Issue: How to scan files that are linked by symbolic link in Linux Security 64? Resolution: Realtime scan is able to scan symbolic link, as long as the target file's original location is included in RTS scan target. For manual scan (using remote command from PMC) and schedule scan, symbolic link will not be scanned. For…
Issue: How to move the WithSecure Policy Manager Server to the new Windows Server?Resolution: Follow these steps to transfer the WithSecure Policy Manager Server to a new server. * Backup the current Policy Manager database from the old server: * Stop the Policy Manager Server service * Policy Manager 15: net stop fsms *…
Issue: How can I install Policy Manager Console 16.00 as stand-alone, so that it installs only the Console and not also Policy Manager Server?Resolution: You can install Policy Manager Console separately by using msiexec.exe with NOSERVER=true parameter. Example command: msiexec.exe /i…
Issue: How can I replace the default self-signed Policy Manager Linux certificate with trusted CA created certificate?Resolution: The Policy Manager for Linux keystore is located inside "/var/opt/f-secure/fspms/data/fspms.jks" (version 12.30 and higher) or "/opt/f-secure/fspms/config/fspms.jks" for previous Policy Manager…
Issue: How can I replace the default self-signed Policy Manager certificate with a trusted certificate authority (CA) created certificate?Resolution: Assume that you have: * The signed or maybe self-signed certificate (with full chain of intermediate CA) and private key for it inside PKCS12 Keystore. * It is protected with…
Issue: How to exclude a domain or specific website from Web Content Control disallowed site categories? The site belongs to a blocked category but users need to be able to access it. Resolution: If a website or domain has been assigned a category that the administrator wants to have as disallowed, the Trusted…
Issue: Steps to exclude a folder or file from real-time scanning and DeepGuard for Client Security and Server Security in Policy Manager ConsoleResolution: You can exclude a file or folder from Real-time scanning and DeepGuard by following the steps below:* Log into Policy Manager Console * Click on Settings * Select…
Issue: How to centrally upgrade WithSecure Client Security or Server Security to a newer or latest version using the Policy Manager Console?Resolution: Both Client Security and Server Security can be centrally upgraded to a newer version from the Policy Manager Console. Follow these steps to upgrade:* Download the latest…
Issue: * Policy Manager Server is rejecting Policy Manager Console connections from a remote host. * When trying to connect to Policy Manager Server running on Linux using a Windows machine, the following error is displayed: "Cannot connect to server 172.16.0.6:8080. Check that the host name and port number are correct.…
Issue: How does the firewall automatic selection in Policy Manager work? How to set up the automatic selection profile?Resolution: To set the firewall automatic selection profile changes to work, create the auto select rule based on conditions such as gateway IP, DNS, etc. As an example, when the Windows Firewall profile…