SMB file transfers fail with "Error 0x80090006: Invalid Signature" when IPS is enabled.

Products

• Endpoint Security Complete
• Endpoint Protection

Issue/Introduction

When attempting to copy large files to an SMB share, the file transfer fails with "Error 0x80090006: Invalid Signature."

Disabling Endpoint Protection (SEP), disabling Intrusion Prevention (IPS), or withdrawing the IPS policy resolves the issue.

Environment

Release : 14.3

Component : Intrusion Prevention

Cause

The issue is due to the Windows Filtering Platform (WFP) causing TCP flow to become out-of-sync

Resolution

Disable the Out-of-band Scanning feature within the IPS policy. 

Additional Information

CRE-10291 - CRE-22290