Stop agents from ELEMENTS Web UI

Gérald

Hello

On a windows device, there is a button to stop Withsecure services for a limited time

How can we achieve same goal on Linux and Mac computers without having to log onto the machine and disabling temper protection ?

Have a nice day

Hamid_

Hello Gérald,

Since these devices are managed via the cloud, you can toggle protection components directly from the management portal. This avoids the need for local interaction or manual tamper protection overrides.

1. Log in to the WithSecure Elements Security Center.
2. Navigate to Devices: Go to Endpoint Protection > Devices.
3. Select the Target Device: Find the Linux or Mac machine you wish to modify.
4. Change the Profile or Toggle Settings:
   • Option A (Profile Change): Assign a "Maintenance" profile where real-time scanning and other protection features are disabled. Once the maintenance is finished, re-assign the original profile.
   • Option B (Direct Toggle): If the profile allows, you can sometimes toggle specific features (like Real-time scanning) off for that specific device or group.
5. Wait for Synchronization: The device will receive the new policy during its next heartbeat (usually within minutes).

-If you have remote terminal access (SSH for Linux or MDM/Terminal for Mac) and need to stop services via command line, keep in mind that Tamper Protection must be handled via the portal first if it is enabled.

• Linux:
  • You can use systemctl stop f-secure-linuxsecurity (or the equivalent service name for your version).
  • Alternatively, use the master-switch off command if supported by your specific Linux Bedrock version.
• Mac:
  • Services are typically managed via launchctl, but it is highly recommended to use the Elements Portal or an MDM (like Jamf) to push a configuration profile that disables the agent's active components, as macOS system permissions (TCC) and WithSecure's own self-protection make manual service stopping difficult.