Forum Discussion
PhilippFoeckeler
Dec 23, 2019Copper Contributor
Azure ATP Sensor install failing (Updater Service do not start)
Hello All! We try to install the Azure ATP Sensor on a DC, setup wizard is running until this point ...then do some retries for about 3 minutes, during this time the service "Azure Advanced T...
- Jun 15, 2020
Actually, the solution in our case was to use Silent Installation (https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-silent-installation#proxy-authentication) and provide the Proxy Information in the commandline.
Thank you all for helping and advising!!!
Lewis-H
Jun 03, 2020Iron Contributor
Download the Npcap version 0.9984 installer from https://nmap.org/npcap/.
Alternatively, request the OEM version of the Npcap driver (that supports silent installation) from the support team.
Copies of Npcap do not count towards the five copy, five computer or fiver user licensing limitation if they are installed and used solely in conjunction with Azure ATP. For more information, see NPCAP licensing.
If you have not yet installed the sensor:
Uninstall WinPcap, if it was installed.
Install Npcap with the following options: loopback_support=no & winpcap_mode=yes.
If using the GUI installer, deselect the loopback support and select WinPcap mode.
Install the sensor package.
If you already installed the sensor:
Uninstall the sensor.
Uninstall WinPcap.
Install Npcap with the following options: loopback_support=no & winpcap_mode=yes
If using the GUI installer, deselect the loopback support and select WinPcap mode.
Reinstall the sensor package.
Alternatively, request the OEM version of the Npcap driver (that supports silent installation) from the support team.
Copies of Npcap do not count towards the five copy, five computer or fiver user licensing limitation if they are installed and used solely in conjunction with Azure ATP. For more information, see NPCAP licensing.
If you have not yet installed the sensor:
Uninstall WinPcap, if it was installed.
Install Npcap with the following options: loopback_support=no & winpcap_mode=yes.
If using the GUI installer, deselect the loopback support and select WinPcap mode.
Install the sensor package.
If you already installed the sensor:
Uninstall the sensor.
Uninstall WinPcap.
Install Npcap with the following options: loopback_support=no & winpcap_mode=yes
If using the GUI installer, deselect the loopback support and select WinPcap mode.
Reinstall the sensor package.
- minahJun 03, 2020Copper Contributorthanks Lewis, i have issue while installing NPCAP 0.9984
- EliOfekJun 03, 2020Microsoft
minah if npcap is failing but you see npf service is running, that means you most likely have winpcap installed on the machine.
try uninstalling it, and if there is no reference to it, try to stop and delete the npf service:
sc stop npf
sc delete npf
and try the npcap install again.
If it still fails, open a support case, we can escalate this to npcap support, and we will need the full npcap install logs...