Google Chrome will not open when AMP is Enabled

[DomGene21]

Hello,

When Cisco AMP is enabled I cannot open Google Chrome. The latest version of Google Chome is 91.0.4472.114 (64-Bit) with the 7.3.13.20165 Cisco AMP version. I noticed the problem 2 months ago with a user who has a Dell 5502 laptop. Even when I log in as the Administrator, chrome will not open. Once we stop AMP connector from running Chrome will open without a problem.  We purchased 4 Dell Inspiron 3501 laptops-removed McAfee- and once I installed AMP for the first time Chrome would initially open, but after a few days our new users logged in and they cannot not open Chrome.  I even tried disabling hardware acceleration in the accessibility settings, relaunched chrome, and the browser will not open when AMP services is on. Will the latest version of AMP resolve this?

[DaphneG]

@DomGene21, to isolate, try disabling the Exploit Prevention (ExPrev) in the machine's policy, sync the policy or restart the AMP service to be sure then monitor if that fixes the issue. If it does, try upgrading that machine to 7.4.1, which is a big jump on the version of the ExPrev engine being used compared to 7.3.13. If it doesn't, please contact our TAC support so they can assist you further.

[ppreenja]

Hello DomGene21,

Please check if you are using "Intel Tiger Lake-U series" processors on those Dell machines.

If the answer to this is "yes" and you have Ex-Prev enabled then you must be hitting the below bug:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx47570

To remediate the issue, you can upgrade your AMP connectors to version 7.3.15 and 7.4.1 which are released with the fix for this issue.

I hope the above helps!

Cheers,

Pratham