How To Enable Hyper-V Virtual Switch Adapter

After you install Capture Client (with SentinelOne agent) on windows, enable Device Control, and reboot the endpoint, the Hyper-V Virtual Switch Adapter is disabled.

Microsoft Windows changes the configuration of Hyper-V Virtual Switch Adapter for devices that register as a LowerFilter to the net ({4d36e972-e325-11ce-bfc1-08002be10318}) class. This change disables the switch.

SentinelOne reported this behavior to Microsoft (1 June 2020).

There are two workarounds available to address this issue.

Workaround 1 :- 

1. Get the S1 passphrase of the Agent on the endpoint. Navigate to Assets>Devices and export Devices List.
   
   
   
   
2. Run cmd as Administrator.
3. Exclude this network adapter from Device Control with these commands:
4. > cd "C:\Program Files\SentinelOne\Sentinel Agent "version"
   
   

5. Reboot the endpoint.

Workaround Option 2: 

In Windows Device Manager, disable and then enable Hyper-V Virtual Ethernet Adapter.

Note: The first workaround is persistent. The second is undone when the endpoint reboots.

Please contact SonicWall support if you have any questions.