Problems Streaming with HFA06

[mrjoshua]

We upgraded corporate wide with Integrity HFA06. I must say this has been quite a nightmare. Not only did about 10 out of 6500 laptops fail to upgrade properly, now everyone is reporting streaming video problems when Integrity is enabled.

Streaming videos with Media player worked fine with all other version of the Integrity client, but after upgrading to HFA06 it is almost unusable. If you disable to the client, or utilize a previous version the issue is cleared up. Anyone have any idea's on what can be done in the policy in order to help alleviate this problem with Windows Media Player.

[mrjoshua]

Well checkpoint also has no idea, as I have opened a case with them. It seems to be I am going to get another standard we have no idea response like "upgrade to HFA##)

I am disgusted with CheckPoint Integrity check out my path here.

Started with HFA04 of Integrity 6.5
-Install problems, failed installs
-License keys missing expired after 30 days (Nightmare with 6500 laptops out there)
-Network connections "lock down" for good until software is reinstalled
-Yahoo messenger does not work properly and will not connect
-Nortel VPN users have issue getting connected

Opened case with Checkpoint:
Answer: Upgrade to HFA05 it fixes everything

Upgraded to HFA05 of Integrity 6.5
-Less install problems but still some
-Nortel VPN users having problems staying connected
-MSSQL 2000 problems from various database administrators
-Once clients entered a lock down state the only way to fix the issue was reinstall

Opened case with Checkpoint:
Answer: Upgrade to HFA06 it fixes everything

Upgraded to HFA06 of Integrity 6.5
-Lots of install problems again, some users get error on install "do you authorize the TrueVector service to install/update?" Clicking yes or no does nothing. Must reinstall system
-Windows Media Player now plays choppy video no matter what settings for Media Player are set

Opened case with Checkpoint:
Answer: Upgrade to HFA07 it fixes everything


This is just terrible, as my company requires months of testing and approvals before rolling out software to the enterprise.

[CSING]

Uninstall issues have been an ongoing issue. A new tool is being tested CPES_Clean that will remove the Check Point agent regardless of the state of vsmon. Prevously Vsmon needs to be running and functioning correctly for the uninstall to be successful.

Regarding your current issue, it appears that packets are being dropped. If a packet sniffer is employed, it should show packets between the media server and the client dropped due to timeouts.

This issue is resolved by employing the file tdiswitch -mode AFD and rebooting. Since this occurs on 6500 endpoints you may want to push the registry change below which changes the driver hook from TDI to AFD.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\vsdatant\parameters TDIEnable 0

Hope this helps.

[mrjoshua]

Thank for the help as tdiswitch.exe --mode afd does fix my streaming media issues, it is also breaking users ability to sign into AIM and Y!M. :(

So we are forced to change the mode manually for people utilizing AIm or Y!M. I am very frustrated with this an hope that all of the problems are cleared up in HFA07.

[CSING]

Never heard of this occuring. Does it occur with a specific verison? Does it lose all functionality?

If you shutdown the iclient (if you have enabled the menu option on the endpoint). Do IM programs start working?

I'll test it if you can provide specific IM versions.

[mrjoshua]

Y!M 8.1 8.0 and 6.1.
not sure of AIM version.

And yes shutting down the Integrity client allows you to sign in. The program launches but you can never sign in with Integrity launch in afd mode? But if you are running in tdin mode Y!M works great.

[CSING]

If the client is in AFD mode and you shutdown the client and you are able to us IM then it implies that a change in the policy may provide a workaround. Nevertheless it looks like a bug.