Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 2203 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Eventvwr Application Error ID 18

MrPink

We are running Sophos Endpoint Security and Control version 9.5 on a large network with, primarily, windows xp client computers.

On many of our computers we are getting the following message in eventvwr...

"Value 'SophosProxyBypass' from registry key 'SophosProxy' cannot be read. Reason: More data is available.."

I have tried reinstalling from the console and doing a complete uninstall and reinstall on the local drive but nothing seems to get rid of the error. It seems to occur al least once a day, but not always and at no particular time.

Any ideas what is causing it?

:18101


This thread was automatically locked due to age.
  • 0

    Hello MrPink,

    I suggest you take a look at the key HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\SAVService\SophosProxy . As this value is to my knowledge derived from the Windows Internet Options (tab Connections -> LAN Settings ... -> Advanced ...) - do you have a long list of exceptions?

    Christian

    :18111
  • 0

    Hi  Christian, thanks for the quick reply.

    I have 24 entries in the proxybypass and I do see the link with the IE exceptions. The registry key ends with <local> but otherwise they are identical.

    Are you suggesting that the list is too long or that there may be a problem with one or more of the exceptions?

    :18115
  • 0

    Are you suggesting that the list is too long

    Considering the error (I'm not an expert but AFAIK it happens when the data won't fit in the buffer supplied by the caller) I'd say yes. You should check with Support, they should be able to find out if there is an implementation limit.

    Christian 

    :18117
  • 0

    Cheers Christian. That sounds totally plausible. Lets see what support say now...

    :18121
  • 0

    Email from Sophos Support...

    The error is related to the length of the proxy bypass list (proxy exception list in IE) in the following registry key:-
    HKLM\Software\Sophos\SAVService\SophosProxy\SophosProxyBypass

    This gets created when 'Enable Live Protection' is enabled and echos the ProxyOverride registry value associated with IE. To change what is in the SophosProxyBypass key, you must change the proxy exception list in IE (locally or via GPO)

    What to do

    As a workaround, reduce the character length to under 256 characters in the proxy exceptions list.

    This issue has been investigated under DEF65251 and will be resolved with the Endpoint Security and Control 10.0 release due End of 2011.

    Looks like you were right on the ball there Christian. Thanks for your help.

    Now I've just got to figure out how to reduce my exceptions list length by 183 characters :smileysurprised:

    :18127