Support articles
Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.
The firewall rule I created in Elements portal for Endpoint Protection devices is not working
Last updated
Issue:
The firewall rule I created in the Elements Security Center Portal profiles for EPP for Computers or EPP for Servers devices does not work or the firewall rule doesn't appear on the device.
Resolution:
If the firewall rule that you created in the Elements Endpoint Protection profile is not visible on the devices, there are a few reasons:
- The firewall profile to which you created the firewall rule to isn't the one in use on the devices
- There was an error in the firewall rule and it couldn't be created.
First you need to check that the firewall profile you edited is the one that is actually in use on that profile:
- Log in to the Elements Security Center Portal
- Go to the Security configurations >profiles page
- Select the profile you want to edit
- Go to the Firewall settings page
- Check that you have from the WithSecure firewall profile drop-down menu selected the same firewall profile to which yo have added the firewall rule to. Default profile is Normal workstation
- Also on the Firewall page, make sure that the WithSecure firewall mode is set as Turn on Withsecure firewall
- Click Save profile
If the firewall rule still is not working after you have made sure the firewall profile you are editing is correct, the issue could be with the rule itself. Invalid rules which do not follow the Windows Defender Firewall standards, will not appear in the Firewall rules list in Windows:
- Check that the local and remote IP addresses and ports are correct. If it is a specific program you want to allow, check the programs help guide to see if it mentions the ports needed
- Check that if the rule should be an inbound or an outbound firewall rule
You can collect a WithSecure diagnostic file from a device and check the f-secure\logs\system\Firewall\InvalidRules.log from the wsdiag.zip to see if any rules have been invalid and therefore couldn't be created to the Windows firewall.