Issue:

How to add trusted email sender in Elements Collaboration Protection?

Resolution:

Follow these steps to add an email address as a trusted sender:

1. Log in to the Elements portal: https://elements.withsecure.com
2. Navigate to the Collaboration Protection > Policies page
3. On the Policies page, select the policy you want to modify.
   • Note: Default WithSecure owned policies cannot be modified. 
4. Select the Exchange tab.
5. Under Trusted senders, do the following to add trusted senders.
   1. Select ON
   2. Select Scan and alert (low severity) when harmful content detected if you want the system to alert if harmful content is detected.

      Note: When this option is selected, emails are still scanned but no action is taken and the email items are still passed through.

   3. In the Trusted email sender addresses field, add the email addresses of those senders whose email messages are not quarantined or deleted.
   4. In the Trusted sender domains field, add those sender domains that you consider trusted. Email messages coming from those domains are not quarantined or deleted.

Visit the product admin guide for more information:

https://www.withsecure.com/userguides/product.html#business/fse4ms365/latest/en/task_7177D009B59245F38D9051D201AF825E-latest-en

Issue:

How to change Elements Collaboration Protection Exchange online mailbox type between user and non-user? 

Resolution:

The mailbox type listed in the Elements Collaboration Protection portal has to do with the type of Microsoft 365 tenant / account itself. There are no settings in Elements Collaboration Protection portal to change the mailbox account type.

The mailbox type will be recognized accordingly by Elements Collaboration Protection portal when a new Microsoft for Office 365 tenant / account has been added to the cloud service, so if the type is wrong currently in the Elements Collaboration Protection portal's Exchange view, you will need to check your mailbox settings from the Microsoft for Office 365 side. 

Some Microsoft for Office 365 accounts are meant for meetings or other shared uses, thus they are considered as non-user mailboxes.
 

Issue:

I want to give a different device name to the computer on which I have installed Elements Agent (EPP for Computer or EPP for Servers), how to change the device name (alias) in the Element Security Center Portal?
 

Resolution:

Follow these steps to change device name in the Elements Security Center Portal:

1. Log in to the Elements Security Center Portal: https://elements.withsecure.com
2. Navigate to the Environment > Devices page
3. Click on the device in the list
4. Click add alias on the right side of the device name
5. Enter the new name and click Save

Issue:

How do I generate WSDiag diagnostic logs on WithSecure Mac products?

Resolution:

Please follow the steps below on how you can create a WSDiag logfile on a Mac.
 

1. Click on the Withsecure icon on the Menu Bar (top right)
2. Select 3 horizontal lines.
3. Click on "Settings…"
4. On the new window, click on Support.
5. Select Open support tool.
6. Select Run diagnostic.
7. Enter your password.
8. If there is a prompt to allow, please select Allow.
9. Save the file on Desktop.
10. Attach the logfile to the reply email.

If the product installation has failed and you do not have the WithSecure Support Tool available in the product folder under Applications, you can use the stand alone support tool to gather a diagnostic file:

1. Download the stand alone Withsecure Support Tool for Mac.
2. Extract the Support Tool.app from Support Tool.zip.
3. Run the Support Tool.app.
4. Select Run Diagnostics on the Support Tool window.
5. Enter the administrator password for your computer.
   The support tool starts and displays the progress of the data collection.
6. When the data collection is complete, select where you want to save the resulting tar.gz archive and then select Save.
   The support tool opens a Finder window showing the saved file.
7. Attach the file to the support case.

Note: You need administrative rights to run the tool.

Issue:

How is severity of detection determined on Elements Collaboration Protection?

Resolution:

Severity level indicates whether an administrator action is needed to mitigate the immediate risk.

Low: No action is needed because the item is coming from a trusted source.
Medium: No action is needed. The item was automatically either quarantined or deleted.
High: Action required. No automatic action is specified in the policy.
Critical: Immediate action is required to mitigate the risk.

Issue:

How to add Elements Collaboration Protection access rights for admins with existing WithSecure Business accounts (administrators who already have Elements Endpoint Protection, Endpoint Detection and Response, or Vulnerability Management access rights)?

Resolution:

You can add Elements Collaboration Protection access rights for administrators with existing WithSecure user accounts by following these steps:

1. Log in to the Elements Security Center portal: https://elements.withsecure.com
2. Navigate to the Management > Organization Settings > Security Administrators page
3. Click on the user's email address
4. Enable Collaboration protection roles:
   1. Management role is for admin users who will be able to grant Collaboration Protection access to other users
   2. Collaboration protection role is for the daily admin user who needs to be able to for example create and modify policies, release from quarantine and enable protection for exchange mailboxes.
5. Click Save 

Visit this guide for more information.
https://www.withsecure.com/userguides/product.html#business/fse4ms365/latest/en/task_58D5F1D5EB0B4FEF9F40C94FF84AAD03-latest-en
 

Issue:

Getting a message of "Refresh permissions to Exchange to support the latest features and improvements" on Elements Collaboration Protection portal. What needs to be done to solve this?

Resolution:

You need to revisit the Microsoft consent popup by disconnecting and reconnecting Exchange on our Collaboration Protection portal. 

This is only required for Exchange, not for SharePoint, OneDrive, or Teams.

Issue:

Is there a way to allow a website or add a website URL to be always trusted in the Elements Collaboration Protection configuration policy so that an email containing the website URL is not blocked or quarantined?

Resolution:

It is possible to add a website URL to the trusted websites list within the Elements Collaboration Protection policy settings. This way the URL address is whitelisted so that emails including the URL will not be quarantined or blocked. 

Follow these steps:

1. Log in to the WithSecure Elements portal: https://elements.withsecure.com
2. Go to the Collaboration Protection > Policies page
3. Select the policy that is in use on the cloud service
4. Go to Exchange > URL scanning > Trusted websites
5. Turn on the 'Trusted websites' feature
6. Add the URL in the websites field
7. Click Save

Issue:

How do I create a custom WithSecure Elements EPP for Computers or for Servers profile in the Elements Endpoint Protection Portal?

Resolution:

Here are instructions on how you can create a custom profile which can be edited in the Elements Endpoint Protection Portal:

Creating a custom profile:

1. Log in to the Elements Security Center portal
2. Go to the Security Configurations > Profiles page
3. Click Create a profile from the top of the page
4. Enter a name and label of the new custom profile
5. Edit the profile to your liking
6. Click Save and publish

If you want to use an existing profile as a starting point, you can Clone a profile:

1. Log in to the Elements Security Center portal
2. Go to the Security Configurations > Profiles page
3. Click the three dots next to the profile you want to use as the starting point
4. Select Clone profile
5. Enter a name and label of the new custom profile
6. Edit the profile to your liking
7. Click Save and publish

Assigning a profile:

1. Go to the Environment > Devices page
2. Choose a device to which you want to assign a profile (a menu will appear)
3. Click on assign profile 
4. Select the profile from the drop-down menu
5. Click Assign

Note: Depending on the internet connection, it can take a up to 30 seconds before the profile is assigned to the device.

Issue:

How can I block the download of a specific file type, for example MP4 or EXE, with Elements Endpoint Protection (EPP for Computers or EPP for Servers)? 

Resolution:

EPP for Computers and EPP for Servers have the Browsing Protection feature called Content Type Filtering, which can be used to block specific content types. 

Note: The content type filtering is only performed if Security Cloud does not recognize the website address (URL) the content originates from.

1. Log in to Elements Endpoint Protection Portal 
2. Go to the Profiles page
3. Select the Profile to modify
4. Go to the Browsing Protection settings
5. Click Add Content Type filter:
   • Content Type: application/*mp4*
   • Filename: *.mp4
   • Description: Block MP4 file
6. Click Save and Publish