This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos vs. Spoon virtual apps

Dear Sophos,

we produce a virtual IE8 App using spoon virtualization. This IE8 runs in a sandbox, requires no install and contains all plugins required for its purpose.

One of our customers uses sophos, and we are experiencing problems there: All access via this virtual IE8 to the internet is blocked, because already the DNS lookup seems to fail.

Worse still, there is no feedback by the sophos app that it is blocking the IE, neither as a popup nor in the logs- which would have saved me hours of debugging, by the way.

I disabled the firewall, stil the same. Regular browsers have internet access without problems.

* What is causing this behaviour?

* Is it possible for my customer to configure an exception for my virtual app?

Thank you very much!

:39387


This thread was automatically locked due to age.
  • After some more investigation, I found out that the combination of sophos, virtualization and the IE Option -private trigger this unwanted behaviour. If one of this factors is left out, the problem goes away.

    However, I need the option -private and my customer needs Sophos...

    :39393
  • Hello Norbert,

    I disabled the firewall - just asking, are you talking about the Sophos Client Firewall (SCF)? 

    Is it possible for my customer to configure an exception for my virtual app?

    hard to do if you don't know why and by which component the app is inadvertently blocked I say, inadvertently, cause any deliberate action by SESC should cause an event to be logged. I see you've already narrowed down the problem. My first guess was - as you've mentioned a blocked network access - the LSP. Please see How to troubleshoot LSP interactions with Endpoint Security and Control / Endpoint Protection and referred articles on how to proceed.

    Christian

    :39397