Get answers and solutions, initiate discussions, and connect with experts globally
Hello, I'm currently testing Withsecure EDR with ransomware. The solution works well (my files are not altered), but the ransomware leaves an encrypted duplicate next to my file (files .psr, as shown in the screenshot below). I attempted to find a way to properly remove all the .psr files using the "Remediation" > "Delete…
Hi, We have been creating some suppression rules for BCD, and it look like the Web interface has a bug. Browser is EDGE/FIREFOX, language is FRENCH, tried ENGLISH also, same problem. When looking at the suppression rules we see 10 lines by default, but the pager indicates "0 - 0 of 0 / 1 of 1". If we set the filter to 50,…
I am in the process of implementing automatic actions in the event of an infection. In the rule schedule field, there is no customization option, only the continue option. I would like to know on average of personalized planning my rule. Sincerely,
In the EPP dashboard, there are is a bar chart of infection counts as follows: I'm trying to re-create the chart using API calls, but can't find what the counts represent. I thought at first it represented the number of devices the infection was found on, but this proved to be incorrect. For example, in our company…
Issue: When an WithSecure endpoint product is installed on a computer or server, there is high CPU or memory (RAM) usage and applications are experiencing performance issues. The connectivity of some applications can also be slow or blocked completely. Issue affects all WithSecure clients: * Elements Endpoint Protection…
Issue: Elements portal's Security Events page shows that "OfficeClickToRun.exe" was blocked from changing the "fshoster64.exe" process , whereas "fshoster64.exe" can be any WithSecure service is generated. Will selecting acknowledge allow the specific process to run? Or we still need to do manual whitelisting or exclusion?…
Issue: How to reset two factor authentication (2FA) for a WithSecure Business Account (Elements, Partner Portal, eService Portal) user account. Example scenarios: * User has a new mobile device and wants to move or transfer the authenticator to the new device * Device that had the multi factor authentication (MFA)…
Issue: Getting an error of "Your login to WithSecure™ Partner Portal failed. Please try using a different browser, or you can open a support ticket at: https://www.withsecure.com/en/support; when logging into Partner Portal. Resolution: This error message appears typically when user has an existing WithSecure user account,…
Issue: WithSecure Elements Endpoint Detection and Response (EDR) detects a safe application (e.g. an in-house application). How to whitelist the detection? Resolution: You can close the Broad Context Detection (BCD) as "Accepted behavior", to create suppression rule that can accept the behavior of a user or a process. To…
Issue: Real-time scanning or DeepGuard has detected a file to be malicious. How to submit a sample file to Virus labs to find out if it is a false positive? What if a possibly malicious file has not been detected, how to submit a sample file to virus labs to find out if it is a false negative? Resolution: If you suspect…
It looks like you're new here. Sign in or register to get started.