-
WithSecure Elements Endpoint Protection Windows Firewall is turned ON despite disabled in the profile
Issue: I have disabled Windows Firewall in the Elements Endpoint Protection profilem but Windows Firewall is still enabled on the host device. Resolution: For Windows: You are only allowed to disable either "Apply WithSecure firewall profiles" or "Use Windows Firewall" in the Elements Endpoint Protection profile. As an…
-
How to generate debug wsdiag logs for Elements Endpoint Protection, Client Security and Server Security?
Issue: This article describes the steps to generate wsdiag debug, also known as full logging, logs for Elements EPP for Computers, Elements EPP for Servers, Client Security 16 and Server Security 16 or later. Debug diagnostic logs are needed in some instances by technical support to investigate problems in more detail.…
-
How do I uninstall WithSecure Elements Endpoint Protection or Business Suite products via a GPO uninstallation?
Issue: This article applies to the following WithSecure products: * WithSecure Elements Agent (EPP for Computer or EPP for Servers) * WithSecureBusiness Suite (Client Security or Server Security) How do I uninstall an WithSecure business product via a GPO uninstallation?Resolution: You can follow the steps below to…
-
Why is there a large amount of Port Scanning Prevention Filter entries in WithSecure firewall blocks.log?
Issue: This article applies to the following products: Client Security 15 and 16 , Server Security 15 and 16 and Elements Endpoint Protection products I am seeing a lot of the following entries in the firewall blocks.log: [xxxx.xxxx] I: Type: FWPM_NET_EVENT_TYPE_CLASSIFY_DROP. Dropped by filter: Port Scanning Prevention…
-
Client Security or Elements Endpoint Protection firewall blocks network sharing or printing
Issue: With the firewall enabled in Client Security or Elements Endpoint Protection (EPP for Computers or for Servers), I am unable to reach the network share or printer. Resolution: The default firewall rule blocks unknown inbound/outbound connections. Ensure that you have allowed the network traffic in the product…
-
List of all Withsecure processes and the folders they are located in a Windows system
Issue: System administrator needs a list of all Withsecure processes and the folders where they are located in a Windows system Resolution: You can create a list of all WithSecure processes and where they are located in a Windows system by following these steps: * Open Command Prompt with administrator rights * Run the…
-
Is it possible to monitor or track user web activity with WithSecure Endpoint Protection products?
Issue: Is it possible to do tracking or monitoring of user web activity with WithSecure Endpoint Protection product? Such as bandwidth usage or which web pages users have visited? Resolution: Due to privacy laws, WithSecure Endpoint Protection products do not store a user's private activities, such as web pages the users…
-
How to release or remove a file from quarantine via the local client user interface?
Issue: How to release or remove a file from the Quarantine list via the client's Graphical User Interface (GUI)? Resolution: Note: These instructions are valid for: * Business Suite Client Security 14 and later * Business Suite Server Security 14 and later * Elements Endpoint Protection (EPP for Computers and EPP for…
-
Application blocked by DeepGuard as rare application
Issue: Application blocked by Deepguard as rare application with alert "DeepGuard blocked an application because it is not commonly used" or "DeepGuard blocks a rare application" Resolution: Submit the application to our Labs to investigate the file. Open a ticket on the following…
-
How to create browser debug log
Issue: Browser is showing strange behavior. R&D needs to get debug file from browser. Resolution: Google Chrome * In the browser, at the top right, choose Customize and control Google Chrome. * Pause on More tools, and then choose Developer tools. * With DevTools open in the browser, choose the Network panel. * Select the…