Leica Cyclone hangs when checking license if AMSI is enabled
Last Modified: 2023-07-07 11:15:09 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Leica Cyclone hangs when checking license if AMSI is enabled
Technical Articles ID:
KB93710
Last Modified: 2023-07-07 11:15:09 Etc/GMT Environment
Endpoint Security (ENS) Threat Prevention 10.x Leica Cyclone Problem
When ENS Threat Prevention Antimalware Scan Interface (AMSI) is enabled, Leica Cyclone software hangs at the Checking Licenses stage of the start process.
CauseLeica Cyclone software uses Microsoft AMSI technology in some components of their application. For information about Microsoft AMSI technology, see this Microsoft article. When the ENS AMSI feature is enabled, we register its AMSI provider with the operating system. So, anytime a third-party application or Windows component such as PowerShell uses the Microsoft AMSI API, Windows injects the AMSI provider DLL into the application.
A conflict between the Solution
Leica has updated their software to include a newer build of the Faro SDK that no longer uses the third-party Workaround
Disable ENS Threat Prevention AMSI in the On-Access Scanning policy, or in the On-Access Scan settings of the ENS client.
Affected ProductsLanguages:This article is available in the following languages: |
|