-
Exciting New Release: Identity Inventory for XDR!
We are happy to announce a new capability for WithSecure™ Elements: Identity Inventory. This functionality will benefit customers of both WithSecure Elements Identity Security for Entra ID, and WithSecure Elements XDR Cloud Security for Azure Background This update gives you a clear and complete view of all identities in…
-
After onboarding a new Elements Exposure Management, the Identities view in the Elements Portal does not populate data.
Issue: After onboarding a new Elements Exposure Management, the Identities view in the Elements Security Center does not populate data. I followed the steps documented in the help guide: https://www.withsecure.com/userguides/product.html#business/xm/latest/en/concept_hvd_jcy_bbc-latest-en How soon can I expect the data to…
-
Can Elements EPP for Computer firewall rules for Network Isolation firewall profile be used to allow remote access to the device?
Issue: Can Elements EPP for Computer firewall rules for Network Isolation firewall profile be used to allow remote access to the device?Resolution: Yes, as an administrator, you can add extra rules to the firewall profile used by the device if you need to provide extra access to isolated device. For example, you can allow…
-
Client Security or Server Security Firewall rules made with Policy Manager do not work or appear in the Windows firewall
Issue: * Firewall rules made with Policy Manager are not operational on Client Security or Server Security clients. * Firewall rules pushed from Policy Manager to Client Security or Server Security clients do not appear / are not visible in the Windows firewall. Resolution: Check that you have edited the same firewall…
-
Does Elements Endpoint Protection support non-persistent VDI environments?
Issue: Does Elements Endpoint Protection support non-persistent VDI environments? Resolution: We do have the installation steps documented to support persistent deployment on Citrix and WMWare Horizon: Installation in persistent mode on Virtual Desktop Infrastructure (VDI) systems | Elements Endpoint Protection | Latest |…
-
How can I configure Elements Endpoint Protection for Computers to scan on computer startup or reboot?
Issue: What rule do I need to configure to scan my computer on startup or reboot ?Resolution: On Elements Security Center profile, navigate to Automated Tasks : 1. Navigate to Security Configurations > Profiles on the sidebar 2. Select the desired profile 3. Go to Automated tasks 4. Make sure to enable automated tasks 5.…
-
False positive or false negative detection when scanning backported software with Elements Exposure Management
Issue: Elements Exposure Management vulnerability scans on Linux contain false positive detection for backported software. Any recommendation for scanning backported software? Resolution: For any host with backported software. we would suggest performing authenticated scan to get more accurate result. If the "Skip…
-
How does WithSecure Elements Vulnerability Management count scanned unique IP addresses?
Issue: How does WithSecure Elements Vulnerability Management count scanned unique IP addresses (license usage)?Resolution: Elements Vulnerability Management calculates a total number of unique IPs scanned for vulnerabilities in each and every Elements Vulnerability Management organization. In general:* Only vulnerability…
-
How can I change Polling interval for virus definitions updates in Policy Manager Server?
Issue: How can I change Polling interval for virus definitions updates in Policy Manager Server?Resolution: By default the clients checks for updates every 10 minutes How often the client checks for updates can be changed: * Log in to the Policy Manager Console * Select a host or policy domain from the domain tree * Go to…
-
How to configure a persistent data storage or volume for downloaded signatures on Atlant ?
Issue: Following the guide at: https://gallery.ecr.aws/withsecure/atlant How to configure a persistent data storage/volume for downloaded signatures. Especially during development/testing phases it is quite useless to load signatures over and over again on every container restart? Resolution: To just map a local directory…