[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [ISSForum] Black Ice/RSDP version 7.0 issues with XP SP2



I have got problem with BlackIce 7.0 and WinXP, Microsoft VPN does not work, BlackIce kills the session because detect an UDP_Short_header event; even I set up it to ignore this event but BlackIce still blocking the connection. This problem begins after EBO version. I was told by Microsoft that the UPD packet has 8 byte but the last two are ceros  and this is OK for the RFC.

Does any body know how to fix it? 

-----Mensaje original-----
De: issforum-bounces@xxxxxxx [mailto:issforum-bounces@xxxxxxx] En nombre de Willard Dawson
Enviado el: miércoles, 22 de diciembre de 2004 16:30
Para: 'Kelly, Chuck'
CC: issforum@xxxxxxx
Asunto: RE: [ISSForum] Black Ice/RSDP version 7.0 issues with XP SP2

Thanks for the notes, Chuck.  I'll be happy to report back to the ISSForum my results as well, if the community feels that would be of interest.

--
Willard-----Original Message-----
From: Kelly, Chuck [mailto:chuckk@xxxxxxxxxxxx]
Sent: Wednesday, December 22, 2004 10:24 AM
To: Willard Dawson
Cc: issforum@xxxxxxx
Subject: RE: [ISSForum] Black Ice/RSDP version 7.0 issues with XP SP2

Willard,

We have seen some strange things post XP SP2 and it has been quite difficult to narrow things down. Here is what we know for sure.

1. All issues with RSDP are on Windows XP SP2 hosts. We are running RSDP 7.0EBO and 7.0ENO with same symptoms.

2. Regardless if the host is a laptop or desktop, we noticed slow web browsing when RSDP is installed.

3. The laptops that are running RSDP are all IBM Thinkpads, T22, T30, T40, and T41's. A lot of the laptops seem to have issues with computer freezes. All of the sudden they totally lock up and a hard power reset is required to restart them. Total loss of keyboard control occurs.

I suspect we are looking at multiple issues. The Thinkpads may have hardware issues that SP2 made more prevalent. The slow web browsing may be an SP2 bug that RSDP aggravates.

Since we are not getting core dumps or logs of any trouble, it is hard to pinpoint.

 



--
Chuck

-----Original Message-----
From: Willard Dawson [mailto:willard.dawson@xxxxxxxxxxxxxx]
Sent: Wednesday, December 22, 2004 6:51 AM
To: Kelly, Chuck
Subject: RE: [ISSForum] Black Ice/RSDP version 7.0 issues with XP SP2

Hello,

I've had reports of some blue-screen type system crashes after RSDP was installed, but I've not been able to get the full report in order to attempt to reproduce the problem.  I'm hoping to work more closely with ISS to resolve some of these issues, but I'd be interested in learning more about any RSDP issues affecting other ISS customers as well.

Willard Dawson
Information Security Manager
OIT, Information Security
Office of Information Technology
Georgia Institute of Technology
258 4th St NW, Atlanta, GA 30332-0700
(404) 385-0334 (office)

-----Original Message-----
From: issforum-bounces@xxxxxxx [mailto:issforum-bounces@xxxxxxx] On Behalf Of Kelly, Chuck
Sent: Tuesday, December 21, 2004 5:06 PM
To: issforum@xxxxxxx
Subject: [ISSForum] Black Ice/RSDP version 7.0 issues with XP SP2

We are seeing a lot of issues with RSDP running on Windows XP SP2 laptops.

Mostly system freezes and web browsing slowness.

Anyone else have 7.0 deployed in an SP2 environment that is seeing issues?


--
Chuck


_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.




_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.



_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.