{"id":7999,"date":"2026-10-16T14:55:39","date_gmt":"2026-10-16T11:55:39","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=support_article&#038;p=7999"},"modified":"2026-10-16T14:55:39","modified_gmt":"2026-10-16T11:55:39","slug":"a-service-or-website-is-being-blocked-when-elements-endpoint-protection-connection-control-is-active","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/en\/support-articles\/a-service-or-website-is-being-blocked-when-elements-endpoint-protection-connection-control-is-active\/","title":{"rendered":"A service or website is being blocked when Elements Endpoint Protection Connection Control is active"},"content":{"rendered":"<h3>Issue:<\/h3>\n<p>After opening a banking website, other services or websites are being blocked when Elements Endpoint Protection Connection Control feature is active. How to allow a site so that is can be accessed when Connection Control is active? How to find out the blocked URL is no &quot;block page&quot; is shown to the user?\u00a0<\/p>\n<h3>Resolution:<\/h3>\n<p>The behavior is expected if a Connection Control has been triggered prior opening the websites. Connection Control is also known as &quot;Banking Protection&quot;. It is the feature which activates when a user enters a banking site. When Connection Control is active, the browser only allows the user to visit trusted websites.\u00a0<\/p>\n<p>The Connection Control will block access to other URL and in order for users to continue to other websites, the address needs to be added as trusted. A local user can from the Elements Agent local settings add the blocked website as trusted if the user has local admin rights and it has been allowed from the Elements profile.<\/p>\n<p>An Elements portal administrator can add the website as trusted. You can add the website URL address to the allowed sites list in the profile used be the devices by following these steps:<\/p>\n<ol>\n<li>Log in to the Elements Security Center:\u00a0<a href=\"https:\/\/withsecure.vanillacommunities.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Felements.f-secure.com%2F\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/elements.w<\/a><a href=\"https:\/\/withsecure.vanillacommunities.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Felements.withsecure.com\" target=\"_blank\" rel=\"noopener noreferrer\">ithsecure.com<\/a><\/li>\n<li>Open the\u00a0<strong>Security Configurations\u00a0<\/strong>section from the menu on the left<\/li>\n<li>Go to the\u00a0<b>Profiles\u00a0<\/b>page<\/li>\n<li>Click on the profile you want to edit<\/li>\n<li>Go to the\u00a0<b>Browsing Protection\u00a0<\/b>settings page<\/li>\n<li>Scroll down to the\u00a0<b>Web site exceptions<\/b>\u00a0section and\u00a0<b>enable<\/b>\u00a0it<\/li>\n<li>In the <strong>Allowed s<\/strong><b>ites<\/b> section, click\u00a0<b>Add sites<\/b><\/li>\n<li>Enter the site address which you want to allow<\/li>\n<li>Click\u00a0<b>Save profile<\/b><\/li>\n<\/ol>\n<p>Once the profile has been saved and published, all devices using the profile will be able to go to the allowed site even if Connection Control is activated.<\/p>\n<p>\u00a0<\/p>\n<p>If the access to a website or service is blocked by Connection Control in a way that no block page is shown to the user telling which URL was blocked, the easiest way to identify the blocked address is to create a test profile with the \u201cInclude the blocked URLs in all security events\u201d setting enabled, so that the blocked address is shown on the Events &gt; Security Events page in the Elements portal.<\/p>\n<p>Then assign this profile to one device and reproduce the issue on that device. You can then check the blocked address on the Events &gt; Security Events page in the Elements portal.<\/p>\n<p dir=\"ltr\">Here is how you can clone your current profile and modify it so that the clone has \u201cInclude the blocked URLs in all security events\u201d enabled:<\/p>\n<ol dir=\"ltr\">\n<li>Log in to the Elements Security Center portal<\/li>\n<li>Navigate to the <strong>Security Configurations &gt; Profiles<\/strong> page<\/li>\n<li>Click on the <strong>three dots<\/strong> on the right side of your current profile and select Clone<\/li>\n<li>Go to the <strong>Browsing protection<\/strong> settings page<\/li>\n<li>In Common settings, enable<strong> Include the blocked URLs in all security events<\/strong><\/li>\n<li>Click <strong>Clone profile<\/strong><\/li>\n<\/ol>\n<p dir=\"ltr\"><strong>Note:<\/strong> Make sure that your current exception rules are retained in the clone.<\/p>\n<p dir=\"ltr\">Now the profile can be assigned to the device on which the issue will be reproduced:<\/p>\n<ol dir=\"ltr\">\n<li>Navigate to the <strong>Environment &gt; Devices<\/strong> page<\/li>\n<li>Select the device (a menu will appear)<\/li>\n<li>Click <strong>Assign profile<\/strong> and select the cloned profile<\/li>\n<\/ol>\n<p dir=\"ltr\">Now that the device is using the cloned profile with the include URLs setting enabled, you can reproduce the issue on the test device.<\/p>\n<p dir=\"ltr\">After that, you can check the alerts for that device on the <strong>Events &gt; Security Events<\/strong> page in the Elements portal, where the source is <strong>Connection Control<\/strong>. Check the address of the blocked page and create an exception rule for it in the <strong>Allowed sites<\/strong> list, found on the profile\u2019s <strong>Browsing protection<\/strong> page.<\/p>\n<p>Another workaround for the local user is to simply deactivate\u00a0the Connection Control immediately after it has been activated after going to a bank page. The local user can to this by either closing the banking website first or to end the Connection Control session (green border \/ frames around the screen with check mark sign at the top of the screen).<\/p>\n<p>Note: The is no setting to stop Connection Control from triggering on a web site that has been marked as a banking page.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Other websites being blocked when Connection Control is active<\/p>\n","protected":false},"template":"","support_article_product":[99],"class_list":["post-7999","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000014644","source_version":1,"source_system":"salesforce","source_date_updated":"2026-10-16 11:55:39","import_hash":"1420588e2d4dd2dbd2f887766e44bdc1da2e5319","vanilla_article_id":"","vanilla_url":"","vanilla_kb_id":"","vanilla_category_id":"","machine_translated":false,"reactions_helpful_yes":"","reactions_helpful_no":""},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article\/7999","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=7999"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article_product?post=7999"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}