Sophos Client Firewall: application is blocked and log shows 'Process Verification Failed' message
Issue
You are running the Sophos Client Firewall in interactive mode, it blocks an application but does not prompt for a rule. However, it does show as a blocked application in the log file.
Sophos product and version
Sophos Client Firewall
Operating system
Windows 2000 Professional
Windows XP
What to do
- Right-click on the Sophos Client Firewall icon, and select View Log.
- Select the Processes folder.
- Right click on any of the column tiles and make sure all the viewable columns are selected. (Description and Event data are normally hidden.)
- Once all columns are viewable, you should be able to see the in the Event Data column the child process that is being blocked.
- Add a rule to allow this process to access the desired network destination.
Technical information
When certain applications are executed they load child processes to access network destinations, when this occurs, despite the initial application being trusted, the child process will be blocked leading to a ‘Process Verification Failed’
If you need more information or guidance, then please contact technical support.
- Article ID: 29205
- Created: 5 Sep 2007
- Last updated: 6 Oct 2008
