Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 2409 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Endpoint 10 on Standalone WinXP - Can't access live Instant Teleseminars

richard-s

Since (I think) installing Endpoint 10 AV & Firewall on a standalone WinXP PC, I have not been able to access Live events on the Instant Teleseminar service. But there is no problem with accessing Recorded events. The Sophos Firewall and AV logs do not show anything having been "detected" or "blocked." All web browsers are affected: MSIE8, Opera and Chrome. (My Firefox is heavily modified. It also appears affected.)

I think that the Instant Teleseminar service uses Flash and Javascript to play/replay its events, in its "player."

The live events are streamed from a different URL, but my PC is able to access that URL directly... just not now via the Instant Teleseminar "player."

Questions:

1. Has anyone got Instant Teleseminar to work, since upgrading to Endpoint 10?

2. Could Endpoint 10 be (wrongly) detecting the URL re-directs used within the Instant Teleseminar service, as eg. (dodgy) Cross-Site Scripting?

3. Any suggestions for how to fix this, please?

4. Any suggestions of what to investigate? 

I've already tried switching the Endpoint 10 Firewall to "pass all" (after switching the Windows Firewall ON).

I've also tried switching Endpoint 10 "On access scanning" to OFF; and several other similar things.

Nothing seems to make any difference. Also, I can only test this while I have assess to a "live event."

:20041


This thread was automatically locked due to age.
  • 0

    Hi,

    Sounds like it could be an issue with the LSP installed as part of 10.

    Do you have any other LSPs on the machine?  Could you provide the output of:
     

    netsh winsock show catalog > C:\netsh.txt

    You could try:

    1. "Disable Live Protection" under "Sophos Live Protection"

    2. "Block access to malicious websites" set to "Off" under "Web protection"

    3. "Download scanning" set to "Off" under "Web protection"

    4. Turned off Web Contol in SEC, If you're standalone you won't have this option.

    Reboot, does it work then?

    You could then start adding the options one at a time to see what happens.

    Regards,

    Jak

    :20057
  • 0

    Thanks for answering. Unfortunately, I can only experiment while there is a live seminar running (one which I have access to).

    I did try disabling those features earlier this evening, to no effect. But was not able to reboot the PC at that time because I was listening to the live audio stream using VLC player. So perhaps those changed Sophos settings were not actioned?

    I cannot see how to attach a file to this forum. It is rather long to paste into a reply. So I've uploaded the Zipped Netsh.txt File to some old webspace.

    I hope that this file does not contain anything "sensitive."

    BTW. When I uploaded an unzipped Netsh.txt files, my web browser was unable to find and download it. Very strange. 

    :20059
  • 0

    Hi,

    That zip file seems to be empty, I guess you could paste in a reply, the output of:

    netsh winsock show catalog type=lsp

    This will filter the output down slightly.

    Regards,

    Jak 

    :20061
  • 0

    Sorry Jak. That produced only one entry, so looked too short.

    Here are the edited highlights of original netsh.txt file:


    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Layered Chain Entry
    Description: Sophos Web Intelligence IFSLSP
    Provider ID: xxxx
    Provider Path: xxxxx\swi_ifslsp.dll
    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Layered Chain Entry
    Description: Sophos Web Intelligence IFSLSP
    Provider ID: xxxxx
    Provider Path: xxxxx\swi_ifslsp.dll
    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD Tcpip [TCP/IP]
    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD Tcpip [UDP/IP]
    xxxxx


    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD Tcpip [RAW/IP]
    xxxxx


    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: RSVP UDP Service Provider
    xxxxx


    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: RSVP TCP Service Provider
    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Layered Service Provider
    Description: Sophos Web Intelligence IFSLSP
    xxxxx


    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx


    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx


    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Winsock Catalog Provider Entry
    ------------------------------------------------------
    Entry Type: Base Service Provider
    Description: MSAFD NetBIOS

    xxxxx

    Name Space Provider Entry
    ------------------------------------------------------
    Description: Tcpip
    Provider ID: xxxxx


    Name Space Provider Entry
    ------------------------------------------------------
    Description: NTDS
    Provider ID: xxxxx

    Name Space Provider Entry
    ------------------------------------------------------
    Description: Network Location Awareness (NLA) Namespace
    Provider ID: xxxxx

    :20063
  • 0

    Hi,

    Well I don't see any other third party LSP to rule out.

    You could try just stopping the "Sophos Web Intelligence Service " and try, maybe that would help.


    I still think the best course of action is to disable the options I mentioned, reboot and see if it works then.  At least that will narrow it down a bit.

    Regards,

    Jak

    :20065
  • 0

    Thanks again. Why are there three similar entries for the Sophos LSP? Could something be left-over from previous versions of Sophos?

    Note. This PC has masses of software, including a VirtualBox Virtualiser. It also contains dialup modem & IEEE-1394 Firewire interfaces. 

    This standalone PC has run every version of SAV since 2004. Until recently, it ran Endpoint 9.5 + Firewall. For unexplained reasons, it refused to accept the Endpoint 9.7 Firewall, but Endpoint 10 + Firewall installed without protests. That is why I upgraded it so early. But for this troubled history, I would remove Endpoint 10 and check that nothing else is causing the problems.

    Having read your reply to another problem, I did use WinXP Task Manager to terminate the Sophos SWI services during tonight's web seminar. Unfortunately, this did not help.

    Thanks again for your advice. 

    :20067
  • 0

    Still no luck getting my WinXP PC to connect to the live teleseminars.

    I still guess that Sophos is somehow blocking the redirection in the web browser's Flash player which should take the browser to the URL of the live teleseminars.

    VLC player will play these live teleseminars if their URLs are copied/pasted into VLC player.

    But the Flash players in none of the web browsers will play them.

    However, this PC also has Windows 7 running in a VirtualBox virtualiser on top ot the WinXP. Web browsers in this Windows 7 can connect to these live teleseminars. This Windows 7 is running Microsoft Security Essentials instead of Sophos.

    :20169