-
Client Security or Server Security is not able to connect to Policy Manager Server
Issue: Client Security or Server Security not able to connect to the configured Policy Manager Server (PMS). Consequently, the client is unable to auto register itself to the Policy Manager Server and cannot download policies or upload status-information. Resolution: To troubleshoot similar connectivity issues, open the…
-
Policy Manager OpenJDK platform process is consuming high memory usage in the server
Issue: Why is the OpenJDK Platform process from WithSecure consuming 90% (or high usage) of memory, causing the server to be slow? Resolution: The WithSecure Policy Manager uses the OpenJDK platform to run. In Windows, you can check if the process belongs to the Policy Manager by checking the path of the executable…
-
How can we retrieve a list of missing updates per hosts for Software Updater (SWUP) on the Policy Manager?
Issue: How can we retrieve a list of missing updates per hosts for Software Updater (SWUP)? The Policy Manager Web Reporting tool has a "MISSING UPDATES" report. This report lists how many computers have missing software updates but not the names of these computers. Resolution: As a workaround, the following SQL query can…
-
Business Suite Server Security or Elements Endpoint Protection for Servers Software Updater does not reboot the system after installing an update, and system reboot is required to complete the installation
Issue: I have noticed that Software Updater does not reboot the system automatically after installing an update, and system reboot is required to complete the installation. Why is this happening? Resolution: WithSecure server solutions are designed to not reboot a server automatically after Software Updater has finished…
-
How to manage (start/stop/restart/check status) services of Linux Security 64?
Issue: How to manage (start/stop/restart/check status) services of Linux Security 64? Resolution: You can check the status, start and stop the services of Linux Security 64 by running the following commands in terminal. Command to check the status of services: # /opt/f-secure/fsbg/bin/master-switch status Command to start…
-
WithSecure Product installation fails with error "conflicting Oneclient product already installed"
Issue: WithSecure Elements Agent, Business Suite Server/Client Security, or Countercept MDR installation fails with error "conflicting Oneclient product already installed" Resolution: This error indicates that a WithSecure Product has been previously installed on the computer. The uninstallation of the previous WithSecure…
-
How to replace default self-signed Policy Manager Linux certificate with trusted CA created certificate
Issue: How can I replace the default self-signed Policy Manager Linux certificate with trusted CA created certificate? Resolution: The Policy Manager for Linux keystore is located inside "/var/opt/f-secure/fspms/data/fspms.jks" (version 12.30 and higher) or "/opt/f-secure/fspms/config/fspms.jks" for previous Policy Manager…
-
Other Anti Virus is showing different result in Virus Total
Issue: Other Anti Virus is showing different result in Virus Total Virus Total https://www.virustotal.com/gui/home/upload Resolution: The criteria of maliciousness is different in each antivirus software. If you really want to check the file, please submit the file to SAS.…
-
Exclusions for applications running from temp folders not working
Issue: Exclusion rules under Application Control for applications running from Temp Folders does not work. Resolution: The rule might conflict with the default Application Control exclusion rules, such as: * Block malicious files in Temp folder * Block rare and unknown files in Temp folder * Block rare Dlls with unknown…
-
What is the supported formats when creating the safe sender and recipient list for Spam Control?
Issue: * What is the supported formats when creating the safe sender and recipient list for the WithSecure Email and Server Security 14 Spam Control feature? * We have specified the safe senders and recipients list for the spam control by separating each domain name with a space, but we also have used an asterisk (*) as a…