{"id":4713,"date":"2026-10-01T14:42:29","date_gmt":"2026-10-01T11:42:29","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=support_article&p=4713"},"modified":"2026-10-01T14:42:29","modified_gmt":"2026-10-01T11:42:29","slug":"what-does-the-elements-endpoint-protection-rollback-feature-do","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/de\/support-articles\/what-does-the-elements-endpoint-protection-rollback-feature-do\/","title":{"rendered":"What does the Elements Endpoint Protection Rollback feature do?"},"content":{"rendered":"

Issue:<\/h3>\n

What does the Rollback feature do that has been added to Elements Endpoint Protection?<\/p>\n

Resolution:<\/h3>\n

Rollback offers user a protection against of ransomware and allows to restore files and registry to a previous state before the ransomware infection.<\/p>\n

The product keeps tracking activity of suspicious process and record changes made by this process (including file\/registry modifications) at that location, and backup these to the backup folder when a suspicious process is detected with the rollback feature enabled.<\/p>\n

Once the suspicious process is identified to be malicious, the rollback will happen immediately to restore the change(s) in the files\/registries. After the session ends, the feature does not keep the backup and will drop it.<\/p>\n

Rollback can be set up from the Elements profile for EPP for Computers devices:<\/p>\n

    \n
  1. Log in to the Elements Security Center portal<\/li>\n
  2. Navigate to the Security configurations > Profiles <\/strong>page<\/li>\n
  3. Click on the profile that is in use on your devices<\/li>\n
  4. Go to the Rollback <\/strong>settings page<\/li>\n
  5. Enable rollback<\/li>\n
  6. Allow to restore reverted files<\/li>\n
  7. Click Save profile\u00a0<\/strong><\/li>\n<\/ol>\n

    \u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

    What is the new feature of Rollback that has been added to client recently ?<\/p>\n","protected":false},"template":"","support_article_product":[99],"class_list":["post-4713","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000004899","source_version":1,"source_system":"salesforce","source_date_updated":"2026-10-01 11:42:29","import_hash":"6af5006b5134a2bec59a0964f0d763374a2624ee","vanilla_article_id":"","vanilla_url":"","vanilla_kb_id":"","vanilla_category_id":"","machine_translated":false,"reactions_helpful_yes":"","reactions_helpful_no":""},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article\/4713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/media?parent=4713"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article_product?post=4713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}