Backups failing - freeze/thaw VSS failures or broken Agent when Antivirus is used

SUMMARY

Security software known for either damaging

ISSUE

Backups fail citing VSS freeze/thaw events and customer is utilizing an Antivirus.

GetWriterStatus: USNAPError! GatherWriterStatus call has returned a failure.
(VSS_E_WRITERERROR_TIMEOUT) The writer's timeout expired between the Freeze and Thaw events.
Please check Windows Events Log that Volume Shadow Copy Service and VSS Writers are operating properly.


To confirm, leverage the command:
# fltmc instances
 

RESOLUTION

Sophos Antivirus has provided their own KB in regards to how to prevent this issue in their software. Please see the following KB written specifically to address this ongoing issue:

https://community.sophos.com/kb/en-us/132691

In addition to the above Sophos fix also confirm that the exceptions listed in this KB 5800 are applied for your antivirus programs. For any other Antivirus program, if you need assistance with making sure the appropriate exclusions are made to prevent scanning Windows Shadow Copy volumes/location, please contact your Antivirus Software support team.
 

CAUSE

Antiviruses with Real Time Protection and/or Intrusion prevention Services may have unexpected impacts to the success of guest-level backups.

NOTES

For details on the 'fltmc instances' command see https://notesfromthedatacenter.wordpress.com/tag/fltmc/

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Contact us