-
F-Secure Pisces Hoster x64 (FsPisces.exe) locking files
Hi, we've configured WithSecure Elements EPP for Servers Premium (v 22.8) on a Windows Server machine with DataGuard active on some important folders. We've noticed that for a few days that when files under these folders are accessed (either from clients or from the server) they're automatically "locked" by FsPisces.exe.…
-
Password protected File
hello, how can i scan a password protected zip archiv?
-
How to elevate?
Hiw I can elevate support case in EDR?
-
Send data to a syslog server
Hi everyone, I use WithSecure Elements EDR and EPP for Computers Premium, how can I send data to a syslog server? Thank you.
-
Software Updater
Hi, I am confused about software updater process. Currently my profile has under the automated task plan "Install critical and important security updates". Now I included a rule to update non-security software into automated installation, but it does not install? Why is that? Is there any workaround? Example with the…
-
Displaying and selecting computer firewall profile
Hello, We recently switched from PM+CS to Elements EPP and for life of my I cannot find where is displayed the currently assigned firewall profile of each computer? The second question: How can we assign certain firewall profile to certain specific computer or groups of computers? Do we really need to clone the whole main…
-
Icon in tray (top of screen)
I am running Android 13 with Mobile protection 18.5.0020216. When I manually end the protection by swiping the message away, and I then manually start the app, the W icon does not reappear until I reboot the device completely. I think I saw last week that the icon re-appeared but I am not sure. I think the icon should…
-
Password for "Turn off all security features"
Hi All, On a client I have to temporarily turn off the protection ("Turn off all security features"). Now I am asked for a password ("Your administrator has protected this feature with a password."). However, I am the administrator and do not know any password for this. At least it isn't the uninstall password. In the…
-
How to debug in MacOS environment ?
Hi, Have a communication problem with some MacOS clients: they don't appear in PMS. What I did is to check : 1- /usr/local/f-secure/fsmac/sysconfig/pm_address 2- /usr/local/f-secure/fsmac/sysconfig/pm_fingerprint 3- the PMS certificate in the system's keychains and trust it I'd like to know if there is a guide line to…
-
What is happening with the Endpoint Protection portal?
It does not load and I get a notification: Loading Endpoint Protection timed out. Please try again.
-
Community search function is not working
Clicking the magnifying glass on top right of the community page just changes the icon to X but there is nowhere to type the search query. Tried it in Firefox and Edge. I'm I missing something?
-
A Bug in Apple MacOS Ventura Breaks Third-Party Security Tools - Wired
Is WithSecure also affected by this bug? https://www.wired.com/story/apple-macos-ventura-bug-security-tools/
-
Console: Software Updates marked as missing
Hello, First post, so be indulgent please. i've searched but not found my topic. In my console, i can see some software update (and some Windows Updates) that are marked as missing, but if i verify on the computers, the elements are already installed. For instance, KB5012170 (Windows 11 security update 2022-08) is…
-
Client Security virus definition outdated
Hi, On my computer I've got an old Client Security product (installed in 2014) that I never changed because it was working well and updating. But now, after being absent for a while, it tells me that I need to update my definitions, but when I go to "check for updates", it tells me that my product is up to date. I've got…
-
Undeliverable updates under Software Updates
In our EPP-portal we have software updates visible. However, there are a few updates who keep getting back in the portal: Is there a way that we can hide or even delete these updates? Every time we try to install them we get error-messages.
-
F-Secure CP and RDR keeps crashing on OSX 12.6 and M1 MacBook Pro (14-inch, 2021) (fscesproviderd)
fscesproviderd process keeps crashing every three days. Any known fixes? Crash log attached
-
FSCS15.3 Trial Period
I did a fresh install of Policy Manager 15.30 in trial mode.And I exported the msi package using the FSCS15.3 jar file and installed the client using the msi package.Will Client Security be unavailable with the end of the APolicy Manager's trial period?How long can I try Client Security?
-
Migration of Infection emails to Security Events notification emails on 4th of October 2022
Hi, as warned already inside the portal, we will be removing the Infections tab on 4th of October. At the same time we will be migrating all Infection email users to Security Events email notifications. This migration will happen before the Infections tab is removed. Migration process will be following We collect all old…
-
All supported 3rd party applications are not reported by Software updater
Hi! Customer would like to roll out update for their VPN client. VPN client is included in supported software list, but none of the computers report this application. Should Software Updater automatically report all supported software if present, or is there a way to enforce WithSecure client to rebuild list of installed…
-
Spam rule, disallowed words list policy manager
Based on this article https://community.withsecure.com/discussion/74177/spam-rule-e-mail-and-server-security-11 I have set the disallowed keyword list in the policy manager -> general -> match lists as default. Email test with disallowed keywords failed. are there any additional settings for disallowed words in the policy…
-
Criteria that define a website as dangerous or suspicious
Criteria that define a website as dangerous or suspicious
-
How can I move an endpoint to another subscription
Until recently I could move an endpoint to another subscription by entering the right key in the portal. Now the functionality has changed and I can only choose the subscriptions listed under the current client. How can I move them under another client ?
-
Creation of MSI installation package with one-launcher.exe fails
Hi All, I'm using the Policy Manager Console on Linux. However, building MSI packages for Windows unfortunately still requires a Windows machine. According to the Policy Manager manual, the command line looks like: program\inst\one-launcher.exe --install --prepare_msi_only --msi OneClientCS.msi Although no MSI package will…
-
Problematically high memory consumption during weekly check-up of F-secure Client
Hello, For a few months, we have had the F-secure Client Security Premium antivirus installed on our computers at work, but I have a problem that my co-workers don't have and that the IT guys don't seem to understand as well: Every Monday at 13h30 there is the automatic weekly checkup and for 5 to 40 minutes each week, my…
-
EPP for Server Premium behavior
Hi, I'm writing about an issue we had a few days ago. Context: Windows Server 2016 with WithSecure Elements EPP for Servers Premium. DataGuard is active on every user's main folders (no domain) and on 3 data folders. All of a sudden after DataGuard detected a suspicious application (known application and known alert that…
-
F-Secure Internet Gatekeeper for linux
Hello, we wan't to change our antivirus bases on Kaspersky to F-Secure or With-Secure . We are on Centos 7.5 We must protect our messaging solution (based on Postfix) and http solution (based on Squid and C-ICAP). We see F-Secure Internet Gatekeeper for linux could do the Job. Could you provide us more informations about…
-
Browsing protection on Mac OS not showing Google search result correctly if enabled
Hi, I noticed that if I enable Browsing Protection (3.0.44008) extension on Safari (15.6.1) when I do a Google search, all results that contain a preview are not showing correctly. As it's difficult to explain I'll attach an example with extension enabled and without. Thank you Kari
-
Dozens of alerts being received daily- 'A DNS query was blocked for a domain'
Hi, Once again, we are receiving loads of alerts for various URL's, some that I'm sure have been whitelisted previously. I've submitted these via the submit a sample page and had no response. Below is a typical example Here are the most recent alerts (1) from Policy Manager. Warning: A DNS query was blocked for a domain.…
-
How to stop RMM software from causing Scripting Abuse or Abnormal Process Execution notifications?
I run powershell scripts from my RMM software agent to manage endpoints. Every time I run a script, I get a Scripting Abuse or Abnormal Process Execution notification. How can I whitelist the RMM agent on the endpoint to stop these false positives?
-
Application control , SHA256 target setting is not working
Hi All, We use the with secure policy management console 15.30 and we want to block access with application control based on file hash We use SHA256 target setting but it is not working but the SHA1 it is works. What did we do wrong? We set the rule based on this :…