{"id":4468,"date":"2026-06-08T17:52:14","date_gmt":"2026-06-08T14:52:14","guid":{"rendered":"https:\/\/support.withsecure.com\/en\/?post_type=support_article&#038;p=4468"},"modified":"2026-06-08T17:52:14","modified_gmt":"2026-06-08T14:52:14","slug":"a-softwares-network-connectivity-is-blocked-once-elements-endpoint-protection-connection-control-session-has-been-activated","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/en\/support-articles\/a-softwares-network-connectivity-is-blocked-once-elements-endpoint-protection-connection-control-session-has-been-activated\/","title":{"rendered":"A Software&#8217;s network connectivity is blocked once Elements Endpoint Protection Connection Control session has been activated"},"content":{"rendered":"<h3>Issue:<\/h3>\n<p>An application&#39;s network connectivity is blocked once Connection Control session has been activated when user visits a banking website. How to create a Connection Control exclusion for Elements EPP for Computers or EPP for Servers devices, so that the network connection is not blocked when Connection Control is active?\u00a0<\/p>\n<h3>Resolution:<\/h3>\n<p>When Connection Control is active, the processes other than banking browser and its children are seriously limited in connectivity.\u00a0<\/p>\n<ul>\n<li>Signed non-banking processes can only connect to safe IPs. The unrated IPs will be blocked.<\/li>\n<li>Unsigned processes are disconnected on IP level<\/li>\n<\/ul>\n<p>If an application is being blocked by Connection Control, to resolve the issue, you need to ensure that the blocked application&#39;s binaries are digitally signed.\u00a0<\/p>\n<p>If you do not know which file exactly is getting blocked by Elements Endpoint Protection Connection Control, you can view the detection from <b>Security Events<\/b> page in the Elements Security Center:<\/p>\n<ol>\n<li>Navigate to\u00a0<strong>Events <\/strong>&gt;\u00a0<b>Security events\u00a0<\/b>page<\/li>\n<li>Click on the filter icon on the right side of the page title<\/li>\n<li>Select as <b>Filter: Source<\/b>, and as <b>Value: Connection control\u00a0<\/b><\/li>\n<\/ol>\n<p>From the results you can now easily view all Connection control events. Click on the arrow on the left side of the detection to view more details.\u00a0<\/p>\n<p>As a workaround, you can exclude the software executable or the software installation folder from all security features, so that it will not be blocked by Connection Control when it is active.<\/p>\n<p>You can do this in the Elements Security Center:<\/p>\n<ol>\n<li>Navigate to\u00a0<strong>Security Configurations\u00a0<\/strong>&gt;\u00a0<b>Profiles\u00a0<\/b>page<\/li>\n<li>Select the profile that is in use on your devices\u00a0<\/li>\n<li>Go to the <strong>Scanning<\/strong><b>\u00a0settings <\/b>page<\/li>\n<li>Scroll down to the\u00a0<b>Global exclusions from all security scans <\/b>and click\u00a0<b>Add exclusion<\/b><\/li>\n<li>Enter the either the full path of the application or the folder path to the application, for example:\n<ul>\n<li>Application path: C:\\Program Files (x86)\\Example\\ExampleApplication.exe<\/li>\n<li>Folder path:\u00a0C:\\Program Files (x86)\\Example\\<\/li>\n<\/ul>\n<\/li>\n<li>Click\u00a0<b>Save profile<\/b><\/li>\n<\/ol>\n<p>Once the profile has been saved and published, it will be taken into use by the devices in 5-15 seconds.\u00a0<\/p>\n<p>In case excluding the application&#39;s executable or folder from all security features is not acceptable workaround, you need to whitelist the IP address, using the following setting through the Profile Editor: <strong>Browsing Protection &gt; Web Site exceptions &gt; Allowed sites<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Software connectivity is blocked once Connection Control session is activated. Why?<\/p>\n","protected":false},"template":"","support_article_product":[99],"class_list":["post-4468","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000013518","source_version":3,"source_system":"salesforce","source_date_updated":"2026-06-08 14:52:14","import_hash":"5a40e33da864e3fe85d2877764e851c666a3d905","vanilla_article_id":32529,"vanilla_url":"https:\/\/community.withsecure.com\/en\/kb\/articles\/32529-a-softwares-network-connectivity-is-blocked-once-elements-endpoint-protection-connection-control-session-has-been-activated","vanilla_kb_id":30,"vanilla_category_id":102,"machine_translated":false,"reactions_helpful_yes":0,"reactions_helpful_no":0},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article\/4468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=4468"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article_product?post=4468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}