Sophos Central Endpoint AV Causing VSS timeout Issues

Availability for the Always-On Enterprise

Sophos Central Endpoint AV Causing VSS timeout Issues

Veeam Logoby leebtish » Mon Feb 26, 2018 5:33 am

Hi,

Just posting this in case anyone else running Sophos Central Endpoint AV experiences the same issue. We were experiencing the following error on multiple servers:
VSSControl: Failed to freeze guest over network, wait timeout

We also found warnings in our app logs showing the following:

A VSS writer has rejected an event with error 0x800423f2, The writer's timeout expired between the Freeze and Thaw events.
. Changes that the writer made to the writer components while handling the event will not be available to the requester. Check the event log for related events from the application hosting the VSS writer.

The issue was resolved by disabling the Sophos Health Service. If you run this from an admin command prompt - "fltmc instances" you will see Sophos accessing VSS. Another Veeam customer also has the same problem - post272884.html#p272884

FYI, this thread has a lot of background information - https://community.spiceworks.com/topic/ ... 713?page=1

At the moment Sophos and speaking with Microsoft about the issue. According to Sophos they are accessing VSS correctly and the problem should not be happening. Hopefully between them and MS they can resolve the issue.

Thanks
leebtish
Influencer
 
Posts: 23
Liked: 3 times
Joined: Mon Nov 12, 2012 9:07 am
Full Name: Lee Russell

Re: Sophos Central Endpoint AV Causing VSS timeout Issues

Veeam Logoby Mike Resseler » Mon Feb 26, 2018 6:11 am

Hi Lee,

Thanks for the heads up! Really appreciated. Please keep us further informed about the outcome when Sophos and MS have figured out what is happening

Cheers
Mike
Mike Resseler
Veeam Software
 
Posts: 4265
Liked: 477 times
Joined: Fri Feb 08, 2013 3:08 pm
Location: Belgium, the land of the fries, the beer, the chocolate and the diamonds...
Full Name: Mike Resseler

Re: Sophos Central Endpoint AV Causing VSS timeout Issues

Veeam Logoby leebtish » Mon Feb 26, 2018 9:02 am

No problem, will do Mike
leebtish
Influencer
 
Posts: 23
Liked: 3 times
Joined: Mon Nov 12, 2012 9:07 am
Full Name: Lee Russell

Re: Sophos Central Endpoint AV Causing VSS timeout Issues

Veeam Logoby mboucher87 » Thu Jun 07, 2018 11:54 pm

We are also experiencing this issue (case 02779434). Has there been any updates at all?
mboucher87
Lurker
 
Posts: 2
Liked: never
Joined: Thu Jun 07, 2018 11:51 pm

Re: Sophos Central Endpoint AV Causing VSS timeout Issues

Veeam Logoby Mike Resseler » Fri Jun 08, 2018 3:13 pm

Hi mboucher87,

First: Welcome to the forums

Unfortunately the OP did not came back to us so we have no outcome on the sophos/ MSFT conversation. However, any change you are using intercept (I believe that is a component within Sophos...)
Mike Resseler
Veeam Software
 
Posts: 4265
Liked: 477 times
Joined: Fri Feb 08, 2013 3:08 pm
Location: Belgium, the land of the fries, the beer, the chocolate and the diamonds...
Full Name: Mike Resseler

Re: Sophos Central Endpoint AV Causing VSS timeout Issues

Veeam Logoby mboucher87 » Wed Jul 11, 2018 10:13 pm

Hi Mike, Sorry for the delay I've been away on holiday. Yes we are using Intercept also...
mboucher87
Lurker
 
Posts: 2
Liked: never
Joined: Thu Jun 07, 2018 11:51 pm


Return to Veeam Backup & Replication



Who is online

Users browsing this forum: Cicadymn and 54 guests