-
How to secure Remote Desktop Protocol (RDP)
Issue: * RDP Brute Force attack performed and Ransomware encrypted system or files * Technique commonly used by Crysis, Dharma, GandCrab ransomware. Resolution: * Use strong and long passwords* To avoid brute force attack on RDP, avoid using Dictionary word and simple password. Always use long password with combination of…
-
Infected by ransomware
Issue: A workstation's or server's files have been encrypted by ransomware. How do I decrypt them and get access back to my files? Resolution: A ransomware infection typically distributed through a few ways such as phishing email (common way to infect), infected USB drive, unsecured public Wi-Fi networks, exploitation of…
-
What to do if malicious code has been found in an MBR file
Issue: Malicious code has been found in MBR file (Master Boot Record), how to proceed for further investigation. Resolution: Collect the MBR log from the infected machine for further investigation whether it is valid infection or false positive from F-Secure product. Log Collection Instructions: * Install Sector Inspector…
-
Running the FSAUA tool to fix "Update check failed" or "Update won't download"
Issue: This article applies to the following F-Secure products: Client Security, Server Security, Computer Protection, Policy Manager, Email and Server Security, SAFE Steps on running the F-Secure Automatic Update Agent (FSAUA) reset tool, when the virus definitions are too old or the F-Secure products is encountering a…
-
How to configure RMM Kaseya VSA agent to retrieve read-only status information from WithSecure client applications such as Elements Endpoint Protection, Computers Edition or Client Security?
Issue: How to configure Kaseya VSA agent to retrieve read-only status information from WithSecure client applications such as Elements Endpoint Protection, Computers Edition or Client Security. Resolution: Our Help Guides include all of the information required to configure supported Windows Management Instrumentation…
-
Where to contact about payments and billing regarding WithSecure Business Products
Issue: Where to contact about payments and billing regarding WithSecure Business / corporate products. Resolution: If you are an end-customer, you need to contact your own WithSecure reseller partner if you have questions about billing. If you are a WithSecure reseller partner and you have questions about billing, please…
-
When trying to increase or decrease licenses through the Partner Portal, I get the error "Sorry, data cannot be saved"
Issue: I get the error "Sorry, data cannot be saved" when trying to increase or decrease SaaS or Yearly subscription through the Partner Portal. Resolution: If you get this error, open a support ticket using Partner Portal and give the following details: * Who is the user who is doing the order * Customer name *…
-
What is DeepGuard?
Issue: What does the DeepGuard functionality in WithSecure products do? Resolution: DeepGuard monitors applications to detect potentially harmful changes to the system. DeepGuard makes sure that you use only safe applications. The safety of an application is verified from the trusted cloud service. If the safety of an…
-
WithSecure Elements Device Control not blocking "write access" or "executable launching" on USB mass storage devices
Issue: * User attaches a USB mass storage device but Device Control does not block access to it. * Admin has disallowed writing to removable storage devices, this works correctly on USB thumb drives, however external USB disk drives can still be written to. How to ensure that writing to external disk drives is also blocked…
-
How to order evaluation license for a new customer in the WithSecure Partner Portal
Issue: How to order evaluation (trial) license for a new customer in the WithSecure Partner Portal Resolution: Follow these steps to create an evaluation order for a new customer account in the WithSecure Partner Portal. 1. Log in to your Partner Portal account 2. Click Ordering and select Yearly 3. Click New Order 4. In…