on May 28, 2019Article Content
| Article Number | 000037429 |
| Applies To | RSA Product Set: NetWitness Endpoint RSA Product/Service Type: NetWitness Endpoint RSA Version/Condition: 4.4.0.6 Platform: Windows |
| Issue | Active scanning is causing certain endpoints to have an agent crash. This happens during registry discrepancy scans, where the registry in question may have some corrupt or unreadable entries. |
| Cause | The registry, both due to memory over-allocation and due to a memory heap issue that causes the agent to crash and be restarted, fails the scan. |
| Resolution | Upgrade to the version 4.4.1.0 or later for the fixes to the memory. |
| Workaround | It is possible to avoid crashing by running a manual scan without the registry discrepancies option selected. |