Issue:

How to upgrade Cloud Protection for Salesforce? Is there any roll-back option available after upgrade to latest version so that incase if there is any issue with the new version then we can rollback to old version.

Resolution:

The latest version of the Cloud Protection for Salesforce solution is always available in Salesforce AppExchange. Upgrading preserves all existing settings and analytics data.

Issue:

How to download the latest version of WithSecure Cloud Protection for Salesforce?
 

Resolution:

The latest version of WithSecure Cloud Protection for Salesforce version can be downloaded from our product Downloads page.

Issue:

How to increase the Scan Quota in Cloud Protection for Salesforce when getting error: "monthly scan usage quota limits exceeded" ?

1. What’s the impact on the service when we hit the monthly scan quota limit?
2. What are the options available to optimize the scan quota usage?

Resolution:

You are getting that email alert because they have reached the total monthly scan quota in your purchased license. 

If you want it to be increased, then you have to contact your sales representative or WithSecure sales contact (account owner) to purchase more licenses.

You may consider to optimize the scan quota usage as below:

1. Currently there is no hard limits in Cloud Protection for Salesforce, so everything will still work after the total monthly scan quota limit has been reached. Having said that, there is still a need for you to consider on purchasing license to increase the monthly scan quota.
2. In order to optimize the scan quota usage, you could consider to limit the scanned file extension, exclude certain file extensions and set how long you will trust the cache data. Apart from that, you could also consider to limit the licensed users and locations for the objects to be scanned (for example, selected objects only).

Issue:

When URL Protection is enabled, links in email sent internally and externally has its URL syntax replaced which may break certain links. 

How to allow those URLs without disabling URL Protection in Cloud Protection for Salesforce?

Resolution:

Follow these steps to exclude a URL:

1. Login to Cloud Protection and go to Administration
2. Under URL Protection Settings, scroll down until the section Exclusion
3. Enable Exclude trusted domains,hosts and URLS (if it is disabled) and click on Open the list of trusted domains, hosts, and URLs…
4. Add the URL you wish to be excluded to the list (make sure it is ticked)
5. Click Save

Note: Please be sure to copy paste the URL link from original source. Do not use the redirected URL from Click Time Protection as the URL symbol / is different 

Issue:

Salesforce stores "documents" in three different objects: ContentVersion (aka Files), Document, Attachment. WithSecure Cloud Protection for Salesforce does not appear to be checking Documents uploaded via API or Manually. It is testing ContentVersion and Attachment.

Resolution:

This is by design. WithSecure Cloud Protection for Salesforce only scans files stored as ContentDocument / ContentVersion and Attachment objects. We do not plan to add support for Document objects as Salesforce told us earlier that they would discontinue this file storage in the future. In the long-run, Salesforce plan to have only one file storage based on ContentDocument / ContentVersion objects, which provide better security and usability.

Issue:

WithSecure is using Future Method to run scans and clashes with custom scripts that also uses Future Method. Any suggestions on how to resolve this?

Resolution:

By default Cloud Protection for SalesForce uses Queueable Jobs for invoking email attachment scan. However if Future Method was called, this means that the limits of Queueable jobs has been reached so WithSecure App switches to using Future Method instead. It is not possible to call Future Method from a Future Method as they are asynchronous.

We suggest to use the Queueable interface instead of a Future Method for custom scripts. The Queueable interface allows chain jobs, meaning WithSecure job could be started without the system exception from custom jobs. 

Issue:

After the deployment of Cloud Protection for Salesforce 2.0 tried to import leads into Pardot with the help of an integration user they get the following error message: "Custom Validation Exception: WithSecure Cloud Protection: Your message cannot be processed because you do not seem to have the Cloud Protection User permission set assigned.
Please contact your administrator for help.
 

Resolution:

If the installed version of the app is 2.5 or above, assign “WithSecure Cloud Protection Integration User“ permission set to the integration user. 

If the installed version of the app is 2.4.1 or below 

1. Clone the WithSecure Cloud Protection Admin permission set and remove the access for Visualforce page at the cloned permission set 

2. Assign the cloned permission set and “WithSecure Cloud Protection Connected App” to the integration user 

Alternatively, you may consider changing the user type to Standard User. 
 
As for the need to update the permission set for each release : This is not something frequently required. Connected App permission set will need the access of certain apex API services. But they are introduced very rarely (Ex: ATA).