Greetings all
IPS service is not starting on an A computer which you can see on this snapshot bellow, how to overcome this error message.
Updated the tags
[edited by: Gladys at 12:51 AM (GMT -7) on 30 May 2024]
Greetings all
IPS service is not starting on an A computer which you can see on this snapshot bellow, how to overcome this error message.
Hi Ahmed Obaid ,
Thanks for reaching out to the Sophos Community Forum.
Could you try using the Sophos Endpoint Self Help tool to increase the verbosity of logging for the Sophos IPS Service?
Once this is done, please reboot the device to replicate the issue and gather an SDU from the device. Please send me the resulting filename/url once done.
We were able to resolve this issue by proceeding with the following steps.
- Disable Tamper Protection
- Go to the following registry location: "HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Sophos Network Threat Protection\Application"
- Create a DWORD "failure-detection.enabled" with a value of "0"
- Check for service status
- Update the value to "1"
Note that this should only be necessary if the following registry entry's value is set to "0"
- HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Sophos Network Threat Protection\Monitoring\ipsCrashRetriesRemaining
We were able to resolve this issue by proceeding with the following steps.
- Disable Tamper Protection
- Go to the following registry location: "HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Sophos Network Threat Protection\Application"
- Create a DWORD "failure-detection.enabled" with a value of "0"
- Check for service status
- Update the value to "1"
Note that this should only be necessary if the following registry entry's value is set to "0"
- HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Sophos Network Threat Protection\Monitoring\ipsCrashRetriesRemaining