Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How configure real-time scanning for Elements Linux Protection?

Issue:

Elements Linux Protection real-time scanning doesn't detect an eicar file (it does not rename it). 
However, if use "/opt/f-secure/linuxsecurity/bin/fsanalyze" to manually scan the file, it will be detected/renamed (.malware extension is added) correctly. 

How to configure real-time scanning for Elements Linux Protection? 

Resolution:

Elements Linux Protection by default has real-time scanning enabled in the Elements configuration profile, but the Files and folders to scan is by default empty. This means that to  have real-time scanning to scan objects, you need to add the folders you want to have included in real-time scanning in the profile:

  1. Log in to Elements Security Center portal
  2. Navigate to the Security configurations > Profiles
  3. Go to the For Linux tab
  4. Open the profile that used by the device
  5. Go to the Real-time scanning settings page
  6. Under Files and folders to scan, click Add path
  7. Insert the file/folder path that need to be scanned by real-time scanning
    1. If you want to have everything scanned, use "/"
  8. Click Save profile