sophos client firewall ndis packet filter

Hello gary smith,

indeed scfndis.sys is the Sophos Client Firewall NDIS packet filter. Didn't SCF complain?

Christian

So our web filtering software co recon there is a clash of this driver/application with their software.  I've uninstalled the firewall and web is still slow, so cant be the firewall..

I am having this issue too.

I have uninstalled Sophos completely (or think I have) and now on reboot I have a bunch of drivers coming up that are not 'installed' correctly or working correctly with the suffix of:

"-Sophos Client Firewall NDIS Packet Filter"

How do I get rid of these as my computer cannot connect to the local network wirelessly and I believe it is because of them.

Hi Gary,

I believe I've seen this before. Let me guess - you're using Windows 7? If yes - then we use LSP for intercepting traffic. 

Can you confirm if this issue persists with Windows 8 or 10 devices? I will assume it won't as we use WFP. 

Once we have more information on the table, I would comment further. 

Thanks,

Vikas

Cant remember the OS we were running in Nov 2016.  Were now Win10 and working fine.

Vikas

This is on an XP-Pro SR3 legacy computer.

When Windows Security Notifications screen opens it tells me too that Sophos Firewall is not enabled.  Since Sophos has been uninstalled (or at least I thought it had) where is it remembering this from and how do I remove it?

Paul

Vikas

This is on an XP-Pro SR3 legacy computer.

When Windows Security Notifications screen opens it tells me too that Sophos Firewall is not enabled.  Since Sophos has been uninstalled (or at least I thought it had) where is it remembering this from and how do I remove it?

Paul

Hi Paul,

"legacy" - you ache my heart with nostalgia. 

Does Windows really show "Sophos Firewall is not enabled."? I would be interested in seeing a screenshot. Also a set of SDU Logs if you can share?

We'll take a look together. 

Thanks,

Vikas

SDNs not available as Sophos is uninstalled

How do i add a picture of the screenshot?

Hi Paul,

SDU is a standalone utility which can be run on the said computer - www.sophos.com/.../33533

About the screenshot - you can easily add it while replying to this - Insert - Image.

Thanks,

Vikas

So here is the screen shot Vikas

There are NO program folders left on this computer so cannot run the SDU.  Can someone remote into it to find out why I am getting this warning?

Paul

Hi Paul,

Irrespective of the Program Files folder, please install the SDU utility http://www.sophos.com/support/knowledgebase/article/33533.html and the tool should output a ZIP file in your %temp%\sdu

I can then take a look for you.

Thanks,

Vikas

It wouldnt load the exe file.  It kept saying the SDU.DLL was not found.

Paul