SMB file transfers fail with "Error 0x80090006: Invalid Signature" when IPS is enabled.

Products

• Endpoint Security Complete
• Endpoint Protection

Issue/Introduction

When attempting to copy large files to an SMB share, the file transfer fails with "Error 0x80090006: Invalid Signature."

Disabling Endpoint Protection (SEP), disabling Intrusion Prevention (IPS), or withdrawing the IPS policy resolves the issue.

Environment

Release : 14.3

Component : Intrusion Prevention

Resolution

This issue is resolved with Intrusion Protection Engine 17.2.9.  This engine should be available in all IPS definitions dated September 26th, 2022 revision 81 or later. 

As a workaround, you can disable the Out-of-band Scanning feature within the IPS policy. 

Additional Information

CRE-10291