This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

freeze/thaw VSS failures when Sophos AV is utilized

Unitrends has an article (5520, https://support.unitrends.com/UnitrendsBackup/s/article/ka040000000PmjMAAS/000005520?_ga=2.69789140.576488646.1505169382-1745831295.1501935182) on getting freeze/thaw VSS failures on devices running Sophos A/V when doing backups. 

I've got one server experiencing this with Unitrends. I've got another server with Windows Server Backups that keep failing , but I haven't tried uninstalling Sophos on the 2nd one yet to verify that this this the same issue.

 

is there any official word from Sophos on this? Has anyone else experienced this? 

 



This thread was automatically locked due to age.
Parents
  • Any update on this? We are using Veritas Backup Exec and are experiencing the same issues on our test server. The server is Windows 2012 R2 and fully patched. When runnning manual backup is fine, but on first scheduled backup running at 11:30 at night these issues appeared.

  • Hi Robert,

    For now, if you're backup software can run a before and after script I would suggest having the before script stop the Sophos Health Service:

    sc stop "sophos health service"

    Then the after script can run:

    sc start "sophos health service"

    Of course, to be able to stop and start the service Tamper Protection would have to be disabled.

    In the next release of Sophos Health to server, I understand that via a registry key (to be disclosed) you can change the default Health registry write time from 15 seconds to a value such as 90 seconds.  This will workaround the Microsoft issue.

    There is a chance that Microsoft will fix the issue which will mean the above options are no longer required.  I guess the chance to Microsoft fixing the issue in 2012 is less than in 2016 but it may happen.

    Regards,
    Jak

Reply
  • Hi Robert,

    For now, if you're backup software can run a before and after script I would suggest having the before script stop the Sophos Health Service:

    sc stop "sophos health service"

    Then the after script can run:

    sc start "sophos health service"

    Of course, to be able to stop and start the service Tamper Protection would have to be disabled.

    In the next release of Sophos Health to server, I understand that via a registry key (to be disclosed) you can change the default Health registry write time from 15 seconds to a value such as 90 seconds.  This will workaround the Microsoft issue.

    There is a chance that Microsoft will fix the issue which will mean the above options are no longer required.  I guess the chance to Microsoft fixing the issue in 2012 is less than in 2016 but it may happen.

    Regards,
    Jak

Children
No Data