Through testing, Engineering and support found that the reason why BSOD was still occurring between Checkpoint and SNAC was because the wgx.sys driver was still running, even after SNAC had been stopped. We ahve provided the following steps below to have the customer confirm that the wgx.sys driver was no longer going to load after boot, even though SNAC.exe was no longer starting. Our findings will be implemented in an upcoming release. TBD for more details.
On the SEPM:
1. rename SNAC.xml in tomcat\etc\license to SNAC.xml.bak
2. restart SEPM service
3. make change to Policy (ex. change message snooze time from 3min to 4 min)
On the Client:
1. have client update policy
2. SNAC service should change from automatic 'started' to manual 'not started'
3. Reboot Client PC into Safe mode
4. Boot into Safe mode
5. Goto C:\Windows\System32\Drivers and rename ‘wgx.sys’ to ‘wgx.bak’
6. Reboot PC
Steps to check and confirm:
1. on command prompt type ‘sc query wgx’
2. Confirm the state is ‘STOPPED’
3. On command prompt type ‘sc query snac’
4. Confirm state is ‘STOPPED’