Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 895 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos BHO and Exceptions

Zanatic

Is it possible to create an exception list for the browser helper object and associated plugin?  We have a few sites that are experiencing IE8 crashes and disabling the BHO is not ideal.  I would hope that sophos put in an exception list capability somewhere in the configure files to manage this.

Thanks

:13573


This thread was automatically locked due to age.
  • 0

    Hi,

    WIth any BHO problems, the first question is if it is the actual scanning of the content or just the presence of the BHO being loaded in IE?

    When you disable the BHO from SEC, the BHO is still loaded in IE it jut doesn't pass the content to the SAVService for scanning. When you disable the BHO locally in the "Manage Add-ons" or using GPO for example as detailed in this post:

    /search?q= 10317

    The BHO is disabled understanding which fixes the problem is the first step.

    The BHO scans by default the internet and trusted zone it doesn't scan the intranet zone, so one thing you could do is add the site to the intranet zone. This would also prove it was a scanning problem, it would be worth checking in the task bar of IE that the site has been classified correctly by IE as being in the zone you expect.

    You can add exclusions to specific URLs only in savconf.xml as per: http://www.sophos.com/support/knowledgebase/article/46504.html but that is not the easiest to manage.

    I've also seen problems with page redraw issues with IE8 where it's not running in protected mode.  Protected mode of IE requires UAC to be on.  You could check if you get the same problem on these sites with either:

    1. IE 9 or IE 7.


    2. IE 8 with Protected Mode on, This requires UAC to be on and therefore an OS that supports this.

    3 Use the MS Application compatability toolkit to apply an sdb file fix to IE 8.  YOu can download the software from here: 
    http://www.microsoft.com/downloads/en/details.aspx?FamilyID=24da89e9-b581-47b0-b45e-492dd6da2971  

    Once installed you can create a new fix and the compatability option you should try enabling is disableolepaintredraw or something like that, I can't rememeber of the top of my head.

    I hope that gives you a few things to try.


    Regards,

    Jak

    :13695