cancel
Showing results for 
Search instead for 
Did you mean: 
malware-alerts
Level 10

HIPS 8.0 Patch 2 issues blocking almost everything when switching network from LAN to Wireless

Hi all,

I'm having weird issues on some workstations where HIPS 8.0 patch 2 starts to behave badly especially when the user switches from LAN to wireless or the other way around, basically, changing network state.

For some reason the workstations, which had no such issues since they were installed, start to act up out of the blue...

Basically, what happens is that a user is able to lets say browse the web, but anything else would not work like Microsoft Lync won't connect to the back end or Outlook won't be able to connect with the back end either...

Even when going into HIPS UI and disabling the firewall, network IPS and host IPS won't even fix the issue, but something weird is that nothing at all gets logged in the Activity log, I mean nothing at all...the page is totally blank even if all logs are set to be shown.

We are usually able to fix the issue by booting in safe mode, disabling the HIPS services, then rebooting, then uninstall, reboot, reinstall and now everything was back to normal...

I'm wondering if any of you guys came accross a similar issue?

Let me know if you have the same behavior.

We don't have a lot of those, but at least 1-2 a week.

0 Kudos
5 Replies
McAfee Employee

Re: HIPS 8.0 Patch 2 issues blocking almost everything when switching network from LAN to Wireless

Please apply the Patch 4 build and see if you have the same issue.  I've seen similar issues like that were the network state is not being maintained.

KB78494 - Host Intrusion Prevention 8.0 Patch 4 Known Issues

Also uninstall (not disable; and reboot) the Microsoft QoS service; there are known issues with that driver.

KB72097 - LAN / Wi-Fi / VPN Client / network connectionfails to connect with Host Intrusion Prevention 8.0 / 7.0

0 Kudos
malware-alerts
Level 10

Re: HIPS 8.0 Patch 2 issues blocking almost everything when switching network from LAN to Wireless

Hi Kary,

For the Microsoft QoS service, in the article, it seems to apply only for Windows XP as documented by Microsoft...

Would you be aware if this is also an issue on Windows 7 and Windows 8 as far as you know?

I will try with Patch 4 and see if I can reproduce the issue again.

Thanks for the suggestions.

0 Kudos
McAfee Employee

Re: HIPS 8.0 Patch 2 issues blocking almost everything when switching network from LAN to Wireless

Yes, it applies to all HIPS-supported Windows operating systems.  I've seen various networking-related issues with QoS (but not any specific Win8/2012 issues yet, since the majority is still on Win7 and earlier).

0 Kudos
malware-alerts
Level 10

Re: HIPS 8.0 Patch 2 issues blocking almost everything when switching network from LAN to Wireless

Do you know if there's anything official from McAfee that states that this should be uninstalled if it causes issues?

If it has known issues, then it should be part of the best practices to uninstall it no?

Let me know if there's anything official that documents this please.

Thanks again for your quick input.

0 Kudos
McAfee Employee

Re: HIPS 8.0 Patch 2 issues blocking almost everything when switching network from LAN to Wireless

The KB article above is our official documentation on it, along with the included Microsoft KB documentation.

KB72097 - LAN / Wi-Fi / VPN Client / network connectionfails to connect with Host Intrusion Prevention 8.0 / 7.0

Not everyone sees issues with it, though.

0 Kudos