Issue:

How to set Elements Endpoint Protection (EPP for Computers or EPP for Servers) to scan for viruses, malware and other harmful applications at regular scheduled times? 

Resolution:

You can do this by editing the profile that the device uses. The profile can be edited through the Elements Endpoint Protection Portal on the profiles page. 

Steps to schedule a scan:

1. Log in to the Elements Security Center portal
2. Go to the Security configurations > Profiles page
3. Select the profiles you want to edit
4. Go to the Manual scanning settings page
5. Scroll down to the Scheduled scanning.section
6. Click Enable scheduled scanning
7. Select how often you would like the scheduled scanning to run from the Scan frequency drop-down menu:
   • Daily – scan every day
   • Weekly – scan on selected days during the week
   • Every four weeks
8. Select on which days the scan should run 
9. Under Start scanning, select one of the options:
   • Time – select the time when the scan will start. You should select a time when you expect to not be using the computer
   • After idle – select a period of idle time after which the scanning starts if the computer is not used
10. Optional: You can turn on or off the following options:
    • Run scanning as low priority (slower scanning that uses less resources)
    • Scan only known file types (faster) – scan only those file types that are most likely to have infections, for example, executable files
    • Scan inside compressed files (slower) – specify whether files inside compressed archives should be scanned for malware
    • Skip a scheduled scanning while the device is running on battery
    • Show notifications to user – Turn this setting off to hide notifications for scheduled scanning
11. Click Save profile

Issue:

How to view security alerts for a single Elements Endpoint Protection device (host machine) in the Elements Security Center Portal ?

Resolution:

If you want to view the security alerts of a single device, follow these steps:

1. Log in to the Elements Security Center Portal
2. Go to the Environment > Devices page
3. Click on one of the devices in the list 
4. Click on the Show Security events link from the top-left corner of the device details page

This will open the Events > Security Events page with a pre-made filter for the device's UUID (Unique ID).

Issue:

After adding an exclusion on the Real-time scanning > Excluded processes list in the Elements Endpoint Protection profile, the excluded process is not visible in the local Elements Agent (EPP for Computers or EPP for Servers) user interface on the App and file control > Excluded list. 

Resolution:

The list is working as intended as only the objects added to the Real-time scanning > Excluded objects and the Scanning settings > Global exclusions lists are visible in the local user interface. If you want to confirm that the process exclusion has been successfully added, you can check the following registry key using the registry editor (regedit):

HKEY_LOCAL_MACHINE\SOFTWARE\F-Secure\Ultralight\Settings\oas.excluded_processes

Issue:

How to change settings for only one specific Elements Endpoint Protection (EPP for Computers or EPP for Servers) device?

Resolution:

You would need to create a separate profile and assign it to the device if you want to change the settings of only a specific Elements device. 

Follow these steps to create a custom profile and then you can assign it to the device: I

Creating a custom profile:

1. Log in to the Elements Security Center Portal
2. Go to the Security configurations > Profiles page
3. Click on the three dots on the right side of a profile and select Clone profile
4. Enter a name and change the settings
5. Click on Clone profile

Assigning a profile to a device:

1. Go to the Environment > Devices page
2. Select the device to which you want to assign a profile (an actions menu will appear)
3. Click Assign profile and select the newly created profile
4. Select profile from the drop-down menu and click Assign profile

Now only the device you assigned this custom profile to has the settings in use.

Issue:

We have for our Linux Security 64 devices configured the automatic updates schedule from from the Policy Manager Console's Settings > Linux > Centralized management settings page, but the Linux Security 64 still update some updates outside of the set daily or weekly scheduled time. 

Why does Linux Security 64 ignore the database update schedule for some updates? 

Resolution:

The "Apply product updates" schedule setting is not applicable to security updates. This means that the database (capricorn/hydra/fmlibunix) updates always happen as soon as possible. 

The setting applies to the following three product channels: fsbg, baseguard, linuxsecurity

The product channel updates are applied at the latest soon after
the expiry time (which is currently one week)