-
How to disable TLS1.0 and TLS1.0 in Policy Manager Server on Windows?
Issue: How to disable TLS1.0 and TLS1.0 in Policy Manager Server ? Resolution: The Java system properties for Policy Manager Server (PMS) can be specified via the Windows registry: * Run Regedit as administrator. * Create the following string registry key: HKEY_LOCAL_MACHINE\SOFTWARE(Wow6432Node)\Data…
-
Client Security or Server Security Web traffic scanning is blocking HTTP connections to an internal server, URL or of an application
Issue: * When the Web traffic scanning feature is enabled, some applications are unable to connect to an internal server and some URLs are inaccessible or some applications have connectivity or performance issues * Java-based applications unable to connect to an internal server or there are connectivity issues. Resolution:…
-
How can I manually isolate Client Security hosts from the network with WithSecure Policy Manager?
Issue: How can I manually isolate Client Security hosts from the network with WithSecure Policy Manager? Resolution: You can isolate one or more hosts from the network in your WithSecure Policy Manager. Note: Use network isolation with caution and only in case of a network attack. To isolate a host from the network:*…
-
WithSecure Linux Security installed as a clone imagine is not listed in Policy Manager
Issue: WithSecure Linux Security installed as a clone image is not listed under the domain tree in the Policy Manager console. Resolution: Follow the instructions in the WithSecure Linux Security administrator guide to clear the host UID after deploying Linux clone image. This is explained on the page 9 section 2.3,…
-
How to set the Policy Manager Server to accept remote Policy Manager Console connections
Issue: * Policy Manager Server is rejecting Policy Manager Console connections from a remote host. * When trying to connect to Policy Manager Server running on Linux using a Windows machine, the following error is displayed: "Cannot connect to server 172.16.0.6:8080. Check that the host name and port number are correct.…
-
Linux Security 64 is supporting Amazon Web Services (AWS) Auto Scaling environment ?
Issue: Does Linux Security 64 support the AWS Auto Scaling environment? Resolution: Yes. The AWS Auto Scaling works and it is supported in Linux Security 64 with Policy Manager, provided new UID is generated for new host when auto scaling. For an optimal flow you will have to consider adjusting the unique hardware…
-
How to configure the WithSecure client host ID in a machine creation service environment (Citrix Golden Image / Master Image)
Issue: How to configure the WithSecure client host ID in a machine creation service (MCS) environment. For instance, a Citrix Golden Image / Master Image Resolution: First you need to know which behavior you are aiming for. Here are the most common one: Clients are created recurring every day from the Golden Image / Master…
-
Linux Security 64 "Master-Switch" command cannot stop/start the process/service
Issue: Linux Security 64 "Master-Switch" command cannot stop/start the process/service since after update, Linux Security 64 (12.0.222), BaseGuard (1.0.532) and FSBG (1.0.508). This problem is not happening in PSB mode/Standalone mode. Resolution: This problem is happening due to policy setting in LS64. * Login to Policy…
-
Policy-based upgrades and installations are failing with error status "download interrupted"
Issue: We are using the policy-based installation option to upgrade our clients, from which we receive status "Failed: download interrupted" Resolution: By default WithSecure Policy Manager Server can handle a maximum of 50 simultaneous package download requests. If the network cannot handle the bandwidth required for 50…
-
"Customer number is invalid" error when registering or logging in to Policy Manager Console
Issue: "Customer number is invalid" error when registering or logging in to the Policy Manager Console. How to fix or troubleshoot the issue? Resolution: If you receive an error that the customer number you entered is no longer valid, check the following items: * Make sure that the customer number entered during…