To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Elements Endpoint Protection Portal Changelog

1…4567810»

Comments

  • goloni
    goloni Staff Posts: 2 W/ Staff
    edited June 20

    What's new in week 30

    Dear community,

    New features:

    • Five additional Security Events charts added to the Reports
      • Web Content Control - Top Blocked Categories
      • Data Guard - Top Blocked Applications
      • Device Control - Top Rules Blocking Devices
      • Tamper Protection - Top Alert Types
      • System Events - Top Event Types
    • Security Events acknowledgement Operations are now audited and visible under Reports → Audit Log for analysis. 

    Best regards,
    EPP Team

  • GrzegorzMusial2
    GrzegorzMusial2 Posts: 2 Security Scout
    edited June 20

    What's new in week 31

    Dear community,

    New features:

    • Uninstalled devices are now shown in Managed Removed Devices view which is available from Devices view. This shows devices where Elements agent was uninstalled, currently supporting Windows agents only.
    • Security posture new profile based assessments. A new form of security posture analysis points have been added. The new points analysis data from the profile settings to warn admins about potentially risky configuration.
    image.png

    Improvements:

    • Windows 10 LTSB versions are properly taken into account when showing Operating System End of Life.
    • Unprotected devices view now uses pagination instead of infinite scrolling.

    Removed features:

    • Clearing block list in subscriptions view has been disabled as improved feature is available in Devices tab where it is possible to unblock individual devices.
    image.png

    Best regards,
    EPP Team

  • RoopeKemppainen
    RoopeKemppainen Staff Posts: 12 W/ Staff
    edited June 20

    What's new in week 32

    Dear community,

    New features:

    • New profile based security posture: "User can tun off real-time scanning on the client as the setting is unlocked in the profile".
    profile_based_security_posture.png
    • Reasons describing what triggered a profile assignment for a device are now visible in the device details operations table.
    profile_assignment_reasons.png
    • Added buttons for moving graphs to first and last places in the custom reports view.

    custom_reports_improvement.png
    • Uninstalled devices are now automatically cleaned up from the Manage Removed Devices view after 6 months.
    • Collaboration Protection events are now visible in Security Events.

    Improvements:

    • Downloads page in portal now has separate MDM guides for Elements Mobile Protection for Android and iOS.

    Best regards,
    EPP Team

  • RoopeKemppainen
    RoopeKemppainen Staff Posts: 12 W/ Staff
    edited June 20

    What's new in week 33

    Dear community,

    New features:

    • Added the devices assigned to the affected profile under security posture.
    MicrosoftTeams-image (1).png
    • Missing updates and installation logs now can be filtered using multiple options from dropdown
    MicrosoftTeams-image.png
    • Feature definition database data is now shown for Linux devices in the device details.
    • Send the device a message remote operation is now supported for iOS devices.

    Improvements:

    • Public downloads page link now opens in a new tab.

    Best regards,
    EPP Team

  • Suresh
    Suresh Staff Posts: 4 W/ Staff
    edited June 20

    What's new in week 34

    Dear community,

    New features:

    • In Security posture view, the profile based assessments flyout show device count for each affected profile with platform type icon that links to device view.
    image.png
    • An info on the number of malicious urls and attachments discovered by Collaboration Protection was added to Security Event details of the Collaboration Protection Email Scan Event.
    • Other Elements Solution view in Security Events now also contains all Collaboration Protection events.

  • RoopeKemppainen
    RoopeKemppainen Staff Posts: 12 W/ Staff
    edited June 20

    What's new in week 35

    Dear community,

    New features:

    • Added filter by a device OS type for Security events.
    MicrosoftTeams-image (1).png

    • Added filter by Active Directory Organzational Unit for Security events.
    MicrosoftTeams-image (2).png

    • Unprotected devices that have had WithSecure EPP client installed but have been since inactivated by administrator are now considered protected, so that they will not appear in Unprotected devices listing.

    Best regards,
    EPP Team

  • Hubert_Szymanski
    Hubert_Szymanski Posts: 10 Junior Protector
    edited June 20

    What's new in week 36

    Dear community,

    New features:

    • Email reports view has been added
      MicrosoftTeams-image.png
    • In Reports of devices status info flyout has been added
      MicrosoftTeams-image (1).png
    • Similar events feature is supposed to help security administrators look at the whole picture and acknowledge multiple events at once. In the action menu there's a new item "Show similar", which opens the flyout with all the similar events. Info icon near the title will show why do we think that these events are similar. The filters are copied from the main view, and you can adjust them to narrow your search further or to limit amount of events shown. On the bottom of the view there's "Acknowledge all" button, which sends the acknowledgement request for all events currently visible in the view. Please note that acknowledging many events might be time consuming and won't appear in the portal right away. There's also an upper limit of 10_000 events to be acknowledged simultaneously. Read-only users can't acknowledge events even with "acknowledge all" feature.
      Available only for events starting from the 1st of Sep 2023. The action is not present for older events.
      MicrosoftTeams-image (3).png
      MicrosoftTeams-image (2).png
      MicrosoftTeams-image (4).png

    Best regards,
    EPP Team

  • tymurdaudov
    tymurdaudov Staff Posts: 2 Security Scout
    edited June 20

    What's new in week 38

    Dear community,

    New features:

    • Apple is releasing the next major operating system version  14 (Sonoma) ahead of schedule, and our agent is not yet compatible with it. We have now two new issues in the EPP dashboard advising not to upgrade yet and showing which devices have already upgraded to the new OS version.

    83cd4849-9a15-474b-a813-476f4e29b73d.jpg

    Improvements:

    • Creating Infections Alerting Configuration with duplicate emails in Security Events does not fail anymore, but rather duplicates are removed from the list.

    Best regards,
    EPP Team

  • ToukoVaarnamo
    ToukoVaarnamo Staff Posts: 3 W/ Staff
    edited June 20

    What's new in week 40

    Dear community,

    New features:

    • Email reports can now be configured to be sent on daily, weekly or monthly intervals. Admins can also select the desired time of the day for when they want to receive the report.
    • Add an info in the Security Events details explaining why the website URL information is missing from the event together with a guidance on how to enable it in the profile.
    sudo.png
    • Dynamic risk score can now be used as a trigger for Outbreak control in Profile assignment rules.
    • Added "run if user away" option to every automated task.
    user-away.png
    • Add a custom note for every new exclusion or rule if possible.
    custom-note.png
    • Use new global exclusions (with toggle and description).
    globalexclusions2.png

    Best regards,
    EPP Team

  • ŁukaszDrąg
    ŁukaszDrąg Member Posts: 20 Junior Protector
    edited June 20

    What's new in week 45

    Dear community,

    New features:

    • Business suite + EDR devices are now visible in Elements Endpoint Protection devices view.
    bs_edr_visible.png

    • Added a reload button to manually refresh the page in account and device details operation views.
    reload_operations.png

    • Action panel can now be collapsed in device details and device listing views.
    collapse_actions.png

    • Company admins can now download WS-Diag from the portal operations view.

    Best regards,
    EPP Team

  • RoopeKemppainen
    RoopeKemppainen Staff Posts: 12 W/ Staff
    edited June 20

    What's new in week 6

    Dear community,

    New features:

    • Admins can now select the time zone they want to use when configuring Email reports.
      email_report_time_zone.png

    Improvements:

    • EDR device classification confidence is now visible in the device listing.
    • Vulnerability counters are now displayed as icons in the device listing.

    Best regards,
    EPP Team

  • ToukoVaarnamo
    ToukoVaarnamo Staff Posts: 3 W/ Staff
    edited June 20

    What's new in week 12

    Dear community,

    New features:

    • It is possible to perform mass acknowledgement of security events based on target.
    security_events_based_on_target2.png
    security_events_based_on_target.png

    Improvements:

    • Devices: Searching for host name is now supported in the Device view
    • Reports: We have renamed the 'Email Reports' tab to 'Email and Notification Report' Additionally, we have clarified the accompanying information text. The purpose of this enhancement is to emphasize that this feature serves as a valuable tool for notifying users about non-compliant devices (e.g., devices with malware protection disabled) or for receiving alerts related to specific events (e.g. Malware blocked or EDR incident).
    • Reports/My report: If a user has not yet created any reports, they will now see an option to access pre-defined widgets. This enhancement aims to help users understand the types of dashboards they can create.
    • Reports/My report: When adding a dashboard to 'My Report', the template name (data field) is now clearly displayed below the dashboard. This enhancement ensures transparency and helps users understand the data sources used to build their customized dashboards.
    • Reports/Email and notification report: Users can now send a test report directly from the 'Reports/Email and Notification Report' section. This option simplifies the process of testing new email notifications or reports.
    reports-email-and-notification.png
    • Reports/My Reports: We have expanded the device information available for creating reports within 'My Reports'. Users now have access to a wider range of parameters when building their customized reports.
    device-information-available-creating-reports.png

    Best regards,
    EPP Team

  • Suk
    Suk Staff Posts: 2 W/ Staff
    edited June 20

    What's new in week 20

    Dear community,

    New features:

    • New UI for the connector profiles
    image.png
    • Added "Not within" filter option to Devices view filter panel
    image (2).png


    Best regards,
    EPP Team

  • tymurdaudov
    tymurdaudov Staff Posts: 2 Security Scout
    edited June 20

    What's new in week 22

    Dear community,

    New features:

    • Send summary and configure report option is removed from Email and notification tab under Reports
      (please see related article for more details ) 

    Best regards,
    EPP Team

  • AntonBlomström
    AntonBlomström Staff Posts: 2 W/ Staff
    edited June 20

    What's new in week 23

    Dear community,

    New features:

    • We have added a view template selector that allows the creation of multiple custom reports. Once a view is created, it can be part of an organization, making it visible to all admins within the same organization. We have also introduced system view templates to provide basic default view that is al generic example of widgets. You can set what is your default view or hide default and organization views that are not useful to you.
      image.png

    Best Regards,

    EPP Team

  • SergeH
    SergeH Staff Posts: 63 W/ Former Staff
    edited August 8

    What's new in week 24?
    Dear community,

    We have introduced the ability to email custom reports as PDF.

    Please try it out by following the instruction below:

    1. Add Widgets:
      • Navigate to the “My Report” tab.
      • Add the desired widgets to create your custom report.
      • Save the view template.
    2. Set Up Email Reports:
      • Go to the “Email Notification and Report” tab.
      • Click on the “Add Email Report” button.
      • In the flyout, select the personal or organization view template you saved in the “My Report” section.
    3. Configure Email Settings:
      • Specify the language for the report.
      • Set the schedule (daily, weekly, or monthly).
      • Add recipients to the recipient list.
    4. Recipient Experience:
      • Recipients will receive an email from WithSecure.
      • The email will contain a button to download the report as a PDF.
      • The PDF includes both the dashboard and the description from the “My Report” page.
      • The report remains available for 7 days.
    image.png



    Users now can mark or add/edit any desirable and explanatory information, also remove description if necessary. The description will be visible both on screen and in the PDF report.

    The screenshot below shows how the user can add/create description within ‘My Reports’ tab after clicking on Add Widget. "Add widget" is greyed when a system or organization view template is displayed. You should either create a new view template or select a template from My view templates.

    image.png

  • Suk
    Suk Staff Posts: 2 W/ Staff

    What's new in week 29

    Dear community,

    New features:

    • Advisory shown when EDR sensor is disabled for devices
    • Advisory shown when the Advanced response is disabled for devices
    • Export option added to be able to download detailed report for missing patches
    • Security events added for Identity BCDs, also email report can be configured to receive notification for Identity Security events

    Best regards,
    EPP Team

  • Suresh
    Suresh Staff Posts: 4 W/ Staff

    What's new in week 31

    Dear community,

    New features:

    • Advisory shown when BitLocker recover key collection is disabled.
    image.png
    • Advisory shown when BitLocker recover key collection failed.
    image.png

    Regards,

    EPP Team

  • RoopeKemppainen
    RoopeKemppainen Staff Posts: 12 W/ Staff
    edited October 9

    What's new in week 39

    Improvements:

    • Device importance can now be updated from the device listing view. Multiple selection and edit by query are both supported.
    device_importance_editing.png

    Best regards,
    EPP team

  • RoopeKemppainen
    RoopeKemppainen Staff Posts: 12 W/ Staff
    edited October 31

    What's new in week 43

    Fixed issues:

    • The remote operation for installing software updates in the Devices view now completes successfully.
    • The "Computers by operation system" widget in the "Devices" system view no longer shows data for mobile devices on the "My report" page.
    • Rollback is now available as an option on the Security events page when "Infections" is selected from the View drop-down menu.
    image2024-10-30_10-45-44.png

    Best regards,

    EPP team

Categories