Elements Portal: Multi-Factor Authentication (MFA) Banner<\/strong><\/h3>\nAs every administrator should activate MFA to keep their company (and customers) safe, Element Security Center is now displaying a red banner each time an administrator logs without MFA.<\/p>\n
By clicking on “here” in the banner, the administrator can easily activate MFA by clicking on “enable” in the My Settings view.<\/p>\n![\"Picture1.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture1-15.png.webp\")
<\/img><\/a><\/figure>\nReminder: From Security administrator table under organization settings, you can and should verify that all administrator in your organization have enabled MFA.<\/p>\n
New features<\/strong><\/h3>\nAdmins can now select the time zone they want to use when configuring Email reports.<\/strong><\/p>\n![\"Picture2.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture2-15.png.webp\")
<\/img><\/a><\/figure>\nImprovements<\/h3>\n\n- EDR device classification confidence is now visible in the device listing.<\/li>\n
- Vulnerability counters are now displayed as icons in the device listing.<\/li>\n<\/ul>\n
Elements Endpoint Protection<\/h2>\nElements Agent: Windows Workstations & Servers<\/strong><\/h3>\nOn 2 April 2024 Elements Agents will switch to WithSecure browser extensions:<\/p>\n
\n- Chrome Webstore<\/a><\/li>\n
- Microsoft Edge Add-ons<\/a><\/li>\n
- Firefox Browser Add-ons<\/a><\/li>\n<\/ul>\n
If you use MDM or group policies to manage browser extensions it is recommended to allow or preinstall these extensions in advance.<\/p>\n
You can follow instructions\u00a0Setting up Browsing Protection via GPO<\/a>\u00a0user guide and use following IDs:<\/p>\n\n- Google Chrome: imdndkajeppdomiimjkcbhkafeeooghd<\/li>\n
- Microsoft Edge: aambijcigikmdoehgjhdepcpieghopdl<\/li>\n
- Mozilla Firefox:\n
\n- Extensions to install: https:\/\/download.withsecure.com\/online-safety\/ws_firefox_https.xpi<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Any old F-Secure extension IDs can be removed from MDM or group policies later in March after the switch.<\/p>\n
The same extensions will be later used in next versions of Elements EPP for Mac.<\/p>\n
WithSecure Elements Agent for Windows version 24.2<\/h3>\n
A new version of the endpoint clients is now available, and this release makes the Elements Agent version 24.2 available (internal version 24.2.187).<\/p>\n
The endpoints automatically upgrade, without a reboot.<\/p>\n
This release introduces new features and fixes.<\/p>\n
Features:<\/h4>\n\n- This release introduces new WithSecure Elements agent update mechanisms.\n
\n- We are taking into use new backend services that are completely distinct from the services used by F-Secure products. Therefore this release also introduces new server addresses where the endpoints connect to. Switch to the new backend services happens like the usual automatic endpoint upgrade. It requires minimal extra bandwidth.<\/li>\n<\/ul>\n<\/li>\n
- Note that if endpoint is missing the ACS (Azure Code Signing) dependencies it won’t be upgraded automatically to 24.2 (and will be automatically upgraded once there is no ACS issue anymore). For more information please see our community article<\/a><\/li>\n
- We are pleased to announce that version 24.2 of ‘WithSecure Elements EPP for Computers’ and ‘WithSecure Elements EPP for Computers Premium’ introduces support for Windows ARM64 devices. The following features are supported:\n
\n- Heuristic & behavioral analysis<\/li>\n
- DeepGuard<\/li>\n
- Extensive web protection<\/li>\n
- Firewall management<\/li>\n
- Integrated patch management<\/li>\n
- Device control<\/li>\n
- Rollback<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Elements Vulnerability Management<\/h2>\nEVM: System Scan<\/strong><\/h3>\nWe have now added vulnerability detection capabilities for the following products to authenticated scanning for Windows:<\/p>\n
\n- Mullvad VPN<\/li>\n
- FileZilla Client<\/li>\n
- Regify Regipay Client<\/li>\n
- Dell Pair<\/li>\n
- OpenEXR Viewer<\/li>\n
- Citrix StoreFront<\/li>\n
- SolarWinds Access Rights Manager<\/li>\n
- ockwell FactoryTalk Activation Manager<\/li>\n
- MOVEit Automation<\/li>\n
- Acronis Cyber Protect Cloud Agent<\/li>\n
- Qlik NPrinting Designer<\/li>\n
- Qlik GeoAnalytics<\/li>\n
- UltraVNC<\/li>\n
- Trend Micro Apex Central<\/li>\n
- Autodesk Design Review<\/li>\n
- PDF24 Creator<\/li>\n
- Datto RMM (Remote Monitoring and Management)<\/li>\n
- PeaZip<\/li>\n
- TightVNC<\/li>\n
- Intel Extreme Tuning Utility<\/li>\n
- Intel Memory and Storage Tool<\/li>\n
- Wix Toolset<\/li>\n
- ZED! and ZED! Free<\/li>\n
- PRIMX ZONECENTRAL<\/li>\n
- ConnectWise ScreenConnect<\/li>\n<\/ul>\n
Integrations<\/h2>\nElements Connector: new release 24.05<\/strong><\/h3>\nA new release 24.05 has been rolled out with the following changes:<\/p>\n
Support Event Forwarding for Elements Collaboration Protection security events<\/strong><\/p>\nSupport serving updates from new WithSecure GUTS2 update server<\/strong><\/p>\nThis change ensures, that WithSecure Elements endpoint agents can receive updates via Elements Connector, when using the new WithSecure GUTS2 server address.<\/p>\n
More about the related network address changes can be found from here<\/a><\/p>\nGUTS2 update server connectivity indicators in Elements Security Center<\/strong><\/p>\nIn this release we will highlight if GUTS2 server addresses are unreachable, and managed clients might stop receiving updates when using Elements Connector for caching updates.<\/p>\n
This warning will be visible as a warning in Connector device view in Elements Security Center:<\/p>\n![\"Picture3.png\"](\"https:\/\/support.withsecure.com\/wp-content\/smush-webp\/2026\/10\/picture3-16.png.webp\")
<\/img><\/a><\/figure>\nImprovements for upgrade installation on RPM-based Linux systems<\/strong><\/p>\nImprovements for installation on Windows<\/strong><\/p>\nThe new version is available as a first-time installer, as well as a channel upgrade.<\/p>\n
Elements API: Change log<\/strong><\/h3>\nDevice statistics<\/strong><\/h4>\nElements API client can read statistics of EPP devices from\u00a0query endpoint<\/a>. When request contains HTTP header\u00a0Accept: application\/vnd.withsecure.aggr+json\u00a0Elements API selects all devices matching query parameters and depending on query parameters and groups items by selected property. If client requests histogram then API return statistics for last 30 days.<\/p>\nDevice count<\/strong><\/h4>\nElements API uses value of parameter\u00a0count\u00a0which represents name of property that is used to group devices by. In response API return list of items where each one represents different value of property and number of devices having such value.<\/p>\n
Example query like\u00a0curl -v -X GET-H “Accept: application\/vnd.withsecure.aggr+json” “https:\/\/api.connect.withsecure.com\/devices\/v1\/devices?count=protectionStatus”\u00a0groups devices by property\u00a0protectionStatus.<\/p>\n
\n\n\n\n\n{<\/p>\n
“items” : [ <\/p>\n
{\u00a0 “count” : 1, “protectionStatus” : “isolated” } , <\/p>\n
{\u00a0 “count” : 16, “protectionStatus” : “malwareIssue” }, <\/p>\n
{\u00a0 “count” : 4, “protectionStatus” : “notConnected” }, <\/p>\n
{\u00a0 “count” : 88, “protectionStatus” : “protected” },<\/p>\n
{ “count” : 11, “protectionStatus” : “subscriptionExpired” } <\/p>\n
]<\/p>\n
}<\/p>\n<\/th>\n<\/tr>\n<\/thead>\n
\n\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\nFrom response client can find that query found:<\/p>\n
\n- 1 device with protection status equal\u00a0isolated<\/li>\n
- 16 devices with protection status equal\u00a0malwareIssue<\/li>\n
- 4 devices with protection status equal\u00a0notConnected<\/li>\n
- 88 devices with protection status equal\u00a0protected<\/li>\n
- 11 devices with protection status equal\u00a0subscriptionExpired<\/li>\n<\/ul>\n
Device histogram<\/strong><\/h4>\nElements API uses value of parameter\u00a0histogram\u00a0which represents name of property that is used to group devices by. In such case API return statistic for each day in last 30 day. Response contains list of items sorted in descending order where each element has format<\/p>\n
\n\n\n\n\n{ “count”: <number of<\/strong> devices>, <name of<\/strong> property<\/strong>>: <value of<\/strong> property<\/strong>>, “date”: <statistic date> }<\/p>\n<\/th>\n<\/tr>\n<\/thead>\n\n\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\nExample query like\u00a0curl -v -X GET-H “Accept: application\/vnd.withsecure.aggr+json” “https:\/\/api.connect.withsecure.com\/devices\/v1\/devices?histogra=protectionStatus”\u00a0generates histogram for property\u00a0protectionStatus\u00a0.<\/p>\n
\n
<\/img><\/a><\/figure>\nReminder: From Security administrator table under organization settings, you can and should verify that all administrator in your organization have enabled MFA.<\/p>\n
New features<\/strong><\/h3>\nAdmins can now select the time zone they want to use when configuring Email reports.<\/strong><\/p>\n<\/img><\/a><\/figure>\nImprovements<\/h3>\n\n- EDR device classification confidence is now visible in the device listing.<\/li>\n
- Vulnerability counters are now displayed as icons in the device listing.<\/li>\n<\/ul>\n
Elements Endpoint Protection<\/h2>\nElements Agent: Windows Workstations & Servers<\/strong><\/h3>\nOn 2 April 2024 Elements Agents will switch to WithSecure browser extensions:<\/p>\n
\n- Chrome Webstore<\/a><\/li>\n
- Microsoft Edge Add-ons<\/a><\/li>\n
- Firefox Browser Add-ons<\/a><\/li>\n<\/ul>\n
If you use MDM or group policies to manage browser extensions it is recommended to allow or preinstall these extensions in advance.<\/p>\n
You can follow instructions\u00a0Setting up Browsing Protection via GPO<\/a>\u00a0user guide and use following IDs:<\/p>\n\n- Google Chrome: imdndkajeppdomiimjkcbhkafeeooghd<\/li>\n
- Microsoft Edge: aambijcigikmdoehgjhdepcpieghopdl<\/li>\n
- Mozilla Firefox:\n
\n- Extensions to install: https:\/\/download.withsecure.com\/online-safety\/ws_firefox_https.xpi<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Any old F-Secure extension IDs can be removed from MDM or group policies later in March after the switch.<\/p>\n
The same extensions will be later used in next versions of Elements EPP for Mac.<\/p>\n
WithSecure Elements Agent for Windows version 24.2<\/h3>\n
A new version of the endpoint clients is now available, and this release makes the Elements Agent version 24.2 available (internal version 24.2.187).<\/p>\n
The endpoints automatically upgrade, without a reboot.<\/p>\n
This release introduces new features and fixes.<\/p>\n
Features:<\/h4>\n\n- This release introduces new WithSecure Elements agent update mechanisms.\n
\n- We are taking into use new backend services that are completely distinct from the services used by F-Secure products. Therefore this release also introduces new server addresses where the endpoints connect to. Switch to the new backend services happens like the usual automatic endpoint upgrade. It requires minimal extra bandwidth.<\/li>\n<\/ul>\n<\/li>\n
- Note that if endpoint is missing the ACS (Azure Code Signing) dependencies it won’t be upgraded automatically to 24.2 (and will be automatically upgraded once there is no ACS issue anymore). For more information please see our community article<\/a><\/li>\n
- We are pleased to announce that version 24.2 of ‘WithSecure Elements EPP for Computers’ and ‘WithSecure Elements EPP for Computers Premium’ introduces support for Windows ARM64 devices. The following features are supported:\n
\n- Heuristic & behavioral analysis<\/li>\n
- DeepGuard<\/li>\n
- Extensive web protection<\/li>\n
- Firewall management<\/li>\n
- Integrated patch management<\/li>\n
- Device control<\/li>\n
- Rollback<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Elements Vulnerability Management<\/h2>\nEVM: System Scan<\/strong><\/h3>\nWe have now added vulnerability detection capabilities for the following products to authenticated scanning for Windows:<\/p>\n
\n- Mullvad VPN<\/li>\n
- FileZilla Client<\/li>\n
- Regify Regipay Client<\/li>\n
- Dell Pair<\/li>\n
- OpenEXR Viewer<\/li>\n
- Citrix StoreFront<\/li>\n
- SolarWinds Access Rights Manager<\/li>\n
- ockwell FactoryTalk Activation Manager<\/li>\n
- MOVEit Automation<\/li>\n
- Acronis Cyber Protect Cloud Agent<\/li>\n
- Qlik NPrinting Designer<\/li>\n
- Qlik GeoAnalytics<\/li>\n
- UltraVNC<\/li>\n
- Trend Micro Apex Central<\/li>\n
- Autodesk Design Review<\/li>\n
- PDF24 Creator<\/li>\n
- Datto RMM (Remote Monitoring and Management)<\/li>\n
- PeaZip<\/li>\n
- TightVNC<\/li>\n
- Intel Extreme Tuning Utility<\/li>\n
- Intel Memory and Storage Tool<\/li>\n
- Wix Toolset<\/li>\n
- ZED! and ZED! Free<\/li>\n
- PRIMX ZONECENTRAL<\/li>\n
- ConnectWise ScreenConnect<\/li>\n<\/ul>\n
Integrations<\/h2>\nElements Connector: new release 24.05<\/strong><\/h3>\nA new release 24.05 has been rolled out with the following changes:<\/p>\n
Support Event Forwarding for Elements Collaboration Protection security events<\/strong><\/p>\nSupport serving updates from new WithSecure GUTS2 update server<\/strong><\/p>\nThis change ensures, that WithSecure Elements endpoint agents can receive updates via Elements Connector, when using the new WithSecure GUTS2 server address.<\/p>\n
More about the related network address changes can be found from here<\/a><\/p>\nGUTS2 update server connectivity indicators in Elements Security Center<\/strong><\/p>\nIn this release we will highlight if GUTS2 server addresses are unreachable, and managed clients might stop receiving updates when using Elements Connector for caching updates.<\/p>\n
This warning will be visible as a warning in Connector device view in Elements Security Center:<\/p>\n<\/img><\/a><\/figure>\nImprovements for upgrade installation on RPM-based Linux systems<\/strong><\/p>\nImprovements for installation on Windows<\/strong><\/p>\nThe new version is available as a first-time installer, as well as a channel upgrade.<\/p>\n
Elements API: Change log<\/strong><\/h3>\nDevice statistics<\/strong><\/h4>\nElements API client can read statistics of EPP devices from\u00a0query endpoint<\/a>. When request contains HTTP header\u00a0Accept: application\/vnd.withsecure.aggr+json\u00a0Elements API selects all devices matching query parameters and depending on query parameters and groups items by selected property. If client requests histogram then API return statistics for last 30 days.<\/p>\nDevice count<\/strong><\/h4>\nElements API uses value of parameter\u00a0count\u00a0which represents name of property that is used to group devices by. In response API return list of items where each one represents different value of property and number of devices having such value.<\/p>\n
Example query like\u00a0curl -v -X GET-H “Accept: application\/vnd.withsecure.aggr+json” “https:\/\/api.connect.withsecure.com\/devices\/v1\/devices?count=protectionStatus”\u00a0groups devices by property\u00a0protectionStatus.<\/p>\n
\n\n\n\n\n{<\/p>\n
“items” : [ <\/p>\n
{\u00a0 “count” : 1, “protectionStatus” : “isolated” } , <\/p>\n
{\u00a0 “count” : 16, “protectionStatus” : “malwareIssue” }, <\/p>\n
{\u00a0 “count” : 4, “protectionStatus” : “notConnected” }, <\/p>\n
{\u00a0 “count” : 88, “protectionStatus” : “protected” },<\/p>\n
{ “count” : 11, “protectionStatus” : “subscriptionExpired” } <\/p>\n
]<\/p>\n
}<\/p>\n<\/th>\n<\/tr>\n<\/thead>\n
\n\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\nFrom response client can find that query found:<\/p>\n
\n- 1 device with protection status equal\u00a0isolated<\/li>\n
- 16 devices with protection status equal\u00a0malwareIssue<\/li>\n
- 4 devices with protection status equal\u00a0notConnected<\/li>\n
- 88 devices with protection status equal\u00a0protected<\/li>\n
- 11 devices with protection status equal\u00a0subscriptionExpired<\/li>\n<\/ul>\n
Device histogram<\/strong><\/h4>\nElements API uses value of parameter\u00a0histogram\u00a0which represents name of property that is used to group devices by. In such case API return statistic for each day in last 30 day. Response contains list of items sorted in descending order where each element has format<\/p>\n
\n\n\n\n\n{ “count”: <number of<\/strong> devices>, <name of<\/strong> property<\/strong>>: <value of<\/strong> property<\/strong>>, “date”: <statistic date> }<\/p>\n<\/th>\n<\/tr>\n<\/thead>\n\n\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\nExample query like\u00a0curl -v -X GET-H “Accept: application\/vnd.withsecure.aggr+json” “https:\/\/api.connect.withsecure.com\/devices\/v1\/devices?histogra=protectionStatus”\u00a0generates histogram for property\u00a0protectionStatus\u00a0.<\/p>\n
\n
<\/img><\/a><\/figure>\nImprovements<\/h3>\n\n- EDR device classification confidence is now visible in the device listing.<\/li>\n
- Vulnerability counters are now displayed as icons in the device listing.<\/li>\n<\/ul>\n
Elements Endpoint Protection<\/h2>\nElements Agent: Windows Workstations & Servers<\/strong><\/h3>\nOn 2 April 2024 Elements Agents will switch to WithSecure browser extensions:<\/p>\n
\n- Chrome Webstore<\/a><\/li>\n
- Microsoft Edge Add-ons<\/a><\/li>\n
- Firefox Browser Add-ons<\/a><\/li>\n<\/ul>\n
If you use MDM or group policies to manage browser extensions it is recommended to allow or preinstall these extensions in advance.<\/p>\n
You can follow instructions\u00a0Setting up Browsing Protection via GPO<\/a>\u00a0user guide and use following IDs:<\/p>\n\n- Google Chrome: imdndkajeppdomiimjkcbhkafeeooghd<\/li>\n
- Microsoft Edge: aambijcigikmdoehgjhdepcpieghopdl<\/li>\n
- Mozilla Firefox:\n
\n- Extensions to install: https:\/\/download.withsecure.com\/online-safety\/ws_firefox_https.xpi<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Any old F-Secure extension IDs can be removed from MDM or group policies later in March after the switch.<\/p>\n
The same extensions will be later used in next versions of Elements EPP for Mac.<\/p>\n
WithSecure Elements Agent for Windows version 24.2<\/h3>\n
A new version of the endpoint clients is now available, and this release makes the Elements Agent version 24.2 available (internal version 24.2.187).<\/p>\n
The endpoints automatically upgrade, without a reboot.<\/p>\n
This release introduces new features and fixes.<\/p>\n
Features:<\/h4>\n\n- This release introduces new WithSecure Elements agent update mechanisms.\n
\n- We are taking into use new backend services that are completely distinct from the services used by F-Secure products. Therefore this release also introduces new server addresses where the endpoints connect to. Switch to the new backend services happens like the usual automatic endpoint upgrade. It requires minimal extra bandwidth.<\/li>\n<\/ul>\n<\/li>\n
- Note that if endpoint is missing the ACS (Azure Code Signing) dependencies it won’t be upgraded automatically to 24.2 (and will be automatically upgraded once there is no ACS issue anymore). For more information please see our community article<\/a><\/li>\n
- We are pleased to announce that version 24.2 of ‘WithSecure Elements EPP for Computers’ and ‘WithSecure Elements EPP for Computers Premium’ introduces support for Windows ARM64 devices. The following features are supported:\n
\n- Heuristic & behavioral analysis<\/li>\n
- DeepGuard<\/li>\n
- Extensive web protection<\/li>\n
- Firewall management<\/li>\n
- Integrated patch management<\/li>\n
- Device control<\/li>\n
- Rollback<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Elements Vulnerability Management<\/h2>\nEVM: System Scan<\/strong><\/h3>\nWe have now added vulnerability detection capabilities for the following products to authenticated scanning for Windows:<\/p>\n
\n- Mullvad VPN<\/li>\n
- FileZilla Client<\/li>\n
- Regify Regipay Client<\/li>\n
- Dell Pair<\/li>\n
- OpenEXR Viewer<\/li>\n
- Citrix StoreFront<\/li>\n
- SolarWinds Access Rights Manager<\/li>\n
- ockwell FactoryTalk Activation Manager<\/li>\n
- MOVEit Automation<\/li>\n
- Acronis Cyber Protect Cloud Agent<\/li>\n
- Qlik NPrinting Designer<\/li>\n
- Qlik GeoAnalytics<\/li>\n
- UltraVNC<\/li>\n
- Trend Micro Apex Central<\/li>\n
- Autodesk Design Review<\/li>\n
- PDF24 Creator<\/li>\n
- Datto RMM (Remote Monitoring and Management)<\/li>\n
- PeaZip<\/li>\n
- TightVNC<\/li>\n
- Intel Extreme Tuning Utility<\/li>\n
- Intel Memory and Storage Tool<\/li>\n
- Wix Toolset<\/li>\n
- ZED! and ZED! Free<\/li>\n
- PRIMX ZONECENTRAL<\/li>\n
- ConnectWise ScreenConnect<\/li>\n<\/ul>\n
Integrations<\/h2>\nElements Connector: new release 24.05<\/strong><\/h3>\nA new release 24.05 has been rolled out with the following changes:<\/p>\n
Support Event Forwarding for Elements Collaboration Protection security events<\/strong><\/p>\nSupport serving updates from new WithSecure GUTS2 update server<\/strong><\/p>\nThis change ensures, that WithSecure Elements endpoint agents can receive updates via Elements Connector, when using the new WithSecure GUTS2 server address.<\/p>\n
More about the related network address changes can be found from here<\/a><\/p>\nGUTS2 update server connectivity indicators in Elements Security Center<\/strong><\/p>\nIn this release we will highlight if GUTS2 server addresses are unreachable, and managed clients might stop receiving updates when using Elements Connector for caching updates.<\/p>\n
This warning will be visible as a warning in Connector device view in Elements Security Center:<\/p>\n<\/img><\/a><\/figure>\nImprovements for upgrade installation on RPM-based Linux systems<\/strong><\/p>\nImprovements for installation on Windows<\/strong><\/p>\nThe new version is available as a first-time installer, as well as a channel upgrade.<\/p>\n
Elements API: Change log<\/strong><\/h3>\nDevice statistics<\/strong><\/h4>\nElements API client can read statistics of EPP devices from\u00a0query endpoint<\/a>. When request contains HTTP header\u00a0Accept: application\/vnd.withsecure.aggr+json\u00a0Elements API selects all devices matching query parameters and depending on query parameters and groups items by selected property. If client requests histogram then API return statistics for last 30 days.<\/p>\nDevice count<\/strong><\/h4>\nElements API uses value of parameter\u00a0count\u00a0which represents name of property that is used to group devices by. In response API return list of items where each one represents different value of property and number of devices having such value.<\/p>\n
Example query like\u00a0curl -v -X GET-H “Accept: application\/vnd.withsecure.aggr+json” “https:\/\/api.connect.withsecure.com\/devices\/v1\/devices?count=protectionStatus”\u00a0groups devices by property\u00a0protectionStatus.<\/p>\n
\n\n\n\n\n{<\/p>\n
“items” : [ <\/p>\n
{\u00a0 “count” : 1, “protectionStatus” : “isolated” } , <\/p>\n
{\u00a0 “count” : 16, “protectionStatus” : “malwareIssue” }, <\/p>\n
{\u00a0 “count” : 4, “protectionStatus” : “notConnected” }, <\/p>\n
{\u00a0 “count” : 88, “protectionStatus” : “protected” },<\/p>\n
{ “count” : 11, “protectionStatus” : “subscriptionExpired” } <\/p>\n
]<\/p>\n
}<\/p>\n<\/th>\n<\/tr>\n<\/thead>\n
\n\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\nFrom response client can find that query found:<\/p>\n
\n- 1 device with protection status equal\u00a0isolated<\/li>\n
- 16 devices with protection status equal\u00a0malwareIssue<\/li>\n
- 4 devices with protection status equal\u00a0notConnected<\/li>\n
- 88 devices with protection status equal\u00a0protected<\/li>\n
- 11 devices with protection status equal\u00a0subscriptionExpired<\/li>\n<\/ul>\n
Device histogram<\/strong><\/h4>\nElements API uses value of parameter\u00a0histogram\u00a0which represents name of property that is used to group devices by. In such case API return statistic for each day in last 30 day. Response contains list of items sorted in descending order where each element has format<\/p>\n
\n\n\n\n\n{ “count”: <number of<\/strong> devices>, <name of<\/strong> property<\/strong>>: <value of<\/strong> property<\/strong>>, “date”: <statistic date> }<\/p>\n<\/th>\n<\/tr>\n<\/thead>\n\n\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\nExample query like\u00a0curl -v -X GET-H “Accept: application\/vnd.withsecure.aggr+json” “https:\/\/api.connect.withsecure.com\/devices\/v1\/devices?histogra=protectionStatus”\u00a0generates histogram for property\u00a0protectionStatus\u00a0.<\/p>\n
\n
Elements Endpoint Protection<\/h2>\nElements Agent: Windows Workstations & Servers<\/strong><\/h3>\nOn 2 April 2024 Elements Agents will switch to WithSecure browser extensions:<\/p>\n
\n- Chrome Webstore<\/a><\/li>\n
- Microsoft Edge Add-ons<\/a><\/li>\n
- Firefox Browser Add-ons<\/a><\/li>\n<\/ul>\n
If you use MDM or group policies to manage browser extensions it is recommended to allow or preinstall these extensions in advance.<\/p>\n
You can follow instructions\u00a0Setting up Browsing Protection via GPO<\/a>\u00a0user guide and use following IDs:<\/p>\n\n- Google Chrome: imdndkajeppdomiimjkcbhkafeeooghd<\/li>\n
- Microsoft Edge: aambijcigikmdoehgjhdepcpieghopdl<\/li>\n
- Mozilla Firefox:\n
\n- Extensions to install: https:\/\/download.withsecure.com\/online-safety\/ws_firefox_https.xpi<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Any old F-Secure extension IDs can be removed from MDM or group policies later in March after the switch.<\/p>\n
The same extensions will be later used in next versions of Elements EPP for Mac.<\/p>\n
WithSecure Elements Agent for Windows version 24.2<\/h3>\n
A new version of the endpoint clients is now available, and this release makes the Elements Agent version 24.2 available (internal version 24.2.187).<\/p>\n
The endpoints automatically upgrade, without a reboot.<\/p>\n
This release introduces new features and fixes.<\/p>\n
Features:<\/h4>\n\n- This release introduces new WithSecure Elements agent update mechanisms.\n
\n- We are taking into use new backend services that are completely distinct from the services used by F-Secure products. Therefore this release also introduces new server addresses where the endpoints connect to. Switch to the new backend services happens like the usual automatic endpoint upgrade. It requires minimal extra bandwidth.<\/li>\n<\/ul>\n<\/li>\n
- Note that if endpoint is missing the ACS (Azure Code Signing) dependencies it won’t be upgraded automatically to 24.2 (and will be automatically upgraded once there is no ACS issue anymore). For more information please see our community article<\/a><\/li>\n
- We are pleased to announce that version 24.2 of ‘WithSecure Elements EPP for Computers’ and ‘WithSecure Elements EPP for Computers Premium’ introduces support for Windows ARM64 devices. The following features are supported:\n
\n- Heuristic & behavioral analysis<\/li>\n
- DeepGuard<\/li>\n
- Extensive web protection<\/li>\n
- Firewall management<\/li>\n
- Integrated patch management<\/li>\n
- Device control<\/li>\n
- Rollback<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Elements Vulnerability Management<\/h2>\nEVM: System Scan<\/strong><\/h3>\nWe have now added vulnerability detection capabilities for the following products to authenticated scanning for Windows:<\/p>\n
\n- Mullvad VPN<\/li>\n
- FileZilla Client<\/li>\n
- Regify Regipay Client<\/li>\n
- Dell Pair<\/li>\n
- OpenEXR Viewer<\/li>\n
- Citrix StoreFront<\/li>\n
- SolarWinds Access Rights Manager<\/li>\n
- ockwell FactoryTalk Activation Manager<\/li>\n
- MOVEit Automation<\/li>\n
- Acronis Cyber Protect Cloud Agent<\/li>\n
- Qlik NPrinting Designer<\/li>\n
- Qlik GeoAnalytics<\/li>\n
- UltraVNC<\/li>\n
- Trend Micro Apex Central<\/li>\n
- Autodesk Design Review<\/li>\n
- PDF24 Creator<\/li>\n
- Datto RMM (Remote Monitoring and Management)<\/li>\n
- PeaZip<\/li>\n
- TightVNC<\/li>\n
- Intel Extreme Tuning Utility<\/li>\n
- Intel Memory and Storage Tool<\/li>\n
- Wix Toolset<\/li>\n
- ZED! and ZED! Free<\/li>\n
- PRIMX ZONECENTRAL<\/li>\n
- ConnectWise ScreenConnect<\/li>\n<\/ul>\n
Integrations<\/h2>\nElements Connector: new release 24.05<\/strong><\/h3>\nA new release 24.05 has been rolled out with the following changes:<\/p>\n
Support Event Forwarding for Elements Collaboration Protection security events<\/strong><\/p>\nSupport serving updates from new WithSecure GUTS2 update server<\/strong><\/p>\nThis change ensures, that WithSecure Elements endpoint agents can receive updates via Elements Connector, when using the new WithSecure GUTS2 server address.<\/p>\n
More about the related network address changes can be found from here<\/a><\/p>\nGUTS2 update server connectivity indicators in Elements Security Center<\/strong><\/p>\nIn this release we will highlight if GUTS2 server addresses are unreachable, and managed clients might stop receiving updates when using Elements Connector for caching updates.<\/p>\n
This warning will be visible as a warning in Connector device view in Elements Security Center:<\/p>\n<\/img><\/a><\/figure>\nImprovements for upgrade installation on RPM-based Linux systems<\/strong><\/p>\nImprovements for installation on Windows<\/strong><\/p>\nThe new version is available as a first-time installer, as well as a channel upgrade.<\/p>\n
Elements API: Change log<\/strong><\/h3>\nDevice statistics<\/strong><\/h4>\nElements API client can read statistics of EPP devices from\u00a0query endpoint<\/a>. When request contains HTTP header\u00a0Accept: application\/vnd.withsecure.aggr+json\u00a0Elements API selects all devices matching query parameters and depending on query parameters and groups items by selected property. If client requests histogram then API return statistics for last 30 days.<\/p>\nDevice count<\/strong><\/h4>\nElements API uses value of parameter\u00a0count\u00a0which represents name of property that is used to group devices by. In response API return list of items where each one represents different value of property and number of devices having such value.<\/p>\n
Example query like\u00a0curl -v -X GET-H “Accept: application\/vnd.withsecure.aggr+json” “https:\/\/api.connect.withsecure.com\/devices\/v1\/devices?count=protectionStatus”\u00a0groups devices by property\u00a0protectionStatus.<\/p>\n
\n\n\n\n\n{<\/p>\n
“items” : [ <\/p>\n
{\u00a0 “count” : 1, “protectionStatus” : “isolated” } , <\/p>\n
{\u00a0 “count” : 16, “protectionStatus” : “malwareIssue” }, <\/p>\n
{\u00a0 “count” : 4, “protectionStatus” : “notConnected” }, <\/p>\n
{\u00a0 “count” : 88, “protectionStatus” : “protected” },<\/p>\n
{ “count” : 11, “protectionStatus” : “subscriptionExpired” } <\/p>\n
]<\/p>\n
}<\/p>\n<\/th>\n<\/tr>\n<\/thead>\n
\n\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\nFrom response client can find that query found:<\/p>\n
\n- 1 device with protection status equal\u00a0isolated<\/li>\n
- 16 devices with protection status equal\u00a0malwareIssue<\/li>\n
- 4 devices with protection status equal\u00a0notConnected<\/li>\n
- 88 devices with protection status equal\u00a0protected<\/li>\n
- 11 devices with protection status equal\u00a0subscriptionExpired<\/li>\n<\/ul>\n
Device histogram<\/strong><\/h4>\nElements API uses value of parameter\u00a0histogram\u00a0which represents name of property that is used to group devices by. In such case API return statistic for each day in last 30 day. Response contains list of items sorted in descending order where each element has format<\/p>\n
\n\n\n\n\n{ “count”: <number of<\/strong> devices>, <name of<\/strong> property<\/strong>>: <value of<\/strong> property<\/strong>>, “date”: <statistic date> }<\/p>\n<\/th>\n<\/tr>\n<\/thead>\n\n\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\nExample query like\u00a0curl -v -X GET-H “Accept: application\/vnd.withsecure.aggr+json” “https:\/\/api.connect.withsecure.com\/devices\/v1\/devices?histogra=protectionStatus”\u00a0generates histogram for property\u00a0protectionStatus\u00a0.<\/p>\n
\n
On 2 April 2024 Elements Agents will switch to WithSecure browser extensions:<\/p>\n
- \n
- Chrome Webstore<\/a><\/li>\n
- Microsoft Edge Add-ons<\/a><\/li>\n
- Firefox Browser Add-ons<\/a><\/li>\n<\/ul>\n
If you use MDM or group policies to manage browser extensions it is recommended to allow or preinstall these extensions in advance.<\/p>\n
You can follow instructions\u00a0Setting up Browsing Protection via GPO<\/a>\u00a0user guide and use following IDs:<\/p>\n
- \n
- Google Chrome: imdndkajeppdomiimjkcbhkafeeooghd<\/li>\n
- Microsoft Edge: aambijcigikmdoehgjhdepcpieghopdl<\/li>\n
- Mozilla Firefox:\n
- \n
- Extensions to install: https:\/\/download.withsecure.com\/online-safety\/ws_firefox_https.xpi<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Any old F-Secure extension IDs can be removed from MDM or group policies later in March after the switch.<\/p>\n
The same extensions will be later used in next versions of Elements EPP for Mac.<\/p>\n
WithSecure Elements Agent for Windows version 24.2<\/h3>\n
A new version of the endpoint clients is now available, and this release makes the Elements Agent version 24.2 available (internal version 24.2.187).<\/p>\n
The endpoints automatically upgrade, without a reboot.<\/p>\n
This release introduces new features and fixes.<\/p>\n
Features:<\/h4>\n
- \n
- This release introduces new WithSecure Elements agent update mechanisms.\n
- \n
- We are taking into use new backend services that are completely distinct from the services used by F-Secure products. Therefore this release also introduces new server addresses where the endpoints connect to. Switch to the new backend services happens like the usual automatic endpoint upgrade. It requires minimal extra bandwidth.<\/li>\n<\/ul>\n<\/li>\n
- Note that if endpoint is missing the ACS (Azure Code Signing) dependencies it won’t be upgraded automatically to 24.2 (and will be automatically upgraded once there is no ACS issue anymore). For more information please see our community article<\/a><\/li>\n
- We are pleased to announce that version 24.2 of ‘WithSecure Elements EPP for Computers’ and ‘WithSecure Elements EPP for Computers Premium’ introduces support for Windows ARM64 devices. The following features are supported:\n
- \n
- Heuristic & behavioral analysis<\/li>\n
- DeepGuard<\/li>\n
- Extensive web protection<\/li>\n
- Firewall management<\/li>\n
- Integrated patch management<\/li>\n
- Device control<\/li>\n
- Rollback<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Elements Vulnerability Management<\/h2>\n
EVM: System Scan<\/strong><\/h3>\n
We have now added vulnerability detection capabilities for the following products to authenticated scanning for Windows:<\/p>\n
- \n
- Mullvad VPN<\/li>\n
- FileZilla Client<\/li>\n
- Regify Regipay Client<\/li>\n
- Dell Pair<\/li>\n
- OpenEXR Viewer<\/li>\n
- Citrix StoreFront<\/li>\n
- SolarWinds Access Rights Manager<\/li>\n
- ockwell FactoryTalk Activation Manager<\/li>\n
- MOVEit Automation<\/li>\n
- Acronis Cyber Protect Cloud Agent<\/li>\n
- Qlik NPrinting Designer<\/li>\n
- Qlik GeoAnalytics<\/li>\n
- UltraVNC<\/li>\n
- Trend Micro Apex Central<\/li>\n
- Autodesk Design Review<\/li>\n
- PDF24 Creator<\/li>\n
- Datto RMM (Remote Monitoring and Management)<\/li>\n
- PeaZip<\/li>\n
- TightVNC<\/li>\n
- Intel Extreme Tuning Utility<\/li>\n
- Intel Memory and Storage Tool<\/li>\n
- Wix Toolset<\/li>\n
- ZED! and ZED! Free<\/li>\n
- PRIMX ZONECENTRAL<\/li>\n
- ConnectWise ScreenConnect<\/li>\n<\/ul>\n
Integrations<\/h2>\n
Elements Connector: new release 24.05<\/strong><\/h3>\n
A new release 24.05 has been rolled out with the following changes:<\/p>\n
Support Event Forwarding for Elements Collaboration Protection security events<\/strong><\/p>\n
Support serving updates from new WithSecure GUTS2 update server<\/strong><\/p>\n
This change ensures, that WithSecure Elements endpoint agents can receive updates via Elements Connector, when using the new WithSecure GUTS2 server address.<\/p>\n
More about the related network address changes can be found from here<\/a><\/p>\n
GUTS2 update server connectivity indicators in Elements Security Center<\/strong><\/p>\n
In this release we will highlight if GUTS2 server addresses are unreachable, and managed clients might stop receiving updates when using Elements Connector for caching updates.<\/p>\n
This warning will be visible as a warning in Connector device view in Elements Security Center:<\/p>\n
<\/img><\/a><\/figure>\nImprovements for upgrade installation on RPM-based Linux systems<\/strong><\/p>\n
Improvements for installation on Windows<\/strong><\/p>\n
The new version is available as a first-time installer, as well as a channel upgrade.<\/p>\n
Elements API: Change log<\/strong><\/h3>\n
Device statistics<\/strong><\/h4>\n
Elements API client can read statistics of EPP devices from\u00a0query endpoint<\/a>. When request contains HTTP header\u00a0Accept: application\/vnd.withsecure.aggr+json\u00a0Elements API selects all devices matching query parameters and depending on query parameters and groups items by selected property. If client requests histogram then API return statistics for last 30 days.<\/p>\n
Device count<\/strong><\/h4>\n
Elements API uses value of parameter\u00a0count\u00a0which represents name of property that is used to group devices by. In response API return list of items where each one represents different value of property and number of devices having such value.<\/p>\n
Example query like\u00a0curl -v -X GET-H “Accept: application\/vnd.withsecure.aggr+json” “https:\/\/api.connect.withsecure.com\/devices\/v1\/devices?count=protectionStatus”\u00a0groups devices by property\u00a0protectionStatus.<\/p>\n
\n\n\n
\n \n\n {<\/p>\n
“items” : [ <\/p>\n
{\u00a0 “count” : 1, “protectionStatus” : “isolated” } , <\/p>\n
{\u00a0 “count” : 16, “protectionStatus” : “malwareIssue” }, <\/p>\n
{\u00a0 “count” : 4, “protectionStatus” : “notConnected” }, <\/p>\n
{\u00a0 “count” : 88, “protectionStatus” : “protected” },<\/p>\n
{ “count” : 11, “protectionStatus” : “subscriptionExpired” } <\/p>\n
]<\/p>\n
}<\/p>\n<\/th>\n<\/tr>\n<\/thead>\n
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n From response client can find that query found:<\/p>\n
- \n
- 1 device with protection status equal\u00a0isolated<\/li>\n
- 16 devices with protection status equal\u00a0malwareIssue<\/li>\n
- 4 devices with protection status equal\u00a0notConnected<\/li>\n
- 88 devices with protection status equal\u00a0protected<\/li>\n
- 11 devices with protection status equal\u00a0subscriptionExpired<\/li>\n<\/ul>\n
Device histogram<\/strong><\/h4>\n
Elements API uses value of parameter\u00a0histogram\u00a0which represents name of property that is used to group devices by. In such case API return statistic for each day in last 30 day. Response contains list of items sorted in descending order where each element has format<\/p>\n
\n\n\n
\n \n { “count”: <number of<\/strong> devices>, <name of<\/strong> property<\/strong>>: <value of<\/strong> property<\/strong>>, “date”: <statistic date> }<\/p>\n<\/th>\n<\/tr>\n<\/thead>\n\n
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n Example query like\u00a0curl -v -X GET-H “Accept: application\/vnd.withsecure.aggr+json” “https:\/\/api.connect.withsecure.com\/devices\/v1\/devices?histogra=protectionStatus”\u00a0generates histogram for property\u00a0protectionStatus\u00a0.<\/p>\n
\n
- We are pleased to announce that version 24.2 of ‘WithSecure Elements EPP for Computers’ and ‘WithSecure Elements EPP for Computers Premium’ introduces support for Windows ARM64 devices. The following features are supported:\n
- This release introduces new WithSecure Elements agent update mechanisms.\n
- Extensions to install: https:\/\/download.withsecure.com\/online-safety\/ws_firefox_https.xpi<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
- Microsoft Edge Add-ons<\/a><\/li>\n