Name Space: 15
Active: 1
Version: 0Hello, It does look like a conflict of LSPs as the "after" shows the additional "BSafe Layered Service Provider" (InetCntrl0012.dll) having been added. It's not on this list:
http://www.sophos.com/support/knowledgebase/article/111203.html
though so you might want to get in touch with Support.
For the short term you might have to disable one of the LSPs as I assume each product works fine in isolation. If you choose to disable the Sophos LSP, turning off "web protection" in the policy or locally and rebooting should remove Sophos. You might want to check after the machine starts up there are no entries for Sophos in the same command you ran previously. I assume everything works again?
Regards,
Jak
Thanks Jak!!
I was heading down that path when I saw your post. If I disable the Sophos web protection, (I did so with a new Sophos AV policy from my Enterprise console) then wait for the policy to update, I can then install the M86 mobile client without issues. It continues to be just fine if I enable the web protection again. Obviously the order of the items in the LSP matters. I've seen one tool that shows and can disable LSP providers (LSPFix.exe), but haven't seen anything that might let you try to change the order of the providers.
Russ
Quote