Messages

Cisco released 7.3.15.20174 with a fix. We've upgraded everything to that version and are now deploying 20H2 computers without a problem.

For anyone else that stumbles across this, it's a known Cisco issue. Thanks to jspengler for sharing this:
[ExPrev] Issue with Tiger Lake Processors & Windows 10 20H2
CSCvx47570
Description
Symptom:
There is a compatibility issue between ExPrev and machines that have the latest Tiger Lake processors from Intel (released Sept 2020) and have Windows 10 20H2 installed.

The issue can cause 64 bit processes compiled with Microsoft's Control Flow Enforcement (CET) mechanism to crash.

Conditions:
AMP Windows Connector with ExPrev Enabled

Hardware: latest Tiger Lake processors from Intel (released Sept 2020)

Operation System: Windows 10 20H2

Workaround:
Disable ExPrev until 7.4.1 is released

Contact support to exclude the processes (applications) that have an incompatibility

Further Problem Description:
A fix for this issue will be made available in release 7.4.1 tentatively planned for late March 2021.
Details
Last Modified:
Mar 4,2021
Status:
Open
Severity:
3 Moderate
Product:   (1)
Cisco AMP for Endpoints
Support Cases:
6

We're having this same problem. What did you mean by "Cisco AMP bug in exploit protection for particular model..". We're running AMP and found that it is blocking conhost.exe, which is causing the problem. Did you find that this is a known issue?