Support articles
Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.
What are the severity levels for each Policy Manager alerts?
Last updated
Issue:
What are the severity levels for each alerts which are sent to the Policy Manager Console by Client Security or Server Security? Are they listed somewhere? The Export alerts descriptions CSV file doesn't include this information.
Resolution:
INFO:
- offload_scanning_agent.connection.established
- fsav_for_exchange.restored.restore
- connection_control.page.block
- connection_control.connection.block
WARNING:
- network_interceptor.dns.block"
- network_interceptor.ip.block" // Deep Guard
- firewall.fs_rule_triggered.block"
- firewall.fs_rule_application.failed"
- on_access_scanner.error"
- on_access_scanner.update.failed"
- software_updater.reboot.required"
- application_control.settings.error
- integrity_protection.process_modifying_file"
- integrity_protection.file_modified"
- fsav_for_exchange.scanning.error"
- fsav_for_exchange.restoring_error.nothing"
- fsav_for_sharepoint.scanning.error"
- online_safety.suspicious_page.block"
- online_safety.category_page.block"
- on_demand_scanner.error"
FATAL ERROR:
- pmp.tls_cert_untrusted.nothing
SECURITY ALERT:
- web_traffic_scanning.url.block
- web_traffic_scanning.content_type.block
- deep_guard.malware.block
- deep_guard.admin.block
- deep_guard.user.block
- deep_guard.modifying_settings.block
- deep_guard.modifying_another_process.block
- deep_guard.modifying_file_or_folder.block
- deep_guard.suspicious_behaviour.block
- deep_guard.riskware.block
- deep_guard.rare.block
- deep_guard.network_access.block
- deep_guard.exploit.block
- deep_guard.unwanted_application.block
- deep_guard.ransomware.block
- on_access_scanner.file_infection.nothing
- on_access_scanner.file_infection.block
- on_access_scanner.file_infection.disinfect
- on_access_scanner.file_infection.rename
- on_access_scanner.file_infection.delete
- on_access_scanner.file_infection.quarantine
- on_access_scanner.system_infection.nothing
- on_access_scanner.system_infection.block
- on_access_scanner.system_infection.disinfect
- on_access_scanner.system_infection.rename
- on_access_scanner.system_infection.delete
- on_access_scanner.system_infection.quarantine
- on_access_scanner.spyware.nothing
- on_access_scanner.spyware.block
- on_access_scanner.spyware.disinfect
- on_access_scanner.spyware.rename
- on_access_scanner.spyware.delete
- on_access_scanner.spyware.quarantine
- VIRUS_DEFINITIONS_OLD_ALERT_NAME
- PMP_VIRUS_DEFINITIONS_OLD_ALERT_NAME
- on_access_scanner.reboot.required
- on_access_scanner.protection.malfunction
- on_disinfect.file_infection.disinfect
- on_disinfect.file_infection.rename
- on_disinfect.file_infection.delete
- on_disinfect.file_infection.quarantine
- on_disinfect.system_infection.disinfect
- on_disinfect.system_infection.rename
- on_disinfect.system_infection.delete
- on_disinfect.system_infection.quarantine
- on_disinfect.spyware.disinfect
- on_disinfect.spyware.rename
- on_disinfect.spyware.delete
- on_disinfect.spyware.quarantine
- PMP_SWUP_DB_OLD_ALERT_NAME
- PMP_SWUP_DB_MISSING_ALERT_NAME
- application_control.application_start.block
- application_control.application_start.report
- application_control.module_load.block
- application_control.module_load.report
- application_control.installation_start.block
- application_control.installation_start.report
- application_control.file_access.block
- application_control.file_access.report
- access_control.file.block
- access_control.file.reported
- offload_scanning_agent.connection.error
- offload_scanning_agent.scanning.aborted
- device_control.device.blocked
- device_control.modification.blocked
- device_control.execution.blocked
- fsav_for_exchange.attachment.nothing
- fsav_for_exchange.attachment.delete
- fsav_for_exchange.attachment.stop_message
- fsav_for_exchange.grayware.nothing
- fsav_for_exchange.grayware.disinfect
- fsav_for_exchange.grayware.delete
- fsav_for_exchange.grayware.stop_message
- fsav_for_exchange.suspicious_content.nothing
- fsav_for_exchange.suspicious_content.delete
- fsav_for_exchange.suspicious_content.stop_message
- fsav_for_exchange.virus.nothing
- fsav_for_exchange.virus.disinfect
- fsav_for_exchange.virus.delete
- fsav_for_exchange.virus.stop_message
- fsav_for_exchange.manual.incorrect_admin_credentials
- fsav_for_exchange.quarantine.failed
- fsav_for_exchange.quarantine_storage.size.exceeded
- fsav_for_exchange.quarantine_storage.items.exceeded
- fsav_for_exchange.unsafe_urls.nothing
- fsav_for_exchange.unsafe_urls.stop_message
- fsav_for_sharepoint.suspicious_content.nothing
- fsav_for_sharepoint.suspicious_content.block
- fsav_for_sharepoint.virus.block
- fsav_for_sharepoint.grayware.nothing
- fsav_for_sharepoint.grayware.block
- amsi.infection.block
- amsi.spyware.block
- online_safety.harmful_page.block
- online_safety.illegal_page.block
- online_safety.denied_page.block
- online_safety.unrated_page.block
- product.url.excluded
- product.path.excluded
- tamper_protection.process.block
- tamper_protection.file.block
- tamper_protection.registry.block
- tamper_protection.service.block
- tamper_protection.uninstall.block
- on_demand_scanner.file_infection.nothing
- on_demand_scanner.file_infection.rename
- on_demand_scanner.file_infection.delete
- on_demand_scanner.spyware.nothing
- on_demand_scanner.spyware.rename
- on_demand_scanner.spyware.delete
- connection_control.remote_access.block