Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

What are the severity levels for each Policy Manager alerts?

Issue:

What are the severity levels for each alerts which are sent to the Policy Manager Console by Client Security or Server Security? Are they listed somewhere? The Export alerts descriptions CSV file doesn't include this information. 

Resolution:

INFO:

  • offload_scanning_agent.connection.established
  • fsav_for_exchange.restored.restore
  • connection_control.page.block
  • connection_control.connection.block

WARNING:

  • network_interceptor.dns.block"
  • network_interceptor.ip.block" // Deep Guard
  • firewall.fs_rule_triggered.block"
  • firewall.fs_rule_application.failed"
  • on_access_scanner.error"
  • on_access_scanner.update.failed"
  • software_updater.reboot.required"
  • application_control.settings.error
  • integrity_protection.process_modifying_file"
  • integrity_protection.file_modified"
  • fsav_for_exchange.scanning.error"
  • fsav_for_exchange.restoring_error.nothing"
  • fsav_for_sharepoint.scanning.error"
  • online_safety.suspicious_page.block"
  • online_safety.category_page.block"
  • on_demand_scanner.error"

FATAL ERROR: 

  • pmp.tls_cert_untrusted.nothing

SECURITY ALERT:

  • web_traffic_scanning.url.block
  • web_traffic_scanning.content_type.block
  • deep_guard.malware.block
  • deep_guard.admin.block
  • deep_guard.user.block
  • deep_guard.modifying_settings.block
  • deep_guard.modifying_another_process.block
  • deep_guard.modifying_file_or_folder.block
  • deep_guard.suspicious_behaviour.block
  • deep_guard.riskware.block
  • deep_guard.rare.block
  • deep_guard.network_access.block
  • deep_guard.exploit.block
  • deep_guard.unwanted_application.block
  • deep_guard.ransomware.block
  • on_access_scanner.file_infection.nothing
  • on_access_scanner.file_infection.block
  • on_access_scanner.file_infection.disinfect
  • on_access_scanner.file_infection.rename
  • on_access_scanner.file_infection.delete
  • on_access_scanner.file_infection.quarantine
  • on_access_scanner.system_infection.nothing
  • on_access_scanner.system_infection.block
  • on_access_scanner.system_infection.disinfect
  • on_access_scanner.system_infection.rename
  • on_access_scanner.system_infection.delete
  • on_access_scanner.system_infection.quarantine
  • on_access_scanner.spyware.nothing
  • on_access_scanner.spyware.block
  • on_access_scanner.spyware.disinfect
  • on_access_scanner.spyware.rename
  • on_access_scanner.spyware.delete
  • on_access_scanner.spyware.quarantine
  • VIRUS_DEFINITIONS_OLD_ALERT_NAME
  • PMP_VIRUS_DEFINITIONS_OLD_ALERT_NAME
  • on_access_scanner.reboot.required
  • on_access_scanner.protection.malfunction
  • on_disinfect.file_infection.disinfect
  • on_disinfect.file_infection.rename
  • on_disinfect.file_infection.delete
  • on_disinfect.file_infection.quarantine
  • on_disinfect.system_infection.disinfect
  • on_disinfect.system_infection.rename
  • on_disinfect.system_infection.delete
  • on_disinfect.system_infection.quarantine
  • on_disinfect.spyware.disinfect
  • on_disinfect.spyware.rename
  • on_disinfect.spyware.delete
  • on_disinfect.spyware.quarantine
  • PMP_SWUP_DB_OLD_ALERT_NAME
  • PMP_SWUP_DB_MISSING_ALERT_NAME
  • application_control.application_start.block
  • application_control.application_start.report
  • application_control.module_load.block
  • application_control.module_load.report
  • application_control.installation_start.block
  • application_control.installation_start.report
  • application_control.file_access.block
  • application_control.file_access.report
  • access_control.file.block
  • access_control.file.reported
  • offload_scanning_agent.connection.error
  • offload_scanning_agent.scanning.aborted
  • device_control.device.blocked
  • device_control.modification.blocked
  • device_control.execution.blocked
  • fsav_for_exchange.attachment.nothing
  • fsav_for_exchange.attachment.delete
  • fsav_for_exchange.attachment.stop_message
  • fsav_for_exchange.grayware.nothing
  • fsav_for_exchange.grayware.disinfect
  • fsav_for_exchange.grayware.delete
  • fsav_for_exchange.grayware.stop_message
  • fsav_for_exchange.suspicious_content.nothing
  • fsav_for_exchange.suspicious_content.delete
  • fsav_for_exchange.suspicious_content.stop_message
  • fsav_for_exchange.virus.nothing
  • fsav_for_exchange.virus.disinfect
  • fsav_for_exchange.virus.delete
  • fsav_for_exchange.virus.stop_message
  • fsav_for_exchange.manual.incorrect_admin_credentials
  • fsav_for_exchange.quarantine.failed
  • fsav_for_exchange.quarantine_storage.size.exceeded
  • fsav_for_exchange.quarantine_storage.items.exceeded
  • fsav_for_exchange.unsafe_urls.nothing
  • fsav_for_exchange.unsafe_urls.stop_message
  • fsav_for_sharepoint.suspicious_content.nothing
  • fsav_for_sharepoint.suspicious_content.block
  • fsav_for_sharepoint.virus.block
  • fsav_for_sharepoint.grayware.nothing
  • fsav_for_sharepoint.grayware.block
  • amsi.infection.block
  • amsi.spyware.block
  • online_safety.harmful_page.block
  • online_safety.illegal_page.block
  • online_safety.denied_page.block
  • online_safety.unrated_page.block
  • product.url.excluded
  • product.path.excluded
  • tamper_protection.process.block
  • tamper_protection.file.block
  • tamper_protection.registry.block
  • tamper_protection.service.block
  • tamper_protection.uninstall.block
  • on_demand_scanner.file_infection.nothing
  • on_demand_scanner.file_infection.rename
  • on_demand_scanner.file_infection.delete
  • on_demand_scanner.spyware.nothing
  • on_demand_scanner.spyware.rename
  • on_demand_scanner.spyware.delete
  • connection_control.remote_access.block