If you find that the smart client runs slowly, takes ages to login and move around the screens but the web client is fine (Windows 10 & 11) it may be a Sophos Intercept patch causing the issue.
The resolution per Epicor is to:
Roll back Sophos Intercept X from version FTS 2023.1.1.6 to FTS 2022.1.3.4 on each affected client
machine
We are not cloud and run sophos on everything and 202x kinetic. Web fast and fat client was slow. You can set some global exclusions on Sophos on their web portal. This fixed the speed problem on the fat client.
There are seven of these. I copied the text from the web portal and changed ip address. Some of these maybe overkill but it doesn’t break all your security in Sophos.
EXCLUSION TYPE
Exploit Mitigation (Windows)
PATH
C:\Epicor**
EXCLUSION TYPE
Exploit Mitigation (Windows)
PATH
C:\ProgramData\Epicor**
EXCLUSION TYPE
Malicious Network Traffic Prevention (IPS) (Windows)
You can exclude specific network traffic from inspection. You may need to do this if network communications are blocked unexpectedly.
Set at least one address or port option.
DIRECTION
Both
TRAFFIC USING THIS REMOTE ADDRESS (IPv4, IPv6 or CIDR)
1.1.1.1 < your specific internal web server ip address for Epicor goes here
EXCLUSION TYPE
File or folder (Windows)
VALUE * (DIRECTORY)
C:\Epicor
You can exclude a drive, folder or file. Check the for supported wildcards and expansion variables.
ACTIVE FOR
Real-time and scheduled
EXCLUSION TYPE
File or folder (Windows)
VALUE * (DIRECTORY)
C:\ProgramData\Epicor
You can exclude a drive, folder or file. Check the for supported wildcards and expansion variables.
ACTIVE FOR
Real-time and scheduled
EXCLUSION TYPE
Process (Windows)
VALUE * (DIRECTORY)
C:\Epicor\
EXCLUSION TYPE
Process (Windows)
VALUE * (DIRECTORY)
C:\ProgramData\Epicor\
Thank you for posting about this today. Our users were losing their minds with the speed, and this post expedited our fix tremendously. EpicCare had not responded by the time we had worked through this post and resolved the issue.
Thankyou Rudi, you gave me the solution before Sophos did !
Sophos now has an official article on this. Happened to a client today after Sophos updated
Advisory: Epicor Kinetic running slow after upgrading to Sophos Intercept X 2023.1.1
The Sophos KB Article is incomplete and there are several other executables that should be added to the Sophos exclusion list. In addition to the exe files listed in the KB, you should also exclude: Epicor64.exe, Kinetic.exe, and Kinetic64.exe.