Web pages not loading properly on installation of Sophos

HI,

I have a couple of questions:

1. What's the OS?  The web scanning is performed differently on Win8/8.1/2012R2?
2. What version of SAV?  10.3.5?
3. What is the other software? E.g. Netnanny?

Regards,

Jak

Hi,

   Thanks for your response.  Below are the answers for your Questions.

    1.  Windows 7 64 bit

    2. SAV version- 10.2

    3. NetProtector

Thanks & regards,

  S.S.V.Ratnam

OK,  in that case, can you run:

netsh winsock show catalog > catalog.txt

Note: You will need to run it in an 'Administrative' command prompt.

Then attach catalog.txt.

Regards,

Jak

Hello Jak,

    Thanks for your support so far. I have informed the issue to NetProtector Product Management and they said that they will contact you.

Thanks & regards,

 S.S.V.Ratnam

If Netprotector has a LSP, which that command would show, you could try installing the 2 products in the opposite order, that might be enough.

Regards,

Jak

Hello Jak,

This is manohar from netprotector development team.

we are a web filtering software company who provide filtering services for ISP, as well as for individual PC and mobile users supporting windows and Mac, IOS and Android.

We no longer are using LSP in our filtering software for windows, we use WFP in our latest version.

whenever user tries to browse any url, our filtering software validates the url, and either allows it, or sends a redirect request back to browser, to our block page.

We observed that when our software is installed on a machine with sophos AV, the allowed pages are working fine, but whenever a page defined as blocked is accesed in any of the browser, the request to redirect this to our block page hangs.

As Ratnam has mentioned turning off Web Protection in your AV, makes things work in this case. can you let us know if we can add any exceptions or something similar in your AV ?

Thanks

Manohar

HI,

You will have to open up a case with Sophos Support for this, this is just a community forum.

I know that on Win 8/8.1/2012/2012R2, SAV 10.3.5 onwards uses a WFP callout driver also, it was for that reason I asked the OS and Version of SAV installed.  It may well be in that configuration it works, but 2 redirecting WFP callout drivers might have their own problems but I would expect different behaviour?

I would suggest that before calling/raising a case with Support you enable logging on the web features in SAV.  To do so, under the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Web Intelligence

HKEY_LOCAL_MACHINE\SOFTWARE\\Sophos\Web Intelligence

A DWORD called LogLevel and set it to 3.

Also creating a loglevel DWORD under:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Web Intelligence\Web Control

if you're using web control.

This will create logs in system and user temp, i.e. \windows\temp and %temp%.  I tmay be possible from these to work out what is going on.

I would also experiment installing the application if a different order to see if that makes a difference.  These will all be useful for Support.

Regards,

Jak