This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can not Download Apps from Windows Store

Hello together!

 

When i want to Download Apps from the Windows 10 Store, only a few MB are downloaded and then the download stops..

In the IPS Log i always found "MALWARE-OTHER Executable control panel file download request" (SID=33942) this Event!

And also with some larger files I have partial problems with downloading, so that they usually get stuck at 90%!

 

What is this?

I do not want to disable the rule, but I think it's a false postive!
Or what do you mean?
Does anyone have similar problems?

 

Best Regards

Mark



This thread was automatically locked due to age.
Parents
  • Hi Mark, 

    Are you still experiencing this problem? 

    We want to understand why our IPS is FPing on Microsoft downloads, is there a chance we can get a packet capture from you (preferably captured from the UTM so we can see both sides of the traffic) when the download from Microsoft Store is not working? This will allow us to narrow down what's our IPS engine is false-positive on. 

    Thanks!

    Bobby

  • Good Morning Bobby,

     

    I think the problem still exists, but I can not say exactly because I have created an exception for this IPS rule with only warnings.

    The problem sometimes occurs when downloading larger ISO files.

    I will test it at opportunity and report!

     

    With Capture do you mean the log files of the UTM of the IPS Log?

    But why are you reporting now to "investigate" the problem?

     

    Best Regards

    Mark

     

     

    EDIT:

    I just searched the IPS logfile for the last 30 days and copied all the entries into a text file with the warnings!
    Does that help you?
    How can I let you have this?

     

    Sorry for my bad English. I am a German User with really terrible English Skills ;)

  • Hi Mark, 

    Thank you very much for your response. 

    Recently we have heard some reports that customers are failing to download the 'Local Experience Packs' from the Windows Store when IPS is enabled on the UTM, so I'm just following up on this. I found this thread, so thought I would reach out to see if you're encountering the same problem. 

    Is it possible for you to disable your IPS exception temporarily, and see if you have a problem downloading from Windows Store? 

    If re-enabling the rule does indeed cause a failure to download, it would be great to get a packet capture (i.e. tcpdump on the UTM) of the traffic, so we can see exactly what's being transferred over the wire and what is triggering the IPS rule. 

    Again, thank you for your quick response, and helping us get to the bottom of this issue! 

    Bobby 

  • Hello Bobby!

     

    I now have removed the Exception for this Rule, and installed on a Windows 10 x64 PC the English Local Experience Pack, without any Errors!

    Although I always had the error while downloading the German Local Experience Pack, but that is now installed on all my Windows 10 clients, so I could not download this again. And that's why I tried English!

    A similar error occurred again and again when I tried to download large ISO files. Partial white z.b. from VMware.


    Unfortunately, not all ISO files ... and since I just do not remember which error has certainly occurred, I can unfortunately not test this right now!


    At the moment it seems to work without this rule. At least I was able to successfully download & install the English Local Experience Pack!
    Have you changed anything?


    I'll put that rule on disabled again, and watch it all. If I have problems with a download again, I will contact you again!

     

    I hope you could understand & follow my bad English (Google Translator *lol* )

     

    Best Regards

    Mark

  • Hi Mark, 

    Thank you very much for testing this for us. We do release regular IPS signatures updates, but nothing specific to the Windows App store recently. I am glad that everything seems to be working for you now. We will continue to try and reproduce the problem internally, and see if we can figure out why it wasn't working before (just to confirm the problem is truly resolved). 

    Thanks again for your time Mark! 

    Bobby  

Reply
  • Hi Mark, 

    Thank you very much for testing this for us. We do release regular IPS signatures updates, but nothing specific to the Windows App store recently. I am glad that everything seems to be working for you now. We will continue to try and reproduce the problem internally, and see if we can figure out why it wasn't working before (just to confirm the problem is truly resolved). 

    Thanks again for your time Mark! 

    Bobby  

Children
No Data