Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 10 subscribers
  • Views 868 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Blocking IBM Cognos Configuration 10.2.2

krees

We use a data warehouse to create student data reports which runs on IBM Cognos 10.2.2.  Sophos is somehow causing the Cognos Configuration service to fail.  While I opened a ticket, I thought I'd throw it out to the community to see if anyone else has experienced this issue.

Here is what I have tried:

  1. Created a new threat protection policy to include a folder and process exclusions for D:\Program Files (x86)\ibm\cognos\c10\ and D:\Program Files\ibm\cognos\c10_64
    • Cognos Configuration failed
  2. Stopped hitmanpro.alert in task manager as the data warehouse engineer was thinking that this component was causing the issue.
    • Cognos Configuration failed
  3. Uninstalled Sophos completely
    • Congos Configuration was successful with no failures
  4. Re-installed Sophos and added a folder and process exemption for entire C:/, D:/, and E:/ drives on all involved servers
    • Cognos Configuration failed
  5. Turned off each individual component on the local Sophos installation
    • Congos configuration failed every time
I looked at the cogserver.log and pogo_2020-08-06.log files. Everything points to failure at the com.cognos.pogo.reportservice.ProcessManager, which appears to be the external report server.  Doing some research I came across the following website: Control Center can not launch Cognos Report.  The article has the same error message I'm seeing in the cogserver.log file.  The resolution is to install the missing libraries, libgcc and libstdc++ so that LDD comes up clean against BiBusTkServerMain and BMTMDProviderMain.
  • Based on this information, I changed the Sophos policy to not prevent DLLs loading from untrusted folders and disabled Protect processes 
    • Cognos Configuration failed
Based on all this, I don't think it isn't hitmanpro.alert causing the issue but something else that is a part of the Sophos software package.  It seems like it is blocking something that isn't on the server.  Has anyone else run across this or have ideas on what I should try next?  I have tried everything I can think of that would help pinpoint the root cause but am still coming up short.
 
Thanks in advance!
Kerry
 


This thread was automatically locked due to age.
Parents Reply Children
No Data
Unfiltered HTML