Not sure if this has been mentioned anywhere else:
We have noticed an issue with behaviour monitoring module of Sophos Endpoint Security where it stops the processes closing properly when closing down IE. This doesn't seem to cause a problem for most users but in some instances can mean that users have a large number of IE process running on their machines, to the point that it will eventually make it grind to a halt.
This has been noticed on both Windows 7 and 8 and with IE versions 10 and 11.
It basically manifeststs itself as this: A user will open IE and will get a minimum of 2 IE process (extra ones per tab opened), one 64 bit and the other 32bit (the 32bit presumably the behaviour monitoring module). Users can open multiple tabs and then close them down and all these processes close as you would expect. The issue is when you close down IE completely as this will leave 2 processes running. Now each time a users closes all IE windows they will have another 2 processes meaning that in the course of a working day they may end up with 30-40+ processes running (depending on how the user works this may be much more). This eventually brings their computer to a halt.
I have confirmed that it is specficially the behaviour monitoring as we have tested on 7 different machines, some freshly built from scratch and it happens to them all as soon as Sophos is installed. If we disable just the BM module it then works as normal.
Has anyone experianced this before, and if so is there something we can do config wise to solve the problem?
This thread was automatically locked due to age.