Carbonblack sensor and Server Security causing BSOD during reboot

Issue:

Carbonblack sensor and Server Security causing BSOD during reboot

Resolution:

When both products, Server Security and CarbonBlack sensor, are installed on the same server, BSOD occurs on every reboot.

The problem is related to Windows Firewall. Existence of our drivers/services increases the chance of an MS bug to appear. Possibly our services issue some specific network requests, which cause memory corruption in the Windows firewall engine (memory corruption goes very deep into MS code of the firewall).

This is an essential bug in the MS engine (possibly even a security vulnerability if such memory corruption could be made on request). This has been already reported to Microsoft. 

The workaround/solution is to stop MS firewall before reboot or try to relax/change firewall rules on the server.

More information about Carbon Black:
https://www.carbonblack.com/

Article no: 000016167

Pricing & Product Info

For product info and pricing please go to the F-Secure product page

Version history
Revision #:
2 of 2
Last update:
‎09-10-2019 01:13 PM
Updated by: