{ "product_webhelp-latest-en.json": { "title": "title_product_webhelp_000001_6F98FAF", "title_product_webhelp_000001_6F98FAF": "Linux Protection ", "shortdesc": "shortdesc_product_webhelp_000003_2186E68", "shortdesc_product_webhelp_000003_2186E68": "This documentation provides instructions and information on using the product. ", "content.p_product_webhelp_000008_D9930A8": "Download the Linux Security 64 administrator's guide (PDF).", "content.dt_product_webhelp_00000C_0FDA7FB": "Other material", "content.dd_product_webhelp_00000D_435D3C9": "To view the release notes for the latest version of the product (available in English only), see the Linux Security 64 change log.", "desc": [ "content.p_product_webhelp_000008_D9930A8", { "dl.dl_product_webhelp_00000A_F15E680": [ { "dlentry.dlentry_product_webhelp_00000B_ADDE9AE": [ "content.dt_product_webhelp_00000C_0FDA7FB", "content.dd_product_webhelp_00000D_435D3C9" ] } ] } ] }, "welcome-latest-en.json": { "title": "title_welcome_000001_88AB559C", "title_welcome_000001_88AB559C": "Introduction ", "shortdesc": "shortdesc_welcome_000002_2B4808CA", "shortdesc_welcome_000002_2B4808CA": "This product provides an integrated, out-of-the-box security solution with strong real-time protection against viruses and potentially unwanted applications, and it also includes host intrusion prevention (HIPS) functionality that provides protection against unauthorized system modifications, as well as userspace and kernel rootkits. ", "content.p_welcome_00000C_E8067B48": "Computer viruses are one of the most harmful threats to the security of data on computers. While some viruses are harmless pranks, other viruses can destroy data and pose a real threat.", "content.p_welcome_00000D_D0D1DF3E": "The solution can be deployed and managed using WithSecure Policy Manager. It is also possible to run Linux Security 64 without a connection to Policy Manager, in which case you can use command line tools to manage the product settings.", "content.note_welcome_000011_89DF7519": "Note: Compared to previous versions, Linux Security 64 no longer includes a separate web user interface.", "desc": [ "content.p_welcome_00000C_E8067B48", "content.p_welcome_00000D_D0D1DF3E", "content.note_welcome_000011_89DF7519" ] }, "sys_reqs-latest-en.json": { "title": "title_sys_reqs_000001_6D9CD6D5", "title_sys_reqs_000001_6D9CD6D5": "System requirements", "shortdesc": "shortdesc_sys_reqs_000002_D76E2344", "shortdesc_sys_reqs_000002_D76E2344": "This section contains important information about the product. ", "content.p_sys_reqs_00000B_376A1B76": "We strongly recommend that you read the entire document before you start using the product.", "content.dt_sys_reqs_00000E_9BE66847": "Supported platforms", "content.dd_sys_reqs_00000F_2715FDE1": "", "content.note_sys_reqs_000010_6F8B834F": "Note: WithSecure supports only operating systems that are currently supported by their vendor. Learn more about WithSecure’s operating system support policies at Product updates and supported versions. If you are interested in long-term support for a platform that vendors no longer support, contact your sales representative.
", "content.dd_p_sys_reqs_000013_CD6EC7B0": "The following 64-bit (AMD64/EM64T) distributions are supported:
", "choice.choice_sys_reqs_000015_203EB853": "AlmaLinux 8, 9, 10", "choice.choice_sys_reqs_000016_C36BF0EF": "Amazon Linux 2, 2023", "choice.choice_sys_reqs_000017_8C121C49": "Debian 11, 12, 13", "choice.choice_sys_reqs_000018_8B075A74": "Oracle Linux 8, 9, 10", "choice.choice_sys_reqs_000019_23C2844F": "RHEL 8, 9, 10", "choice.choice_sys_reqs_00001A_BC4AF45D": "Rocky Linux 8, 9, 10", "choice.choice_sys_reqs_00001B_A0977652": "SUSE Linux Enterprise Server 15 (Service Pack 6)", "choice.choice_sys_reqs_00001C_3C0C3130": "Ubuntu 20.04, 22.04, 24.04", "content.dd_p_sys_reqs_00001D_2F1C2025": "The following 64-bit (ARMv8/AArch64) distributions are supported:
", "choice.choice_sys_reqs_00001F_97AFB247": "AlmaLinux 9, 10", "choice.choice_sys_reqs_000021_F95F1A0B": "Amazon Linux 2023", "choice.choice_sys_reqs_000023_E650ACC8": "Debian 11, 12, 13", "choice.choice_sys_reqs_000025_08CA5AE8": "Oracle Linux 9, 10", "choice.choice_sys_reqs_000027_09028992": "Red Hat Enterprise Linux 9, 10", "choice.choice_sys_reqs_000029_63C0752B": "Rocky 9, 10", "choice.choice_sys_reqs_00002B_1584107B": "Ubuntu 22.04, 24.04", "content.note_sys_reqs_00002D_C898CD4C": "Note: All operating systems must have TLS 1.2 configured and enabled.
", "content.p_sys_reqs_00004A_59D50F48": "", "content.dt_sys_reqs_00002F_2745546C": "Support for SELinux", "content.dd_sys_reqs_000030_0CE7ADFF": "", "content.dd_p_sys_reqs_000031_E95CBB94": "The product supports Security-Enhanced Linux with the following distributions:
", "choice.choice_sys_reqs_000033_A9B1F28C": "AlmaLinux 8, 9, 10 *", "choice.choice_sys_reqs_000035_0F8CA9B6": "Debian 11, 12, 13 **", "choice.choice_sys_reqs_000037_0FC33750": "Oracle Linux 8, 9, 10 *", "choice.choice_sys_reqs_000039_DF39C4AC": "RHEL 8, 9, 10 *", "choice.choice_sys_reqs_00003B_C56F45C3": "Rocky Linux 8, 9, 10 *", "content.dd_p_sys_reqs_00003D_74AFB058": "* on systems running the \"targeted\" SELinux system policy
", "content.dd_p_sys_reqs_00003E_0DDDB701": "** the product is compatible with the \"default\" SELinux system policy
", "content.dd_p_sys_reqs_00003F_1E706AFC": "If the distribution is not supported, SELinux must be disabled.
", "content.note_sys_reqs_000040_FA18CA44": "Note: Major distribution upgrades when the product is installed on a host with SELinux enabled policies are not supported. We recommend uninstalling the product before upgrading the distribution and then reinstalling it on the upgraded system.
", "content.dt_sys_reqs_000042_A25CE7B2": "System requirements", "content.dd_sys_reqs_000043_81421F21": "", "choice.choice_sys_reqs_000045_437891F0": "Processor: 64-bit processor compatible with the distribution; two or more cores recommended", "choice.choice_sys_reqs_000046_8C8C6EE1": "Memory: 4 GB RAM", "choice.choice_sys_reqs_000047_8198F45C": "Disk space: At least 2 GB available (recommended)", "choice.choice_sys_reqs_000048_C85899C1": "Swap: Sufficient swap memory is highly recommended", "choice.choice_sys_reqs_000049_B9601BB0": "Internet connection: Required to use cloud-based detection", "desc": [ "content.p_sys_reqs_00000B_376A1B76", { "dl.dl_sys_reqs_00000C_160EA49F": [ { "dlentry.dlentry_sys_reqs_00000D_51C7453D": [ "content.dt_sys_reqs_00000E_9BE66847", "content.dd_sys_reqs_00000F_2715FDE1", "content.note_sys_reqs_000010_6F8B834F", "content.dd_p_sys_reqs_000013_CD6EC7B0", { "choices.ul_sys_reqs_000014_7F27112B": [ "choice.choice_sys_reqs_000015_203EB853", "choice.choice_sys_reqs_000016_C36BF0EF", "choice.choice_sys_reqs_000017_8C121C49", "choice.choice_sys_reqs_000018_8B075A74", "choice.choice_sys_reqs_000019_23C2844F", "choice.choice_sys_reqs_00001A_BC4AF45D", "choice.choice_sys_reqs_00001B_A0977652", "choice.choice_sys_reqs_00001C_3C0C3130" ] }, "content.dd_p_sys_reqs_00001D_2F1C2025", { "choices.ul_sys_reqs_00001E_59F37669": [ "choice.choice_sys_reqs_00001F_97AFB247", "choice.choice_sys_reqs_000021_F95F1A0B", "choice.choice_sys_reqs_000023_E650ACC8", "choice.choice_sys_reqs_000025_08CA5AE8", "choice.choice_sys_reqs_000027_09028992", "choice.choice_sys_reqs_000029_63C0752B", "choice.choice_sys_reqs_00002B_1584107B" ] }, "content.note_sys_reqs_00002D_C898CD4C", "content.p_sys_reqs_00004A_59D50F48" ] }, { "dlentry.dlentry_sys_reqs_00002E_CFFD751D": [ "content.dt_sys_reqs_00002F_2745546C", "content.dd_sys_reqs_000030_0CE7ADFF", "content.dd_p_sys_reqs_000031_E95CBB94", { "choices.ul_sys_reqs_000032_F04548FE": [ "choice.choice_sys_reqs_000033_A9B1F28C", "choice.choice_sys_reqs_000035_0F8CA9B6", "choice.choice_sys_reqs_000037_0FC33750", "choice.choice_sys_reqs_000039_DF39C4AC", "choice.choice_sys_reqs_00003B_C56F45C3" ] }, "content.dd_p_sys_reqs_00003D_74AFB058", "content.dd_p_sys_reqs_00003E_0DDDB701", "content.dd_p_sys_reqs_00003F_1E706AFC", "content.note_sys_reqs_000040_FA18CA44" ] }, { "dlentry.dlentry_sys_reqs_000041_88A1D8A2": [ "content.dt_sys_reqs_000042_A25CE7B2", "content.dd_sys_reqs_000043_81421F21", { "choices.ul_sys_reqs_000044_784A558B": [ "choice.choice_sys_reqs_000045_437891F0", "choice.choice_sys_reqs_000046_8C8C6EE1", "choice.choice_sys_reqs_000047_8198F45C", "choice.choice_sys_reqs_000048_C85899C1", "choice.choice_sys_reqs_000049_B9601BB0" ] } ] } ] } ] }, "how_product_works-latest-en.json": { "title": "title_how_product_works_000001_8A14B", "title_how_product_works_000001_8A14B": "How the product works ", "shortdesc": "shortdesc_how_product_works_000002_4A052", "shortdesc_how_product_works_000002_4A052": "The product detects and prevents intrusions and protects against malware. ", "content.p_how_product_works_00000B_82572": "When user downloads a file from the Internet, for example by clicking a link in an email message, the file is scanned when the user tries to open it. If the file is infected, the product protects the system against the malware.", "step.step_how_product_works_00000D_A22A2": "Real-time scanning gives you continuous protection against viruses and potentially unwanted applications as files are opened, copied, and downloaded from the Web. Real-time scanning functions transparently in the background, looking for viruses whenever you access files on the hard disk, removable media, or network drives. If you try to access an infected file, the real-time protection automatically stops the virus from executing.", "step.step_how_product_works_000010_D34D3": "When the real-time scanning has been configured to scan a limited set of files, the manual scanning can be used to scan the full system or you can use the scheduled scanning to scan the full system at regular intervals.", "step.step_how_product_works_000013_6A265": "Automatic Updates keep the virus definitions always up-to-date. The virus definition databases are updated automatically after the product has been installed. The virus definitions updates are signed by WithSecure.", "content.p_how_product_works_000016_F7496": "The Host Intrusion Prevention System (HIPS) detects any malicious activity on the host, protecting the system on many levels.", "content.p_how_product_works_00001C_8BE5A": "You can create a baseline of the system files that you want to protect and prevent the use of any modified files for all users.", "step.step_how_product_works_000019_05181": "Integrity Checking protects the system against unauthorized modifications. It is based on the concept of a known good configuration - the product should be installed before the computer is connected to the network to guarantee that the system is in a known good configuration.", "step.step_how_product_works_00001D_4C28E": "If an attacker gains a shell access to the system and tries to add a user account to login to the system later, Host Intrusion Prevention System (HIPS) detects modified system files and alerts the administrator.", "step.step_how_product_works_000020_6B444": "If an attacker has gained an access to the system and tries to install a userspace rootkit by replacing various system utilities, HIPS detects modified system files and alerts the administrator.", "desc": [ "content.p_how_product_works_00000B_82572", { "steps.ul_how_product_works_00000C_DF178": [ "step.step_how_product_works_00000D_A22A2", "step.step_how_product_works_000010_D34D3", "step.step_how_product_works_000013_6A265" ] }, "content.p_how_product_works_000016_F7496", { "steps.ul_how_product_works_000018_6FC83": [ "step.step_how_product_works_000019_05181", "content.p_how_product_works_00001C_8BE5A", "step.step_how_product_works_00001D_4C28E", "step.step_how_product_works_000020_6B444" ] } ] }, "features_and_benefits-latest-en.json": { "title": "title_features_and_benefits_000023FD", "title_features_and_benefits_000023FD": "Key features and benefits ", "shortdesc": "shortdesc_features_and_benefits_0000C3C4", "shortdesc_features_and_benefits_0000C3C4": "The product offers superior protection against viruses and worms and is transparent to end-users. ", "content.p_features_and_benefits_0000CEA2": "The product scans files on a wide range of Linux-supported file systems.", "step.step_features_and_benefits_000060C5": "Scans files on any Linux-supported file system.", "step.step_features_and_benefits_0000E344": "Superior detection rate with multiple scanning engines.", "step.step_features_and_benefits_00005855": "A heuristic scanning engine can detect suspicious, potentially harmful files.", "step.step_features_and_benefits_00000B82": "The product can detect and categorize potentially unwanted applications.", "step.step_features_and_benefits_000021DA": "The product can be configured so that the users cannot bypass the protection.", "step.step_features_and_benefits_0000517D": "Files are scanned for viruses when they are opened or closed and before they are executed.", "step.step_features_and_benefits_0000DC05": "You can specify what files to scan, how to scan them, what action to take when malicious content is found and how to alert about the infections.", "step.step_features_and_benefits_0000F9B6": "Recursive scanning of archive files.", "step.step_features_and_benefits_0000AC8F": "Virus definition database updates are signed for security.", "content.p_features_and_benefits_000022BD": "The product works totally transparently to the end users.", "step.step_features_and_benefits_000014D9": "Virus definition databases are updated automatically without any need for end-user intervention.", "content.p_features_and_benefits_00009166": "Critical information of system files is stored and automatically checked before access is allowed.", "step.step_features_and_benefits_00000F0E": "The administrator can protect files against changes so that it is not possible to install, for example, a trojan version of a software.", "step.step_features_and_benefits_00008008": "An alert is sent to the administrator when a modified system file is found.", "content.p_features_and_benefits_00003AB6": "The default settings apply in most systems.", "step.step_features_and_benefits_0000A0B6": "Security policies are configured and distributed from one central location.", "content.p_features_and_benefits_000082B3": "The product has extensive monitoring and alerting functions that can be used to notify any administrator in the company network about any infected content that has been found.", "desc": [ "content.p_features_and_benefits_0000CEA2", { "steps.ul_features_and_benefits_00004766": [ "step.step_features_and_benefits_000060C5", "step.step_features_and_benefits_0000E344", "step.step_features_and_benefits_00005855", "step.step_features_and_benefits_00000B82", "step.step_features_and_benefits_000021DA", "step.step_features_and_benefits_0000517D", "step.step_features_and_benefits_0000DC05", "step.step_features_and_benefits_0000F9B6", "step.step_features_and_benefits_0000AC8F" ] }, "content.p_features_and_benefits_000022BD", { "steps.ul_features_and_benefits_00009ED3": [ "step.step_features_and_benefits_000014D9" ] }, "content.p_features_and_benefits_00009166", { "steps.ul_features_and_benefits_0000F6D5": [ "step.step_features_and_benefits_00000F0E", "step.step_features_and_benefits_00008008" ] }, "content.p_features_and_benefits_00003AB6", { "steps.ul_features_and_benefits_00003CF6": [ "step.step_features_and_benefits_0000A0B6" ] }, "content.p_features_and_benefits_000082B3" ] }, "what_is_harmful_content-latest-en.json": { "title": "title_what_is_harmful_content_00FA75", "title_what_is_harmful_content_00FA75": "What is harmful content", "shortdesc": "shortdesc_what_is_harmful_content_00202F", "shortdesc_what_is_harmful_content_00202F": "Harmful applications and files can try to damage your data or gain unauthorized access to your computer system to steal your private information. ", "content.p_what_is_harmful_content_003636": "This section describes common types of harmful content, including viruses, potentially unwanted applications, worms, trojans, backdoors, exploits, exploit kits, and rootkits. The following topics explain how each type can affect your computer or data.", "desc": [ "content.p_what_is_harmful_content_003636" ] }, "viruses-latest-en.json": { "title": "title_viruses_000001_F4E88979", "title_viruses_000001_F4E88979": "Viruses", "shortdesc": "shortdesc_viruses_000002_8744AFD8", "shortdesc_viruses_000002_8744AFD8": "A virus is usually a program that can attach itself to files and replicate itself repeatedly; it can alter and replace the contents of other files in a way that may damage the computer. ", "content.p_viruses_00000C_E536FF43": "A virus is a program that is normally installed on the computer without the user's knowledge. Once there, the virus tries to replicate itself. The virus:", "step.step_viruses_00000F_A7DEF71A": "uses some of the system resources", "step.step_viruses_000010_EF5100B8": "may alter or damage files on the computer", "step.step_viruses_000011_0D079CBC": "tries to use the computer to infect other computers", "step.step_viruses_000012_C762C492": "may allow the computer to be used for illegal purposes.", "desc": [ "content.p_viruses_00000C_E536FF43", { "steps.ul_viruses_00000E_83C8B5E0": [ "step.step_viruses_00000F_A7DEF71A", "step.step_viruses_000010_EF5100B8", "step.step_viruses_000011_0D079CBC", "step.step_viruses_000012_C762C492" ] } ] }, "potentially_unwanted-latest-en.json": { "title": "title_potentially_unwanted_000004BA5", "title_potentially_unwanted_000004BA5": "Potentially unwanted applications (PUA) and unwanted applications (UA)", "shortdesc": "shortdesc_potentially_unwanted_00000F918", "shortdesc_potentially_unwanted_00000F918": "'Potentially unwanted applications' have features that you may like or want. 'Unwanted applications' have features that can harm your device or data more seriously. ", "content.p_potentially_unwanted_000000F5E": "An application may be called an 'potentially unwanted' (PUA) if it:", "step.step_potentially_unwanted_00001A631": "Hurts your privacy or productivity - for example, exposes personal information or does things without your permission", "step.step_potentially_unwanted_0000135B2": "Uses too many of your device's resources - for example, takes up a lot of storage space or memory", "step.step_potentially_unwanted_00001FECD": "Makes your device or data less secure - for example, exposes you to unexpected content or other applications", "content.p_potentially_unwanted_00001D2F9": "The harm that these features can cause to your device or data can be from mild to serious. However, they are not dangerous enough to be called malware.", "content.p_potentially_unwanted_00001BE53": "If an application has features that cause serious harm, it is labeled as 'unwanted application' (UA). The product will treat such applications with more caution.", "content.p_potentially_unwanted_000016509": "The software will treat an application differently depending on whether it is a 'potentially unwanted' (PUA) or an 'unwanted application' (UA):", "step.step_potentially_unwanted_0000115BC": "A potentially unwanted application - The product stops the application from running. If you are sure that you trust the application, you can exclude it from scanning. To do this, you need to have administrative rights on the file to be excluded.", "step.step_potentially_unwanted_000011AFC": "An unwanted application - The product stops the application from running.", "desc": [ "content.p_potentially_unwanted_000000F5E", { "steps.ul_potentially_unwanted_00001AA08": [ "step.step_potentially_unwanted_00001A631", "step.step_potentially_unwanted_0000135B2", "step.step_potentially_unwanted_00001FECD" ] }, "content.p_potentially_unwanted_00001D2F9", "content.p_potentially_unwanted_00001BE53", "content.p_potentially_unwanted_000016509", { "steps.ul_potentially_unwanted_00001A992": [ "step.step_potentially_unwanted_0000115BC", "step.step_potentially_unwanted_000011AFC" ] } ] }, "worms-latest-en.json": { "title": "title_worms_000001_CFE8425E", "title_worms_000001_CFE8425E": "Worms", "shortdesc": "shortdesc_worms_000002_C796CA24", "shortdesc_worms_000002_C796CA24": "Worms are programs that send copies of themselves from one device to another over a network. Some worms also perform harmful actions on an affected device. ", "content.p_worms_00000C_2EC9302B": "Many worms are designed to appear attractive to a user. They may look like images, videos, applications or any other kind of useful program or file. The aim of the deception is to lure the user into installing the worm. Other worms are designed to be completely stealthy, as they exploit flaws in the device (or in programs installed on it) to install themselves without ever being noticed by the user.", "content.p_worms_00000D_43E21591": "Once installed, the worm uses the device's physical resources to create copies of itself, and then send those copies to any other devices it can reach over a network. If a large quantity of worm copies is being sent out, the device's performance may suffer. If many devices on a network are affected and sending out worm copies, the network itself may be disrupted. Some worms can also do more direct damage to an affected device, such as modifying files stored on it, installing other harmful applications or stealing data.", "content.p_worms_00000E_6F39A1C0": "Most worms only spread over one particular type of network. Some worms can spread over two or more types, though they are relatively rare. Usually, worms will try and spread over one of the following networks (though there are those that target less popular channels):", "step.step_worms_000010_586D2438": "Local networks", "step.step_worms_000011_48126244": "Email networks", "step.step_worms_000012_BAA307ED": "Social media sites", "step.step_worms_000013_A15E7D9D": "Peer-to-peer (P2P) connections", "step.step_worms_000014_88E11E11": "SMS or MMS messages", "desc": [ "content.p_worms_00000C_2EC9302B", "content.p_worms_00000D_43E21591", "content.p_worms_00000E_6F39A1C0", { "steps.ul_worms_00000F_DD2263A3": [ "step.step_worms_000010_586D2438", "step.step_worms_000011_48126244", "step.step_worms_000012_BAA307ED", "step.step_worms_000013_A15E7D9D", "step.step_worms_000014_88E11E11" ] } ] }, "trojans-latest-en.json": { "title": "title_trojans_000001_9643C867", "title_trojans_000001_9643C867": "Trojans", "shortdesc": "shortdesc_trojans_000002_0A20FA92", "shortdesc_trojans_000002_0A20FA92": "A trojan is a program that offers, or appears to offer, an attractive function or feature, but then quietly performs harmful actions in the background. ", "content.p_trojans_00000E_2271939D": "Named after the Trojan Horse of Greek legend, trojans are designed to appear attractive to a user. They may look like games, screensavers, application updates or any other kind of useful program or file. Some trojans will mimic or even outrightly copy popular or well-known programs to appear more trustworthy. The aim of the deception is to lure the user into installing the trojan.", "content.p_trojans_00000F_FC44EE53": "Once installed, trojans can also use 'decoys' to maintain the illusion that they are legitimate. For example, a trojan disguised as a screensaver application or a document file will display an image or a document. While the user is distracted by these decoys, the trojan can quietly perform other actions in the background.", "content.p_trojans_000010_62C43396": "Trojans will usually either make harmful changes to the device (such as deleting or encrypting files, or changing program settings) or steal confidential data stored on it. Trojans can be grouped by the actions they perform:", "step.step_trojans_000012_B6ED8258": "Trojan-downloader: connects to a remote site to download and install other programs", "step.step_trojans_000014_DF0E23AC": "Trojan-dropper: contains one or more additional programs, which it installs", "subchoice.choice_trojans_000019_E0B644CF": "Banking-trojan: A specialized trojan-pws that specifically looks for usernames and passwords for online banking portals", "step.step_trojans_000016_431C3433": "Trojan-pws: Steals passwords stored on the device or entered into a web browser", "step.step_trojans_00001B_26D110EB": "Trojan-spy: Monitors activity on the device and forwards the details to a remote site", "desc": [ "content.p_trojans_00000E_2271939D", "content.p_trojans_00000F_FC44EE53", "content.p_trojans_000010_62C43396", { "steps.ul_trojans_000011_8EFAC88E": [ "step.step_trojans_000012_B6ED8258", "step.step_trojans_000014_DF0E23AC", "step.step_trojans_000016_431C3433", { "subchoices.ul_trojans_000018_7B79DA2D": [ "subchoice.choice_trojans_000019_E0B644CF" ] }, "step.step_trojans_00001B_26D110EB" ] } ] }, "backdoors-latest-en.json": { "title": "title_backdoors_000001_EFA2BF59", "title_backdoors_000001_EFA2BF59": "Backdoors", "shortdesc": "shortdesc_backdoors_000002_C9B3637E", "shortdesc_backdoors_000002_C9B3637E": "Backdoors are features or specially made software that let someone bypass the security of a specific program, device, website, or service. Usually, they are used by attackers to get into a system or do something harmful without permission. ", "content.p_backdoors_00000B_5382F24E": "A feature in a program, device, website, or service can be considered a backdoor if its design or implementation introduces a security risk. For example, a hidden way for an administrator to access a website that always works with the same password could be considered a backdoor.", "content.p_backdoors_00000C_E49046DE": "Backdoor software takes advantage of weaknesses in the code of a targeted program, device, website, or service. These weaknesses could be mistakes in the code, vulnerabilities, or hidden features that are not meant to be used.", "content.p_backdoors_00000D_4969CB2E": "Backdoors are usually used by attackers to get into a system without permission or to do something harmful while getting around security features such as limits on who can access files or devices, and to bypass authentication and encryption.", "desc": [ "content.p_backdoors_00000B_5382F24E", "content.p_backdoors_00000C_E49046DE", "content.p_backdoors_00000D_4969CB2E" ] }, "exploits-latest-en.json": { "title": "title_exploits_000001_ED1E8D39", "title_exploits_000001_ED1E8D39": "Exploits", "shortdesc": "shortdesc_exploits_000002_CF00C81D", "shortdesc_exploits_000002_CF00C81D": "Exploits are objects or ways of taking advantage of a flaw in a software to make it behave in a way that it was not meant. This makes it possible for an attacker to cause harm to your computer or device. ", "content.p_exploits_00000D_81A3AD70": "An exploit can be either an object or a method. For example, a specially made software, a piece of code, or a string of characters are all objects whereas a specific order of running commands is a method.", "content.p_exploits_00000E_9F0B4032": "An exploit can be used to take advantage of a flaw or weak spot (also known as a vulnerability) in a software. Because each software is different, each exploit has to be made specifically for that software.", "content.p_exploits_000010_CFE51764": "There are several ways an attacker can use an exploit to harm your computer or device:", "step.step_exploits_000012_21852EF5": "Embedding it inside a hacked or specially made software - when you install and launch the software, the exploit is launched", "step.step_exploits_000013_030A35F0": "Embedding it inside a document that is sent as an email attachment - when you open the attached document, the exploit is launched", "step.step_exploits_000014_D88F6EAD": "Hosting it on a hacked or harmful website - when you visit the website, the exploit is launched", "content.p_exploits_000015_9A002641": "Launching the exploit makes the software behave in a strange way, such as making it crash, or changing the system's storage or memory. This makes it possible for someone to harm your device and data, such as stealing your information or getting access to restricted sections of the operating system.", "desc": [ "content.p_exploits_00000D_81A3AD70", "content.p_exploits_00000E_9F0B4032", "content.p_exploits_000010_CFE51764", { "steps.ul_exploits_000011_A52AC342": [ "step.step_exploits_000012_21852EF5", "step.step_exploits_000013_030A35F0", "step.step_exploits_000014_D88F6EAD" ] }, "content.p_exploits_000015_9A002641" ] }, "exploit_kits-latest-en.json": { "title": "title_exploit_kits_000001_BDA1D9D6", "title_exploit_kits_000001_BDA1D9D6": "Exploit kits", "shortdesc": "shortdesc_exploit_kits_000002_64014B39", "shortdesc_exploit_kits_000002_64014B39": "Exploit kits are toolkits used by attackers to manage exploits and deliver harmful programs to a vulnerable computer or device. ", "content.p_exploit_kits_00000E_944ED137": "An exploit kit contains an inventory of exploits, each of which can take advantage of a flaw (vulnerability) in a program, computer or device. The kit itself is usually hosted on a harmful or a hacked site, so that any computer or device that visits the site is exposed to its effects.", "content.p_exploit_kits_000011_E1C614FA": "When a new computer or device connects to the booby-trapped site, the exploit kit probes it for any flaws that can be affected by an exploit in the kit's inventory. If one is found, the kit launches the exploit to take advantage of that vulnerability.", "content.p_exploit_kits_000012_7154202D": "After the computer or device is compromised, the exploit kit can deliver a payload to it. This is usually another harmful program that is installed and launched on the computer or device, which in turn performs other unauthorized actions.", "content.p_exploit_kits_000014_1E819B9A": "Exploit kits are modular. Their controllers can add or remove exploits and payloads from the toolkit.", "desc": [ "content.p_exploit_kits_00000E_944ED137", "content.p_exploit_kits_000011_E1C614FA", "content.p_exploit_kits_000012_7154202D", "content.p_exploit_kits_000014_1E819B9A" ] }, "rootkits-latest-en.json": { "title": "title_rootkits_000001_85C023C7", "title_rootkits_000001_85C023C7": "Rootkits", "shortdesc": "shortdesc_rootkits_000002_3F2FA71F", "shortdesc_rootkits_000002_3F2FA71F": "Rootkits are programs that make other malware difficult to find. ", "content.p_rootkits_00000D_12D48915": "Rootkit programs subvert the control of the operating system from its legitimate functions. Usually, a rootkit tries to obscure its installation and prevent its removal by concealing running processes, files or system data from the operating system. In general, rootkits do this to hide malicious activity on the computer.", "content.title_rootkits_00000E_A89271DC": "Protection against userspace rootkits ", "content.p_rootkits_00000F_20A41167": "If an attacker has gained an access to the system and tries to install a userspace rootkit by replacing various system utilities, HIPS detects modified system files and alerts the administrator.", "desc": [ "content.p_rootkits_00000D_12D48915", "content.title_rootkits_00000E_A89271DC", "content.p_rootkits_00000F_20A41167" ] }, "installation-latest-en.json": { "title": "title_installation_000001_748F0A9A", "title_installation_000001_748F0A9A": "Installation", "shortdesc": "shortdesc_installation_000002_23A0536A", "shortdesc_installation_000002_23A0536A": "This section contains instructions for installing the product. ", "content.p_installation_00000B_DB83195A": "Installing Linux Security 64 requires first creating an installation package in Policy Manager, and then deploying it on each target computer.", "desc": [ "content.p_installation_00000B_DB83195A" ] }, "creating_installation_package-2-latest-en.json": { "title": "title_creating_installation_pa_0E188", "title_creating_installation_pa_0E188": "Creating the installation package", "shortdesc": "shortdesc_creating_installation_pa_0CBEE", "shortdesc_creating_installation_pa_0CBEE": "Follow the instructions given here to create an installation package for deployment on the target computers. ", "content.note_creating_installation_pa_06E67": "Note: To install Linux Security 64, you need to use Policy Manager to configure and create the installation package. For more information on using Policy Manager, see the Policy Manager administrator's guide.", "content.note_creating_installation_pa_06E7D": "Note: Starting from Policy Manager version 15.21, you can bundle the policy with the installer so that initial values for settings, including the pinned version number are taken from Policy Manager. Configure the policy on the host or root level in Policy Manager before you start the process and use the fsls64-4.0.*.jar installer.", "content.note_creating_installation_pa_0232E": "Note: If you use a pinned version of the product, each pinnable product version is supported for one year from the release date of the subsequent pinnable version in general. Exceptions may be outlined in the change log of the pinnable version release. The pinned version of the product still requires an online internet connection.", "content.p_creating_installation_pa_03B44": "This opens the Installation packages window.", "step.step_creating_installation_pa_0604A": "In Policy Manager Console, select Tools > Installation packages from the menu.", "step.step_creating_installation_pa_0BAFD": "Select Import.", "step.step_creating_installation_pa_0652B": "Select either wsls64-5.0.14.amd64.jar or wsls64-5.0.14.arm64.jar depending on the architecture of the target host, and then select Import.", "step.step_creating_installation_pa_0C89A": "Select the imported installation package in the packages list and select Export.", "content.p_creating_installation_pa_03D52": "A Remote Installation Wizard window opens.", "step.step_creating_installation_pa_05495": "Enter a name and select a folder for the exported zip file.", "step.step_creating_installation_pa_02898": "Select Next.", "step.step_creating_installation_pa_0E0CB": "Choose either No initial policy if you do not want to bundle the policy with the installer or select the policy domain or host for the initial policy that is bundled with the installer.", "step.step_creating_installation_pa_01783": "Enter your license keycode for the product, then click Next.", "content.p_creating_installation_pa_0CD9F": "If the installation package is for computers that are centrally managed through Policy Manager, enter the address for your Policy Manager Server and modify the ports to use for both HTTP and HTTPS communication if necessary.", "step.step_creating_installation_pa_056C6": "Enter the Policy Manager Server address.", "step.step_creating_installation_pa_0DD06": "Select Finish.", "content.p_creating_installation_pa_08533": "If you bundle the policy with the installer and export the installer in stand-alone mode, the policy is applied as the initial policy. If you export the installer in the managed mode, Policy Manager will override the initial policy when the host connects to it. To prevent this, use the following command when installing the product:", "content.p_creating_installation_pa_023AD": "bash ./linuxsecurity-pm-installer/linuxsecurity-installer --product-version=[pinned version]
", "content.p_creating_installation_pa_0F1BD": "This prevents overriding the pinned version setting, but does not prevent overriding the full policy.", "desc": [ "content.note_creating_installation_pa_06E67", "content.note_creating_installation_pa_06E7D", "content.note_creating_installation_pa_0232E", { "steps.steps_creating_installation_pa_0B397": [ "step.step_creating_installation_pa_0604A", "content.p_creating_installation_pa_03B44", "step.step_creating_installation_pa_0BAFD", "step.step_creating_installation_pa_0652B", "step.step_creating_installation_pa_0C89A", "step.step_creating_installation_pa_05495", "content.p_creating_installation_pa_03D52", "step.step_creating_installation_pa_02898", "step.step_creating_installation_pa_0E0CB", "step.step_creating_installation_pa_01783", "step.step_creating_installation_pa_056C6", "content.p_creating_installation_pa_0CD9F", "step.step_creating_installation_pa_0DD06" ] }, "content.p_creating_installation_pa_08533", "content.p_creating_installation_pa_023AD", "content.p_creating_installation_pa_0F1BD" ] }, "creating_content_package_for_isolated_environments-latest-en.json": { "title": "title_creating_content_package_0BA3F", "title_creating_content_package_0BA3F": "Creating the content package for isolated environments", "shortdesc": "shortdesc_creating_content_package_04985", "shortdesc_creating_content_package_04985": "To install Linux Security 64 in an isolated environment with limited network connectivity, you need to prepare an additional content package for the product installer. ", "content.note_creating_content_package_04AED": "Note: To generate the content package, use a computer that has network access to F-Secure servers and either Policy Manager Server (Linux or Windows) installed or a separately available fspm-definitions-update-tool downloaded (Linux).", "content.p_creating_content_package_0001F": "The installation package that you create using Policy Manager Console installs the latest available version of the product by downloading it over the network. Skip these steps if you are only deploying the installation package to hosts that can connect to the network to download data during installation.", "content.p_creating_content_package_0CBDB": "The additional package for isolated hosts provides the necessary components that are usually downloaded from the network during installation. Use this with the installation package on each isolated host to which you deploy the product.", "content.p_creating_content_package_053F6": "Follow these instructions to create the content package.", "content.note_creating_content_package_05FD2": "Note: These instructions are for Linux. You can find the command path and the syntax for Windows in the Policy Manager administrator's guide.", "subchoice.choice_creating_content_package_0ABDC": "If you are using the fspm-definitions-update-tool tool from Policy Manager Server 16, then you are already at a new enough version.", "subchoice.choice_creating_content_package_00280": "If you are not using Policy Manager 16, or are unsure about the version of the fspm-definitions-update-tool tool, download the latest program version from the product support page.", "content.p_creating_content_package_0D6EB": "", "step.step_creating_content_package_0BCDD": "Make sure that you have the current version of fspm-definitions-update-tool.", "step.step_creating_content_package_005BA": "Open a command line.", "content.p_creating_content_package_03765": "Make sure that you use an existing directory. In the following examples, replace <DIR> with the path to that directory.", "step.step_creating_content_package_05459": "Select the directory where you want to extract the Policy Manager definitions update tool.", "content.p_creating_content_package_0BBC3": "/opt/f-secure/fspms/bin/prepare-fspm-definitions-update-tool <DIR>", "subchoice.choice_creating_content_package_074E7": "If you have Policy Manager Server, run the following command:", "content.p_creating_content_package_047AC": "tar -C <DIR> -xf /PATH/TO/fspm-definitions-update-tool.tar.gz", "subchoice.choice_creating_content_package_0AC8B": "If you have downloaded the fspm-definitions-update-tool.tar.gz file, run the following command:", "step.step_creating_content_package_06878": "Extract the definitions update tool.", "step.step_creating_content_package_0E755": "Make sure that you have the latest version of the channels.json file. If you are unsure about the version, download the latest channels.json file.", "content.note_creating_content_package_00A66": "Note: Make sure to keep the channels.json file name when copying. You may safely replace any previous version of the file which may already exist in the directory.", "step.step_creating_content_package_06B54": "Copy the file into the <DIR>/fspm-definitions-update-tool/conf/ directory.", "content.p_creating_content_package_01708": "rm -rf <DIR>/fspm-definitions-update-tool/data/", "step.step_creating_content_package_06938": "Make sure that the <DIR>/fspm-definitions-update-tool/data/ directory is empty or does not exist by running the following command:", "content.p_creating_content_package_0D5BC": "<DIR>/fspm-definitions-update-tool/fspm-definitions-update-tool", "content.p_creating_content_package_0BBD7": "This command will create two ZIP files, f-secure-updates.zip and withsecure-updates.zip, under the <DIR>/fspm-definitions-update-tool/data/ directory. Use the <DIR>/fspm-definitions-update-tool/data/withsecure-updates.zip for installing the product (for more details, see Deploying the installation package). The f-secure-updates.zip is not needed.", "step.step_creating_content_package_0A4AC": "Run the following command to create the content package:", "content.note_creating_content_package_0B95F": "Note: To refresh the content package later using the latest available content to make new installations of the product, repeat steps 7 and 8. An empty data directory is required to create packages that are valid for use with Linux Security. To use content packages for updating existing installations, see Updating the product manually using an update archive.", "desc": [ "content.note_creating_content_package_04AED", "content.p_creating_content_package_0001F", "content.p_creating_content_package_0CBDB", "content.p_creating_content_package_053F6", "content.note_creating_content_package_05FD2", { "steps.steps_creating_content_package_024EE": [ "step.step_creating_content_package_0BCDD", "content.p_creating_content_package_0D6EB", { "subchoices.ul_creating_content_package_008B9": [ "subchoice.choice_creating_content_package_0ABDC", "subchoice.choice_creating_content_package_00280" ] }, "step.step_creating_content_package_005BA", "step.step_creating_content_package_05459", "content.p_creating_content_package_03765", "step.step_creating_content_package_06878", { "subchoices.choices_creating_content_package_0FA9A": [ "subchoice.choice_creating_content_package_074E7", "content.p_creating_content_package_0BBC3", "subchoice.choice_creating_content_package_0AC8B", "content.p_creating_content_package_047AC" ] }, "step.step_creating_content_package_0E755", "step.step_creating_content_package_06B54", "content.note_creating_content_package_00A66", "step.step_creating_content_package_06938", "content.p_creating_content_package_01708", "step.step_creating_content_package_0A4AC", "content.p_creating_content_package_0D5BC", "content.p_creating_content_package_0BBD7" ] }, "content.note_creating_content_package_0B95F" ], "related": [ "updating_manually_using_update_archive-latest-en", "deploying_installation_package-latest-en" ] }, "deploying_installation_package-latest-en.json": { "title": "title_deploying_installation_p_0A9D8", "title_deploying_installation_p_0A9D8": "Deploying the installation package ", "shortdesc": "shortdesc_deploying_installation_p_06578", "shortdesc_deploying_installation_p_06578": "Once you have created the installation package, follow these instructions to deploy it on the target computers. ", "content.p_deploying_installation_p_01935": "For any isolated hosts, also copy the zip content package that includes the components that are normally downloaded during installation.", "step.step_deploying_installation_p_0F321": "Copy the exported zip installation package to the Linux hosts in your network.", "substep.substep_deploying_installation_p_00B96": "Log in to the Linux host as root.", "substep.substep_deploying_installation_p_0A756": "For checking that the required dependencies are installed, see System requirements.", "substep.substep_deploying_installation_p_0E5B0": "Extract the installation package that you exported from Policy Manager Console to a fresh, empty directory.", "content.p_deploying_installation_p_0536A": "To install the latest version of the product over the network, run: bash linuxsecurity-pm-installer/linuxsecurity-installer This command installs the latest version of the product and configures it to be updated automatically.", "substep.substep_deploying_installation_p_09571": "If the host can connect to backend systems, run the installation command.", "content.p_deploying_installation_p_06D25": "To install and keep using a specific version of the product without updating it automatically, use the --product-version option to indicate the version that you want in the installer command.", "substep.substep_deploying_installation_p_01B4F": "If you must keep a specific product version, add the product version option.", "content.p_deploying_installation_p_0461D": "To install the product on an isolated host using a content package (withsecure-updates.zip), run: bash linuxsecurity-pm-installer/linuxsecurity-installer --package=/PATH/TO/withsecure-updates.zip --automatic-updates=none On an isolated host, the product does not download or install any product or malware definition database updates automatically. If you want to install the product using a content package but still let the product fetch updates automatically over the network, remove the --automatic-updates=none option from the linuxsecurity-installer command.", "substep.substep_deploying_installation_p_0469A": "If the host is isolated, run the installation command with a content package.", "step.step_deploying_installation_p_07CEA": "Install the product on each host:", "content.p_deploying_installation_p_02CF2": "After you have installed the product, configure malware scanning and integrity checking settings to take them into use.", "desc": [ { "steps.steps_deploying_installation_p_0DE8E": [ "step.step_deploying_installation_p_0F321", "content.p_deploying_installation_p_01935", "step.step_deploying_installation_p_07CEA", { "substeps.substepsalpha_deployingalpha_installationalpha_palpha_0E878": [ "substep.substep_deploying_installation_p_00B96", "substep.substep_deploying_installation_p_0A756", "substep.substep_deploying_installation_p_0E5B0", "substep.substep_deploying_installation_p_09571", "content.p_deploying_installation_p_0536A", "substep.substep_deploying_installation_p_01B4F", "content.p_deploying_installation_p_06D25", "substep.substep_deploying_installation_p_0469A", "content.p_deploying_installation_p_0461D" ] } ] }, "content.p_deploying_installation_p_02CF2" ], "related": [ "using_http_proxies-latest-en", "task_activating_via_connector_proxy-latest-en" ] }, "delaying_product_activation-latest-en.json": { "title": "title_delaying_product_activat_0FE9E", "title_delaying_product_activat_0FE9E": "Delaying product activation", "shortdesc": "shortdesc_delaying_product_activat_0A329", "shortdesc_delaying_product_activat_0A329": "Instead of activating the product immediately during installation or deployment, you can set the product activation to take place the next time the computer is turned on. ", "content.p_delaying_product_activat_0002F": "For example, you may want to delay activation if you are installing the product within a virtual machine template that is used for multiple virtual machine instances. In such a setup, you could install the product in the template and schedule activation for the next time the virtual machine is started. This approach allows individual virtual machines to be activated separately as they are taken into use.", "content.p_delaying_product_activat_0622D": "For example: bash linuxsecurity-pm-installer/linuxsecurity-installer --next-boot", "content.p_delaying_product_activat_0827B": "This sets Linux Security 64 to be activated when the computer is next started.", "step.step_delaying_product_activat_07040": "To set activation to take place the next time the computer starts up, use the --next-boot argument in the installer command.", "step.step_delaying_product_activat_03D07": "The product activates automatically when the system is rebooted. No user interaction is necessary during this activation process.", "desc": [ "content.p_delaying_product_activat_0002F", { "steps.steps_delaying_product_activat_09387": [ "step.step_delaying_product_activat_07040", "content.p_delaying_product_activat_0622D", "content.p_delaying_product_activat_0827B", "step.step_delaying_product_activat_03D07" ] } ] }, "migrating_ls64_to_elements-latest-en.json": { "title": "title_migrating_ls64_to_elemen_056ED", "title_migrating_ls64_to_elemen_056ED": "Migrating from Business Suite to WithSecure Elements", "shortdesc": "shortdesc_migrating_ls64_to_elemen_02257", "shortdesc_migrating_ls64_to_elemen_02257": "You can migrate Policy Manager-managed Linux Security 64 systems to WithSecure Elements using the elements-migrator command.", "content.note_migrating_ls64_to_elemen_09017": "Note: A WithSecure Elements subscription key is required for this migration.", "desc": [ "content.note_migrating_ls64_to_elemen_09017" ] }, "inspecting_migration_status-latest-en.json": { "title": "title_inspecting_migration_sta_0E47C", "title_inspecting_migration_sta_0E47C": "Inspecting the migration status", "shortdesc": "shortdesc_inspecting_migration_sta_0C498", "shortdesc_inspecting_migration_sta_0C498": "Instructions for inspecting the migration status.", "content.p_inspecting_migration_sta_054D1": "To check the migration status of WithSecure Elements:", "content.p_inspecting_migration_sta_06D71": "/opt/f-secure/linuxsecurity/bin/elements-migrator status", "step.step_inspecting_migration_sta_0B0F7": "Run the following bash command:", "desc": [ "content.p_inspecting_migration_sta_054D1", { "steps.steps_inspecting_migration_sta_0387A": [ "step.step_inspecting_migration_sta_0B0F7", "content.p_inspecting_migration_sta_06D71" ] } ] }, "migrating_ls64_to_withsecure_elements-latest-en.json": { "title": "title_migrating_ls64_to_wse_00002E1E", "title_migrating_ls64_to_wse_00002E1E": "Migrating Linux Security 64 to WithSecure Elements", "shortdesc": "shortdesc_migrating_ls64_to_wse_00002DD0", "shortdesc_migrating_ls64_to_wse_00002DD0": "Instructions for migrating Policy Manager-managed Linux Security 64 to WithSecure Elements.", "content.p_migrating_ls64_to_wse_00005839": "To migrate Linux Security 64:", "content.p_migrating_ls64_to_wse_0000DEE0": "/opt/f-secure/linuxsecurity/bin/elements-migrator migrate SUBSCRIPTION-KEY", "step.step_migrating_ls64_to_wse_00009C3A": "Run the following bash command:", "step.step_migrating_ls64_to_wse_000007CF": "Replace SUBSCRIPTION-KEY with your actual WithSecure Elements subscription key.", "desc": [ "content.p_migrating_ls64_to_wse_00005839", { "steps.steps_migrating_ls64_to_wse_00005177": [ "step.step_migrating_ls64_to_wse_00009C3A", "content.p_migrating_ls64_to_wse_0000DEE0", "step.step_migrating_ls64_to_wse_000007CF" ] } ] }, "associating_migrated_devies_with_a_profile-latest-en.json": { "title": "title_assigning_profiles_000001_0D8F", "title_assigning_profiles_000001_0D8F": "Assigning profile to migrated devices", "shortdesc": "shortdesc_assigning_profiles_000002_376D", "shortdesc_assigning_profiles_000002_376D": "You can automatically assign a specific profile to migrated devices.", "content.p_assigning_profiles_00000C_967B": "To do that, you need to specify the profile ID in the migration command using the --profile-id option.", "content.p_assigning_profiles_000011_14DA": "/opt/f-secure/linuxsecurity/bin/elements-migrator migrate --profile-id PROFILE-ID SUBSCRIPTION-KEY
", "step.step_assigning_profiles_00000F_F4FC": "To assign a profile, run the following bash command:", "step.step_assigning_profiles_000013_FAB5": "Replace PROFILE-ID with the numeric ID of the target Elements profile.", "step.step_assigning_profiles_000015_58BA": "Replace SUBSCRIPTION-KEY with your valid subscription key.", "desc": [ "content.p_assigning_profiles_00000C_967B", { "steps.steps_assigning_profiles_00000E_5322": [ "step.step_assigning_profiles_00000F_F4FC", "content.p_assigning_profiles_000011_14DA", "step.step_assigning_profiles_000013_FAB5", "step.step_assigning_profiles_000015_58BA" ] } ] }, "uninstalling_product-latest-en.json": { "title": "title_uninstalling_product_00000691E", "title_uninstalling_product_00000691E": "Uninstalling the product", "shortdesc": "shortdesc_uninstalling_product_00000057B", "shortdesc_uninstalling_product_00000057B": "You can uninstall the product from the command line. ", "step.step_uninstalling_product_00000B4D6": "Log in to the Linux host as root.", "content.note_uninstalling_product_000010DB2": "Note: The command that is given here is for the current version of the product. If you are uninstalling an older version, use f-secure-linuxsecurity as the package name instead.", "subchoice.choice_uninstalling_product_000017603": "RHEL-based distributions: rpm -e linuxsecurity-installer", "subchoice.choice_uninstalling_product_00001CA0C": "Debian-based distributions: dpkg -r linuxsecurity-installer", "content.p_uninstalling_product_0000126AC": "If the package removal command fails and Policy Manager Server is not installed on the same machine, run the following command: rm -rf /opt/f-secure /etc/opt/f-secure /var/opt/f-secure. This command removes the remaining files or systemd services if any. Finally, restart the system to make sure that all hanging services and processes are run down.", "subchoice.choice_uninstalling_product_000017D15": "rm -rf /etc/opt/f-secure/baseguard", "subchoice.choice_uninstalling_product_0000175F7": "rm -rf /etc/opt/f-secure/fsbg", "subchoice.choice_uninstalling_product_0000251E8": "rm -rf /etc/opt/f-secure/linuxsecurity", "subchoice.choice_uninstalling_product_000023530": "rm -rf /opt/f-secure/baseguard", "subchoice.choice_uninstalling_product_000028CAE": "rm -rf /opt/f-secure/fsbg", "subchoice.choice_uninstalling_product_00002977A": "rm -rf /opt/f-secure/linuxsecurity", "subchoice.choice_uninstalling_product_00002534D": "rm -rf /var/opt/f-secure/baseguard", "subchoice.choice_uninstalling_product_000021EC8": "rm -rf /var/opt/f-secure/fsbg", "subchoice.choice_uninstalling_product_000029C8E": "rm -rf /var/opt/f-secure/linuxsecurity", "content.p_uninstalling_product_000019562": "If you have installed Policy Manager Server on the same machine, do not delete the folders in full; instead, run the following commands to remove the necessary subfolders:", "step.step_uninstalling_product_000005DB9": "Run the uninstallation command:", "content.p_uninstalling_product_00003921C": "The uninstall command does not remove configuration files or log files that the product has generated. Check the product directories for remaining files and remove them if you are sure that you do not need them anymore.", "desc": [ { "steps.steps_uninstalling_product_00000B404": [ "step.step_uninstalling_product_00000B4D6", "step.step_uninstalling_product_000005DB9", "content.note_uninstalling_product_000010DB2", { "subchoices.choices_uninstalling_product_00001EAA4": [ "subchoice.choice_uninstalling_product_000017603", "subchoice.choice_uninstalling_product_00001CA0C" ] }, "content.p_uninstalling_product_0000126AC", "content.p_uninstalling_product_000019562", { "subchoices.ul_uninstalling_product_00001B1BD": [ "subchoice.choice_uninstalling_product_000017D15", "subchoice.choice_uninstalling_product_0000175F7", "subchoice.choice_uninstalling_product_0000251E8", "subchoice.choice_uninstalling_product_000023530", "subchoice.choice_uninstalling_product_000028CAE", "subchoice.choice_uninstalling_product_00002977A", "subchoice.choice_uninstalling_product_00002534D", "subchoice.choice_uninstalling_product_000021EC8", "subchoice.choice_uninstalling_product_000029C8E" ] } ] }, "content.p_uninstalling_product_00003921C" ] }, "administering-latest-en.json": { "title": "title_administering_000001_55B00E8F", "title_administering_000001_55B00E8F": "Using the product ", "shortdesc": "shortdesc_administering_000002_C64DB662", "shortdesc_administering_000002_C64DB662": "You can configure the product settings with the lsctl command-line tool or (for centrally managed computers) through WithSecure Policy Manager Console. ", "content.p_administering_00000D_39470F56": "Use the topics in this section to configure product features and settings. You can manage settings locally with the lsctl command-line tool or centrally through WithSecure Policy Manager Console.", "desc": [ "content.p_administering_00000D_39470F56" ] }, "real_time_scanning-latest-en.json": { "title": "title_real_time_scanning_000001_ABB2", "title_real_time_scanning_000001_ABB2": "Real-time scanning", "shortdesc": "shortdesc_real_time_scanning_000002_32F5", "shortdesc_real_time_scanning_000002_32F5": "Real-time scanning protects the computer by scanning files when they are accessed and blocking access to files that contain malware. ", "content.note_real_time_scanning_00000F_FF71": "Note: Individual files and directories that require scanning in real time need to be specified in the Policy Manager Console. With the default settings, real-time scanning does not scan any files.", "content.p_real_time_scanning_000010_7D46": "Real-time scanning works as follows:", "step.step_real_time_scanning_000012_2340": "The computer tries to access a file.", "step.step_real_time_scanning_000013_C76F": "The file is immediately scanned for malware before the computer is allowed access to the file.", "step.step_real_time_scanning_000015_D4C4": "If malware is found in the file, real-time scanning blocks access to the file so the malware cannot harm the computer.", "step.step_real_time_scanning_000018_3D44": "Based on the settings, real-time scanning may either rename or delete the infected file.", "content.p_real_time_scanning_000019_7776": "Scanned files are classified as clean, malware, potentially unwanted applications, or suspicious. Clean files are not affected by real-time scanning. Infected files are prevented from being opened.", "content.p_real_time_scanning_00001A_0662": "The amount of time and system resources that real-time scanning takes depends on the contents, location, and type of the file.", "content.p_real_time_scanning_00001B_27F3": "Files that take a longer time to scan:", "step.step_real_time_scanning_00001D_A9A0": "Compressed files, such as .zip archives. Note that these files are not scanned by default.", "step.step_real_time_scanning_00001E_51A1": "Files on network file systems.", "step.step_real_time_scanning_00001F_9A2B": "Large files may be affected.", "content.p_real_time_scanning_000020_7135": "Real-time scanning may slow down your computer when a lot of files are accessed at the same time.", "content.note_real_time_scanning_000021_0250": "Note: You can find all scan events in the access.log file.", "desc": [ "content.note_real_time_scanning_00000F_FF71", "content.p_real_time_scanning_000010_7D46", { "steps.ol_real_time_scanning_000011_DCDF": [ "step.step_real_time_scanning_000012_2340", "step.step_real_time_scanning_000013_C76F", "step.step_real_time_scanning_000015_D4C4", "step.step_real_time_scanning_000018_3D44" ] }, "content.p_real_time_scanning_000019_7776", "content.p_real_time_scanning_00001A_0662", "content.p_real_time_scanning_00001B_27F3", { "steps.ul_real_time_scanning_00001C_7C64": [ "step.step_real_time_scanning_00001D_A9A0", "step.step_real_time_scanning_00001E_51A1", "step.step_real_time_scanning_00001F_9A2B" ] }, "content.p_real_time_scanning_000020_7135", "content.note_real_time_scanning_000021_0250" ], "related": [ "configuring_realtime_scanning-latest-en", "settings_real_time_scanning-latest-en", "scanning_manually-latest-en" ] }, "integrity_checking-latest-en.json": { "title": "title_integrity_checking_000001_69A8", "title_integrity_checking_000001_69A8": "Integrity checking ", "shortdesc": "shortdesc_integrity_checking_000002_A3BD", "shortdesc_integrity_checking_000002_A3BD": "Integrity checking protects important system files against unauthorized modifications. ", "content.p_integrity_checking_00000E_F58B": "You can use integrity checking to detect any modifications to protected files and prevent their use, regardless of file system permissions.", "content.p_integrity_checking_00000F_6879": "To use integrity checking, you need to add the files that you want to protect to a baseline list. The files on this list are protected against unauthorized changes.", "content.p_integrity_checking_000010_ACE2": "Integrity checking works by comparing files on the disk to the baseline attributes, which form a cryptographically signed list of file properties. Integrity checking sends alerts to the administrator of attempts to modify the monitored files.", "content.note_integrity_checking_000011_3651": "Note: Some aspects of integrity checking depend on the type of file system in use. Fully supported file systems include Ext4, ZFS, BTRFS, NFS, CiFS, and others. In essence, full integrity checking takes advantage of file attributes, which are available on most modern file systems, but not all.", "content.p_integrity_checking_000012_030A": "The following table gives more details on how integrity checking handles various events for files that are included in the baseline.", "content.dt_integrity_checking_000015_1FA3": "An untrusted process modifies a file", "content.dd_integrity_checking_000016_C688": "", "content.dd_p_integrity_checking_000017_774E": "Configured with the read and write action settings:
", "choice.choice_integrity_checking_000019_9FF8": "If the write action is set to deny, the modification attempt is blocked and no alert is sent.", "choice.choice_integrity_checking_00001B_38ED": "If the write action is set to allow, integrity checking sends an alert of the modification to the administrator.", "choice.choice_integrity_checking_00001D_728A": "If the read action is set to deny, integrity checking blocks any subsequent attempt to open the file after it has been modified.", "content.dt_integrity_checking_000020_57A0": "A trusted process modifies a file", "content.dd_integrity_checking_000021_4999": "If the program file for a process is included in the baseline and has not been tampered with, it is considered a trusted process. In such cases, integrity checking does not take any action.", "content.dt_integrity_checking_000024_34F3": "Deleting a file", "content.dd_integrity_checking_000025_20F4": "Integrity checking does not prevent or send an alert for the event.", "content.dt_integrity_checking_000028_2FC0": "Renaming a file", "content.dd_integrity_checking_000029_BAF0": "Integrity checking does not prevent or send an alert for the event, but continues to monitor the renamed file.", "content.dt_integrity_checking_00002C_CA20": "Creating a hard or soft link to a file", "content.dd_integrity_checking_00002D_B530": "Integrity checking follows the link.", "content.dt_integrity_checking_000030_7A74": "Replacing a file", "content.dd_integrity_checking_000031_9FA5": "Integrity checking does not prevent or send an alert for the event.", "content.dt_integrity_checking_000034_3CBB": "Changing file permissions", "content.dd_integrity_checking_000035_AC87": "The change is not blocked, but the read and write action settings determine if subsequent attempts to open the file are blocked or prompt an alert.", "content.dt_integrity_checking_000038_C174": "Changing file ownership", "content.dd_integrity_checking_000039_C692": "The change is not blocked, but the read and write action settings determine if subsequent attempts to open the file are blocked or prompt an alert.", "content.dt_integrity_checking_00003C_3C0A": "Changing file attributes", "content.dd_integrity_checking_00003D_E02B": "This includes SELinux labels. Integrity checking does not prevent or send an alert for the event.", "content.note_integrity_checking_00003F_1C69": "Note: About the alerts that integrity checking sends: ", "desc": [ "content.p_integrity_checking_00000E_F58B", "content.p_integrity_checking_00000F_6879", "content.p_integrity_checking_000010_ACE2", "content.note_integrity_checking_000011_3651", "content.p_integrity_checking_000012_030A", { "dl.dl_integrity_checking_000013_CCC0": [ { "dlentry.dlentry_integrity_checking_000014_6DDD": [ "content.dt_integrity_checking_000015_1FA3", "content.dd_integrity_checking_000016_C688", "content.dd_p_integrity_checking_000017_774E", { "choices.ul_integrity_checking_000018_6B67": [ "choice.choice_integrity_checking_000019_9FF8", "choice.choice_integrity_checking_00001B_38ED", "choice.choice_integrity_checking_00001D_728A" ] } ] }, { "dlentry.dlentry_integrity_checking_00001F_F56C": [ "content.dt_integrity_checking_000020_57A0", "content.dd_integrity_checking_000021_4999" ] }, { "dlentry.dlentry_integrity_checking_000023_D828": [ "content.dt_integrity_checking_000024_34F3", "content.dd_integrity_checking_000025_20F4" ] }, { "dlentry.dlentry_integrity_checking_000027_A242": [ "content.dt_integrity_checking_000028_2FC0", "content.dd_integrity_checking_000029_BAF0" ] }, { "dlentry.dlentry_integrity_checking_00002B_2B97": [ "content.dt_integrity_checking_00002C_CA20", "content.dd_integrity_checking_00002D_B530" ] }, { "dlentry.dlentry_integrity_checking_00002F_EB44": [ "content.dt_integrity_checking_000030_7A74", "content.dd_integrity_checking_000031_9FA5" ] }, { "dlentry.dlentry_integrity_checking_000033_2C9C": [ "content.dt_integrity_checking_000034_3CBB", "content.dd_integrity_checking_000035_AC87" ] }, { "dlentry.dlentry_integrity_checking_000037_4929": [ "content.dt_integrity_checking_000038_C174", "content.dd_integrity_checking_000039_C692" ] }, { "dlentry.dlentry_integrity_checking_00003B_D07B": [ "content.dt_integrity_checking_00003C_3C0A", "content.dd_integrity_checking_00003D_E02B" ] } ] }, "content.note_integrity_checking_00003F_1C69" ], "related": [ "turning_on_integrity_checking-latest-en", "settings_integrity_checking-latest-en", "integrity_checker_command_line-latest-en" ] }, "aua-latest-en.json": { "title": "title_aua_000001_8EC8CD12", "title_aua_000001_8EC8CD12": "Automatic updates ", "shortdesc": "shortdesc_aua_000002_1A94D373", "shortdesc_aua_000002_1A94D373": "Automatic updates make sure that the Linux hosts in your managed network stay protected. ", "content.p_aua_00000B_A1493C98": "With automatic updates, the managed hosts retrieve the latest updates based on the policy settings. By default, automatic updates are turned on. We strongly recommend that you keep this feature turned on, as new virus definitions are made available several times a day.", "content.p_aua_00000C_EE062ABA": "WithSecure uses dedicated service connections between the backend systems and installed products, referred to as channels, to deliver updates to the malware definition databases, scanning engines, and the actual products. Each channel provides updates for a specific product component or function.", "content.p_aua_00000D_63175BCC": "The settings for automatic updates apply to the three WithSecure product channels (linuxsecurity, fsbg, and baseguard) that the product uses. The automatic update settings do not affect updates for other channels, such as the scanning engines, as they are applied immediately when they are available. The exception to this is the main feature switch for automatic updates: turning automatic updates off disables the updates for all channels.", "content.p_aua_000011_BE6C98D2": "In addition, product channel updates are applied one week after the update has been published at the latest.", "content.title_aua_000012_B04F282F": "Checking the latest virus definition database versions", "content.p_aua_000013_DF076B8C": "To ensure your systems are using the most up-to-date virus definition databases, you can query the Elements API using the following endpoint:", "content.dt_aua_000017_907FED24": "Endpoint:", "content.dd_aua_000018_21F33EB7": "GET /databases/v1/latest-versions", "content.dt_aua_00001B_3DDBC65E": "Purpose:", "content.dd_aua_00001C_3234AE84": "Retrieve the latest version numbers of all available virus definition databases.", "content.dt_aua_00001E_7BCC63BD": "Response:", "content.dd_aua_00001F_707CF5B3": "A list of databases, each with its corresponding latest version number.", "content.dt_aua_000021_184DC94D": "Usage:", "content.dd_aua_000022_E3331821": "Use this endpoint to verify that your systems are aligned with the most current database versions. This helps maintain optimal security and performance across your environment.", "content.note_aua_000023_6F37334C": "Note: Even if a newer database version is available, your endpoints might not have received it yet, as this depends on how frequently the endpoint client applications check for updates.", "content.p_aua_000024_2DA3E256": "For information on how to use this endpoint, see Elements API reference", "content.p_aua_000026_5853F258": "To get started with the Elements API, see Elements API getting started", "desc": [ "content.p_aua_00000B_A1493C98", "content.p_aua_00000C_EE062ABA", "content.p_aua_00000D_63175BCC", "content.p_aua_000011_BE6C98D2", "content.title_aua_000012_B04F282F", "content.p_aua_000013_DF076B8C", { "dl.dl_aua_000015_9DD06C93": [ { "dlentry.dlentry_aua_000016_269C31CE": [ "content.dt_aua_000017_907FED24", "content.dd_aua_000018_21F33EB7" ] }, { "dlentry.dlentry_aua_00001A_E55BE59B": [ "content.dt_aua_00001B_3DDBC65E", "content.dd_aua_00001C_3234AE84" ] }, { "dlentry.dlentry_aua_00001D_2E2A9D20": [ "content.dt_aua_00001E_7BCC63BD", "content.dd_aua_00001F_707CF5B3" ] }, { "dlentry.dlentry_aua_000020_3386D664": [ "content.dt_aua_000021_184DC94D", "content.dd_aua_000022_E3331821" ] } ] }, "content.note_aua_000023_6F37334C", "content.p_aua_000024_2DA3E256", "content.p_aua_000026_5853F258" ], "related": [ "configuring_aua-latest-en", "settings_automatic_updates-latest-en", "updating_manually_using_update_archive-latest-en" ] }, "using_http_proxies-latest-en.json": { "title": "title_using_http_proxies_000001_E55E", "title_using_http_proxies_000001_E55E": "Using HTTP proxies", "shortdesc": "shortdesc_using_http_proxies_000002_F52B", "shortdesc_using_http_proxies_000002_F52B": "The product has a single, global HTTP proxy setting, which is always used when the product makes HTTP requests to external services. ", "content.p_using_http_proxies_00000F_D830": "You can configure the global HTTP proxy setting using a command line option either when activating the product or with the lsctl utility after you have activated the product.", "content.p_using_http_proxies_000011_6A0E": "If you use the command line option to define the product settings, the product saves the configuration as a local setting override. This means that once you have finished activating the product, you can view the settings with the following command: lsctl get http_proxy.", "content.p_using_http_proxies_000013_B2A0": "Local overrides take precedence over the configuration that is retrieved from remote management services (WithSecure Elements Endpoint Protection or Policy Manager). To configure the proxy settings remotely, you have to mark the setting as locked in the management service. When the setting is locked, the value set in the profile or policy that is distributed from the management service is always used, even if a local configuration exists.", "content.p_using_http_proxies_000016_96B8": "You can also change the proxy settings in the Policy Manager Console. The global HTTP proxy setting does not affect communication with Policy Manager.", "content.p_using_http_proxies_000017_C80D": "When you use Policy Manager to manage the product, updates are downloaded from Policy Manager Server. The global HTTP proxy setting does not affect this communication either.", "content.p_using_http_proxies_000018_9CA9": "You can define one or more Policy Manager Proxies in Policy Manager Console. If you have defined a Policy Manager Proxy, this is used to handle the communication with Policy Manager. If you configure multiple Policy Manager Proxies, the product automatically switches to using the next available proxy if the connection with one proxy fails.", "content.p_using_http_proxies_000019_F4AE": "As the product must retrieve the Policy Manager Proxy configuration from Policy Manager Server, it must be able to make an initial connection to the main Policy Manager Server to get the proxy configuration.", "content.p_using_http_proxies_00001A_4E05": "If the product cannot connect to Policy Manager Server when trying to download updates, it falls back to using the WithSecure update servers directly. This communication does not use a HTTP proxy.", "content.p_using_http_proxies_00002E_69CF": "--http-proxy=<host address>:<host port number>", "content.note_using_http_proxies_000023_E7D4": "Note: The product supports basic authentication for HTTP proxies. If the specified proxy requires authentication, use the --http-proxy=username:password@host:port format to specify the credentials for the proxy.", "subchoice.choice_using_http_proxies_000020_A1F1": "To set the proxy when you run the activation or installer command, include the --http-proxy option in the command:", "content.p_using_http_proxies_00002F_162B": "/opt/f-secure/linuxsecurity/bin/lsctl set http_proxy host <host address>
/opt/f-secure/linuxsecurity/bin/lsctl set http_proxy port <host port number>
/opt/f-secure/linuxsecurity/bin/lsctl set http_proxy enabled true", "subchoice.choice_using_http_proxies_000025_1AAE": "To set the proxy after activation, run the following lsctl commands:", "step.step_using_http_proxies_00001C_2F41": "Set the HTTP proxy:", "content.p_using_http_proxies_00002A_5107": "/opt/f-secure/linuxsecurity/bin/lsctl get http_proxy", "content.p_using_http_proxies_00002C_5131": "This returns the current settings: {
\"enabled\": true,
\"host\": <host address>,
\"port\": <host port number>
}", "step.step_using_http_proxies_000028_00CE": "Run the following command to check the proxy setting:", "desc": [ "content.p_using_http_proxies_00000F_D830", "content.p_using_http_proxies_000011_6A0E", "content.p_using_http_proxies_000013_B2A0", "content.p_using_http_proxies_000016_96B8", "content.p_using_http_proxies_000017_C80D", "content.p_using_http_proxies_000018_9CA9", "content.p_using_http_proxies_000019_F4AE", "content.p_using_http_proxies_00001A_4E05", { "steps.steps_using_http_proxies_00001B_140B": [ "step.step_using_http_proxies_00001C_2F41", { "subchoices.choices_using_http_proxies_00001F_78AC": [ "subchoice.choice_using_http_proxies_000020_A1F1", "content.p_using_http_proxies_00002E_69CF", "content.note_using_http_proxies_000023_E7D4", "subchoice.choice_using_http_proxies_000025_1AAE", "content.p_using_http_proxies_00002F_162B" ] }, "step.step_using_http_proxies_000028_00CE", "content.p_using_http_proxies_00002A_5107", "content.p_using_http_proxies_00002C_5131" ] } ] }, "lsctl_example_managing_ic_profiles-latest-en.json": { "title": "title_lsctl_example_managing_i_08AE2", "title_lsctl_example_managing_i_08AE2": "Example: managing integrity checker profiles", "shortdesc": "shortdesc_lsctl_example_managing_i_0A345", "shortdesc_lsctl_example_managing_i_0A345": "This example of a common task where you can use lsctl shows how to modify integrity checker profiles through the ic profiles array. ", "content.p_lsctl_example_managing_i_0AB90": "The following steps outline how to add an integrity checker profile to prevent writing to files inside the /opt directory.", "content.p_lsctl_example_managing_i_0DDA5": "/opt/f-secure/linuxsecurity/bin/lsctl set ic enabled yes
/opt/f-secure/linuxsecurity/bin/lsctl add --file - ic profiles <<EOF
{
\"path\": \"/opt\",
\"verify_attributes\": {
\"mode\": false,
\"user\": false,
\"group\": false,
\"size\": false,
\"mtime\": false
},
\"read_action\": \"allow\",
\"write_action\": \"deny\"
}
EOF", "content.p_lsctl_example_managing_i_09BA1": "This example uses shell's here document syntax for entering multi-line input.", "step.step_lsctl_example_managing_i_0B7E9": "Run the following command:", "content.p_lsctl_example_managing_i_04C19": "/opt/f-secure/linuxsecurity/bin/lsctl set --prompt ic profiles /opt", "content.p_lsctl_example_managing_i_000E5": "This opens a text editor with the current value of the /opt profile specified as a template.", "step.step_lsctl_example_managing_i_0B7F2": "To edit the profile, run the following command:", "content.p_lsctl_example_managing_i_07AF2": "/opt/f-secure/linuxsecurity/bin/lsctl set ic profiles '[]'", "step.step_lsctl_example_managing_i_07F71": "To remove all integrity checker profiles, run the following command to set ic profiles to an empty array:", "desc": [ "content.p_lsctl_example_managing_i_0AB90", { "steps.steps_lsctl_example_managing_i_0ACCE": [ "step.step_lsctl_example_managing_i_0B7E9", "content.p_lsctl_example_managing_i_0DDA5", "content.p_lsctl_example_managing_i_09BA1", "step.step_lsctl_example_managing_i_0B7F2", "content.p_lsctl_example_managing_i_04C19", "content.p_lsctl_example_managing_i_000E5", "step.step_lsctl_example_managing_i_07F71", "content.p_lsctl_example_managing_i_07AF2" ] } ] }, "pm_basics-latest-en.json": { "title": "title_pm_basics_000001_21EBE81A", "title_pm_basics_000001_21EBE81A": "Basics of using Policy Manager ", "shortdesc": "shortdesc_pm_basics_000002_2406987E", "shortdesc_pm_basics_000002_2406987E": "Policy Manager Console is used to change the settings and to view statistics of WithSecure products. ", "content.p_pm_basics_00000F_800FFABD": "Use the settings on the Settings > Linux pages to configure the product.", "content.p_pm_basics_000013_472FD779": "For more information about Policy Manager, see the Policy Manager Admin Guide.", "desc": [ "content.p_pm_basics_00000F_800FFABD", "content.p_pm_basics_000013_472FD779" ] }, "configuring_realtime_scanning-latest-en.json": { "title": "title_configuring_realtime_sca_095EA", "title_configuring_realtime_sca_095EA": "Using real-time scanning with Policy Manager", "shortdesc": "shortdesc_configuring_realtime_sca_09704", "shortdesc_configuring_realtime_sca_09704": "Real-time scanning protects the computer by scanning files when they are accessed and blocking access to files that contain malware. ", "content.p_configuring_realtime_sca_0B51D": "In the Standard view of Policy Manager Console:", "step.step_configuring_realtime_sca_096EF": "Select the target domain.", "step.step_configuring_realtime_sca_0EE13": "Go to the Settings > Linux > Real-time scanning page.", "step.step_configuring_realtime_sca_0DAC7": "Select Enable real-time scanning.", "content.p_configuring_realtime_sca_06F14": "Use the full, absolute path names of individual files or directories. The listed directories also include subdirectories recursively. You can use wildcards in paths, with ** matching any subdirectories. Symbolic links are not followed.", "content.note_configuring_realtime_sca_0FDBC": "Note: By default, this field is empty, which means that nothing is scanned.", "step.step_configuring_realtime_sca_04215": "Enter the paths that you want to scan in the Files and folders to scan field.", "content.p_configuring_realtime_sca_089B0": "Exclusions also require the full, absolute path names for the files or directories. You can use wildcards in paths, with ** matching any subdirectories.", "step.step_configuring_realtime_sca_01DF2": "Enter any files and folders that you want to exclude from scanning.", "step.step_configuring_realtime_sca_05900": "Select Scan only executables if you want to scan only files that have an executable permission flag turned on.", "cell.choptionhd_configuring_realtime_sca_0E94D": "Option", "cell.chdeschd_configuring_realtime_sca_0582B": "Description", "cell.choption_configuring_realtime_sca_055E0": "Rename", "cell.chdesc_configuring_realtime_sca_048C7": "Rename the infected file. The renamed file has a .malware or .suspected extension, depending on the type of detection.", "cell.choption_configuring_realtime_sca_083CE": "Delete", "cell.chdesc_configuring_realtime_sca_03257": "Remove the infected file.", "cell.choption_configuring_realtime_sca_0575D": "Do nothing", "cell.chdesc_configuring_realtime_sca_09DBB": "Do not perform any action on the infected file.", "step.step_configuring_realtime_sca_07F1E": "Under Actions for real-time scanning, set the Action for malware and Action for suspicious files.", "step.step_configuring_realtime_sca_0C127": "Click the following icon to distribute the policy:", "desc": [ "content.p_configuring_realtime_sca_0B51D", { "steps.steps_configuring_realtime_sca_0B17D": [ "step.step_configuring_realtime_sca_096EF", "step.step_configuring_realtime_sca_0EE13", "step.step_configuring_realtime_sca_0DAC7", "step.step_configuring_realtime_sca_04215", "content.p_configuring_realtime_sca_06F14", "content.note_configuring_realtime_sca_0FDBC", "step.step_configuring_realtime_sca_01DF2", "content.p_configuring_realtime_sca_089B0", "step.step_configuring_realtime_sca_05900", "step.step_configuring_realtime_sca_07F1E", { "table.table_configuring_realtime_sca_0414F": [ { "thead.chhead_configuring_realtime_sca_040B6": [ "cell.choptionhd_configuring_realtime_sca_0E94D", "cell.chdeschd_configuring_realtime_sca_0582B" ] }, { "row.chrow_configuring_realtime_sca_04C8D": [ "cell.choption_configuring_realtime_sca_055E0", "cell.chdesc_configuring_realtime_sca_048C7" ] }, { "row.chrow_configuring_realtime_sca_03CB1": [ "cell.choption_configuring_realtime_sca_083CE", "cell.chdesc_configuring_realtime_sca_03257" ] }, { "row.chrow_configuring_realtime_sca_0866B": [ "cell.choption_configuring_realtime_sca_0575D", "cell.chdesc_configuring_realtime_sca_09DBB" ] } ] }, "step.step_configuring_realtime_sca_0C127" ] } ] }, "scanning_pua-latest-en.json": { "title": "title_scanning_pua_000001_F41C22A8", "title_scanning_pua_000001_F41C22A8": "Scanning for potentially unwanted applications", "shortdesc": "shortdesc_scanning_pua_000002_32647A26", "shortdesc_scanning_pua_000002_32647A26": "You can set both real-time and manual scanning to handle any detected potentially unwanted applications (PUA) in addition to malware. ", "content.p_scanning_pua_00000F_FC8DCC4C": "In the Standard view of Policy Manager Console:", "step.step_scanning_pua_000012_55E1FFDC": "Select the target domain.", "step.step_scanning_pua_000013_9A943D44": "Go to the Settings > Linux > Real-time scanning page.", "step.step_scanning_pua_000019_80E7CBDC": "Make sure that Enable real-time scanning is selected.", "content.note_scanning_pua_000020_E70DDF31": "Note: The PUA scanning settings are listed separately under both Real-time scanning and Manual scanning.", "step.step_scanning_pua_00001C_6883DBE9": "Select Scan for potentially unwanted applications.", "cell.choptionhd_scanning_pua_00002A_E2442A6C": "Option", "cell.chdeschd_scanning_pua_00002B_79D4CEF6": "Description", "cell.choption_scanning_pua_00002D_0902A620": "Rename", "cell.chdesc_scanning_pua_00002F_389FD386": "Rename the infected file. The renamed file has a .pua extension.", "cell.choption_scanning_pua_000032_32650260": "Delete", "cell.chdesc_scanning_pua_000034_47CD51CA": "Remove the infected file.", "cell.choption_scanning_pua_000036_41B1ACE4": "Do nothing", "cell.chdesc_scanning_pua_000038_F54173E6": "Do not perform any action on the infected file.", "step.step_scanning_pua_000023_0547291C": "Under Actions for real-time scanning and Actions for manual scanning, set the Action for potentially unwanted applications.", "step.step_scanning_pua_000039_3265F74F": "Click the following icon to distribute the policy:", "desc": [ "content.p_scanning_pua_00000F_FC8DCC4C", { "steps.steps_scanning_pua_000011_A438D3FD": [ "step.step_scanning_pua_000012_55E1FFDC", "step.step_scanning_pua_000013_9A943D44", "step.step_scanning_pua_000019_80E7CBDC", "step.step_scanning_pua_00001C_6883DBE9", "content.note_scanning_pua_000020_E70DDF31", "step.step_scanning_pua_000023_0547291C", { "table.table_scanning_pua_000028_65678FAF": [ { "thead.chhead_scanning_pua_000029_8D66E289": [ "cell.choptionhd_scanning_pua_00002A_E2442A6C", "cell.chdeschd_scanning_pua_00002B_79D4CEF6" ] }, { "row.chrow_scanning_pua_00002C_632BA648": [ "cell.choption_scanning_pua_00002D_0902A620", "cell.chdesc_scanning_pua_00002F_389FD386" ] }, { "row.chrow_scanning_pua_000031_AEEE2290": [ "cell.choption_scanning_pua_000032_32650260", "cell.chdesc_scanning_pua_000034_47CD51CA" ] }, { "row.chrow_scanning_pua_000035_97688F69": [ "cell.choption_scanning_pua_000036_41B1ACE4", "cell.chdesc_scanning_pua_000038_F54173E6" ] } ] }, "step.step_scanning_pua_000039_3265F74F" ] } ] }, "scanning_archives-latest-en.json": { "title": "title_scanning_archives_000001_9B20A", "title_scanning_archives_000001_9B20A": "Scanning archive files", "shortdesc": "shortdesc_scanning_archives_000002_F03A0", "shortdesc_scanning_archives_000002_F03A0": "You can set both real-time and manual scanning to check compressed archive files. ", "content.p_scanning_archives_00000D_E604D": "Archive scanning can scan files inside compressed ZIP, ARJ, LZH, RAR, CAB, TAR, BZ2, GZ, JAR, and TGZ archives.", "content.note_scanning_archives_000018_7AD43": "Note: Archive scanning may need to uncompress the file content to disk temporarily. The space required for the temporary files depends on the content within the archive.", "content.p_scanning_archives_000019_83C9E": "In the Standard view of Policy Manager Console:", "step.step_scanning_archives_00001C_CB45A": "Select the target domain.", "step.step_scanning_archives_00001D_DB765": "Go to the Settings > Linux > Real-time scanning page.", "step.step_scanning_archives_000023_EB41D": "Make sure that Enable real-time scanning is selected.", "content.note_scanning_archives_00002B_9D360": "Note: The archive scanning settings are also listed separately under Handling archives in manual scanning.", "step.step_scanning_archives_000026_F4660": "Under Handling archives in real-time scanning, select Scan inside archives.", "step.step_scanning_archives_00002D_3A4F6": "If you want to automatically treat password-protected archive files as malware, select Treat encrypted archives as unsafe.", "content.p_scanning_archives_000032_20FD1": "Nested archives are archives inside other archives.", "step.step_scanning_archives_000030_A515B": "Set the maximum number of levels to scan within nested archives.", "content.note_scanning_archives_000037_A49DF": "Note: By default, archives that have more nesting levels than the set limit are treated as safe.", "step.step_scanning_archives_000033_35080": "If you want to automatically treat archives that exceed the maximum number of nested levels as malware, select Treat archives that exceed the maximum nesting level as unsafe.", "step.step_scanning_archives_000038_6F9CA": "Click the following icon to distribute the policy:", "desc": [ "content.p_scanning_archives_00000D_E604D", "content.note_scanning_archives_000018_7AD43", "content.p_scanning_archives_000019_83C9E", { "steps.steps_scanning_archives_00001B_63823": [ "step.step_scanning_archives_00001C_CB45A", "step.step_scanning_archives_00001D_DB765", "step.step_scanning_archives_000023_EB41D", "step.step_scanning_archives_000026_F4660", "content.note_scanning_archives_00002B_9D360", "step.step_scanning_archives_00002D_3A4F6", "step.step_scanning_archives_000030_A515B", "content.p_scanning_archives_000032_20FD1", "step.step_scanning_archives_000033_35080", "content.note_scanning_archives_000037_A49DF", "step.step_scanning_archives_000038_6F9CA" ] } ] }, "configuring_manual_scanning-latest-en.json": { "title": "title_configuring_manual_scann_01808", "title_configuring_manual_scann_01808": "Configuring manual scanning", "shortdesc": "shortdesc_configuring_manual_scann_0B6C8", "shortdesc_configuring_manual_scann_0B6C8": "You can set the exclusions and actions for manual scanning in Policy Manager. ", "content.p_configuring_manual_scann_06211": "While real-time scanning checks a file whenever it is opened or closed, manual scanning traverses all file systems methodically and looks for malicious files. You can exclude specific files and directories.", "content.note_configuring_manual_scann_08EC1": "Note: The settings for manual scanning are also used for scheduled scans.", "content.p_configuring_manual_scann_04F6A": "In the Standard view of Policy Manager Console:", "step.step_configuring_manual_scann_0BB03": "Select the target domain.", "step.step_configuring_manual_scann_07B3D": "Go to the Settings > Linux > Manual scanning page.", "content.p_configuring_manual_scann_08170": "Exclusions require the full, absolute path names for the files or directories. Wildcards are not supported.", "step.step_configuring_manual_scann_07D0E": "Under Manual scanning, enter any files or folders that you want to exclude from scanning.", "cell.choptionhd_configuring_manual_scann_074E3": "Option", "cell.chdeschd_configuring_manual_scann_0542D": "Description", "cell.choption_configuring_manual_scann_08918": "Rename", "cell.chdesc_configuring_manual_scann_07478": "Rename the infected file. The renamed file has a .malware or .suspected extension, depending on the type of detection.", "cell.choption_configuring_manual_scann_09C5D": "Delete", "cell.chdesc_configuring_manual_scann_06748": "Remove the infected file.", "cell.choption_configuring_manual_scann_05F98": "Do nothing", "cell.chdesc_configuring_manual_scann_0E47A": "Do not perform any action on the infected file.", "step.step_configuring_manual_scann_09E7D": "Under Actions for manual scanning, set the Action for malware and Action for suspicious files.", "step.step_configuring_manual_scann_064C0": "Click the following icon to distribute the policy:", "content.note_configuring_manual_scann_0C94F": "Note: Click the lock icon next to the settings if you do not want to allow users to override the policy settings.", "desc": [ "content.p_configuring_manual_scann_06211", "content.note_configuring_manual_scann_08EC1", "content.p_configuring_manual_scann_04F6A", { "steps.steps_configuring_manual_scann_08140": [ "step.step_configuring_manual_scann_0BB03", "step.step_configuring_manual_scann_07B3D", "step.step_configuring_manual_scann_07D0E", "content.p_configuring_manual_scann_08170", "step.step_configuring_manual_scann_09E7D", { "table.table_configuring_manual_scann_0AE01": [ { "thead.chhead_configuring_manual_scann_04475": [ "cell.choptionhd_configuring_manual_scann_074E3", "cell.chdeschd_configuring_manual_scann_0542D" ] }, { "row.chrow_configuring_manual_scann_01092": [ "cell.choption_configuring_manual_scann_08918", "cell.chdesc_configuring_manual_scann_07478" ] }, { "row.chrow_configuring_manual_scann_03CE1": [ "cell.choption_configuring_manual_scann_09C5D", "cell.chdesc_configuring_manual_scann_06748" ] }, { "row.chrow_configuring_manual_scann_02484": [ "cell.choption_configuring_manual_scann_05F98", "cell.chdesc_configuring_manual_scann_0E47A" ] } ] }, "step.step_configuring_manual_scann_064C0" ] }, "content.note_configuring_manual_scann_0C94F" ] }, "scanning_manually_pm-latest-en.json": { "title": "title_scanning_manually_pm_000001147", "title_scanning_manually_pm_000001147": "Scanning a computer manually from Policy Manager", "shortdesc": "shortdesc_scanning_manually_pm_000005CDD", "shortdesc_scanning_manually_pm_000005CDD": "You can scan a managed Linux host manually from Policy Manager Console. ", "content.p_scanning_manually_pm_000001854": "In the Standard view of Policy Manager Console:", "step.step_scanning_manually_pm_000016360": "Select the target host.", "step.step_scanning_manually_pm_0000136E0": "Select the Operations tab.", "content.p_scanning_manually_pm_00001430F": "The manual scan starts on the selected host.", "step.step_scanning_manually_pm_000013CE3": "Click Scan.", "step.step_scanning_manually_pm_000012AB4": "When the operation is complete, go to the Scanning reports tab to see the results.", "desc": [ "content.p_scanning_manually_pm_000001854", { "steps.steps_scanning_manually_pm_0000105C0": [ "step.step_scanning_manually_pm_000016360", "step.step_scanning_manually_pm_0000136E0", "step.step_scanning_manually_pm_000013CE3", "content.p_scanning_manually_pm_00001430F", "step.step_scanning_manually_pm_000012AB4" ] } ] }, "creating_scheduled_scanning_task-latest-en.json": { "title": "title_creating_scheduled_scann_042F5", "title_creating_scheduled_scann_042F5": "Creating a scheduled scanning task", "shortdesc": "shortdesc_creating_scheduled_scann_0BF3E", "shortdesc_creating_scheduled_scann_0BF3E": "You can use scheduled scanning to scan the managed computers for malware at regular intervals. ", "content.note_creating_scheduled_scann_0648F": "Note: Scheduled scanning uses the exclusions and actions set for manual scanning.", "content.p_creating_scheduled_scann_0D956": "In the Standard view of Policy Manager Console:", "step.step_creating_scheduled_scann_02B82": "Select the target domain.", "step.step_creating_scheduled_scann_00D7E": "Go to the Settings > Linux > Manual scanning page.", "content.p_creating_scheduled_scann_0986B": "Use * to indicate any available option. For example, if you do not want to run the scan at a specific time, enter *:**.", "step.step_creating_scheduled_scann_06668": "Under Scheduled scanning, enter the time that you want to run the scan.", "step.step_creating_scheduled_scann_04D9B": "Select the days of the week that you want to run the scan.", "step.step_creating_scheduled_scann_01215": "Click the following icon to distribute the policy:", "desc": [ "content.note_creating_scheduled_scann_0648F", "content.p_creating_scheduled_scann_0D956", { "steps.steps_creating_scheduled_scann_04209": [ "step.step_creating_scheduled_scann_02B82", "step.step_creating_scheduled_scann_00D7E", "step.step_creating_scheduled_scann_06668", "content.p_creating_scheduled_scann_0986B", "step.step_creating_scheduled_scann_04D9B", "step.step_creating_scheduled_scann_01215" ] } ] }, "turning_on_integrity_checking-latest-en.json": { "title": "title_turning_on_integrity_che_0F1A7", "title_turning_on_integrity_che_0F1A7": "Using integrity checking with Policy Manager", "shortdesc": "shortdesc_turning_on_integrity_che_086CD", "shortdesc_turning_on_integrity_che_086CD": "You can turn on integrity checking on the Settings > Linux Security page in Policy Manager Console. ", "content.p_turning_on_integrity_che_00927": "In the Standard view of Policy Manager Console:", "step.step_turning_on_integrity_che_0A886": "Select the target domain.", "step.step_turning_on_integrity_che_00D79": "Go to the Settings > Linux > Real-time scanning page.", "step.step_turning_on_integrity_che_0AC4B": "Under Integrity checker, select Check the integrity of the following files.", "step.step_turning_on_integrity_che_0A312": "Check the protected files listed for the baseline.", "step.step_turning_on_integrity_che_0AE01": "Click the following icon to distribute the policy:", "desc": [ "content.p_turning_on_integrity_che_00927", { "steps.steps_turning_on_integrity_che_06165": [ "step.step_turning_on_integrity_che_0A886", "step.step_turning_on_integrity_che_00D79", "step.step_turning_on_integrity_che_0AC4B", "step.step_turning_on_integrity_che_0A312", "step.step_turning_on_integrity_che_0AE01" ] } ] }, "adding_known_files-latest-en.json": { "title": "title_adding_known_files_000001_524D", "title_adding_known_files_000001_524D": "Adding files to the integrity checker baseline", "shortdesc": "shortdesc_adding_known_files_000002_2A4B", "shortdesc_adding_known_files_000002_2A4B": "You can add files to the integrity checker list to protect them against unwanted modifications. ", "step.step_adding_known_files_00000D_CB5F": "Select the target domain.", "step.step_adding_known_files_00000E_52B0": "Go to the Settings > Linux > Real-time scanning page.", "step.step_adding_known_files_000014_2721": "Under Integrity checker, make sure that Check the integrity of the following files is selected.", "step.step_adding_known_files_000018_D2DD": "Click Add.", "step.step_adding_known_files_00001B_5A8F": "Enter the path for the file that you want to protect.", "cell.choptionhd_adding_known_files_000021_119B": "Option", "cell.chdeschd_adding_known_files_000022_35A3": "Description", "cell.choption_adding_known_files_000024_4174": "Mode", "cell.chdesc_adding_known_files_000025_B67D": "Changes to file permissions", "cell.choption_adding_known_files_000027_21DB": "User", "cell.chdesc_adding_known_files_000028_7590": "Changes to file ownership", "cell.choption_adding_known_files_00002A_B7FF": "Group", "cell.chdesc_adding_known_files_00002B_A16D": "Changes to file group", "cell.choption_adding_known_files_00002D_14E3": "Size", "cell.chdesc_adding_known_files_00002E_0107": "Changes to file size", "cell.choption_adding_known_files_000030_E3CD": "Modification time", "cell.chdesc_adding_known_files_000031_1B4F": "Changes to file modification time", "content.p_adding_known_files_000032_F78C": "The content of each listed file is always checked.", "step.step_adding_known_files_00001D_C2BA": "Select the attributes that you want to monitor.", "subchoice.choice_adding_known_files_000036_E691": "Select File read to prevent opening a tampered file.", "subchoice.choice_adding_known_files_000038_0E2B": "Select File write to prevent any modifications to the protected file.", "step.step_adding_known_files_000033_DB57": "Select the read and write access permissions to the monitored file:", "step.step_adding_known_files_00003A_EC61": "Click Save.", "step.step_adding_known_files_00003D_B681": "Click the following icon to distribute the policy:", "desc": [ { "steps.steps_adding_known_files_00000C_59A7": [ "step.step_adding_known_files_00000D_CB5F", "step.step_adding_known_files_00000E_52B0", "step.step_adding_known_files_000014_2721", "step.step_adding_known_files_000018_D2DD", "step.step_adding_known_files_00001B_5A8F", "step.step_adding_known_files_00001D_C2BA", { "table.table_adding_known_files_00001F_0D0A": [ { "thead.chhead_adding_known_files_000020_30EF": [ "cell.choptionhd_adding_known_files_000021_119B", "cell.chdeschd_adding_known_files_000022_35A3" ] }, { "row.chrow_adding_known_files_000023_57E7": [ "cell.choption_adding_known_files_000024_4174", "cell.chdesc_adding_known_files_000025_B67D" ] }, { "row.chrow_adding_known_files_000026_2B4B": [ "cell.choption_adding_known_files_000027_21DB", "cell.chdesc_adding_known_files_000028_7590" ] }, { "row.chrow_adding_known_files_000029_FC5F": [ "cell.choption_adding_known_files_00002A_B7FF", "cell.chdesc_adding_known_files_00002B_A16D" ] }, { "row.chrow_adding_known_files_00002C_F9B1": [ "cell.choption_adding_known_files_00002D_14E3", "cell.chdesc_adding_known_files_00002E_0107" ] }, { "row.chrow_adding_known_files_00002F_E9DB": [ "cell.choption_adding_known_files_000030_E3CD", "cell.chdesc_adding_known_files_000031_1B4F" ] } ] }, "content.p_adding_known_files_000032_F78C", "step.step_adding_known_files_000033_DB57", { "subchoices.choices_adding_known_files_000035_7C98": [ "subchoice.choice_adding_known_files_000036_E691", "subchoice.choice_adding_known_files_000038_0E2B" ] }, "step.step_adding_known_files_00003A_EC61", "step.step_adding_known_files_00003D_B681" ] } ] }, "configuring_aua-latest-en.json": { "title": "title_configuring_aua_000001_5F25542", "title_configuring_aua_000001_5F25542": "Configuring automatic update options with Policy Manager", "shortdesc": "shortdesc_configuring_aua_000002_34C1D94", "shortdesc_configuring_aua_000002_34C1D94": "Configure automatic updates if you want to control how the latest updates are installed. ", "content.p_configuring_aua_00000F_BEA7EBD": "The settings for automatic updates apply to the three WithSecure product channels (linuxsecurity, fsbg, and baseguard) that the product uses. The automatic update settings do not affect updates for other channels, such as the scanning engines, as they are applied immediately when they are available. The exception to this is the main feature switch for automatic updates: turning automatic updates off disables the updates for all channels.", "content.p_configuring_aua_000013_B905FF1": "In addition, product channel updates are applied one week after the update has been published at the latest.", "content.p_configuring_aua_000014_B6CC766": "In the Standard view of Policy Manager Console:", "step.step_configuring_aua_000017_5DFA6FB": "Select the target domain.", "step.step_configuring_aua_000018_18F1571": "Go to the Settings > Linux > Centralized management page.", "step.step_configuring_aua_00001E_68DE054": "Make sure that Enable automated product and security updates is selected.", "cell.choptionhd_configuring_aua_000025_D0F89BC": "Option", "cell.chdeschd_configuring_aua_000026_10C547E": "Description", "cell.choption_configuring_aua_000028_7BDBF99": "On arrival", "cell.chdesc_configuring_aua_00002A_92EA834": "This setting is the default, and product and virus definition updates are applied as soon as they become available. When this is selected, Date, Time, and Day are ignored.", "cell.choption_configuring_aua_00002F_6C1C84C": "Once", "cell.chdesc_configuring_aua_000031_978D84F": "Updates are postponed until the specified Date and Time. When this is selected, Day is ignored. The time is given in Policy Manager's local timezone.", "cell.choption_configuring_aua_000036_C67633F": "Daily", "cell.chdesc_configuring_aua_000038_30F44A2": "Updates are applied at the specified Time. When this is selected, Date and Day are ignored.", "cell.choption_configuring_aua_00003D_50576AD": "Weekly", "cell.chdesc_configuring_aua_00003F_646431B": "Updates are applied at the specified Time on the specified Day. When this is selected, Date is ignored.", "content.note_configuring_aua_000044_0D6B668": "Note: Each update has an associated expiry time. Once the expiry time is reached, the update is applied regardless of the date and time setting. This means that users do not have to worry about late updates jeopardizing security.", "step.step_configuring_aua_000021_A823171": "Configure the scheduling for the automatic product updates:", "content.p_configuring_aua_000049_0171317": "Normally, all hosts are automatically updated to the latest available version, which means that there can be some changes to the product features without explicit notification. If you want to use a specific version, check the release notes for that version to find the text to enter here.", "step.step_configuring_aua_000045_A2CAF6B": "If you want to keep using a specific version of the product, select Use a specific product version instead of the latest version available and enter the version that you want to use in the Product version field.", "step.step_configuring_aua_00004A_9ACFCAA": "Select Send alerts for failed updates to generate product alerts for any failed updates.", "step.step_configuring_aua_00004D_0C379DB": "Click the following icon to distribute the policy:", "content.note_configuring_aua_000050_053ADE8": "Note: If Linux Security 64 cannot connect to Policy Manager to get the latest updates, it connects directly to the WithSecure update service.", "content.note_configuring_aua_000053_4539DBC": "Note: The Operations tab in Policy Manager Console includes an operation that you can use to control the virus definition and product updates manually.", "desc": [ "content.p_configuring_aua_00000F_BEA7EBD", "content.p_configuring_aua_000013_B905FF1", "content.p_configuring_aua_000014_B6CC766", { "steps.steps_configuring_aua_000016_2F27323": [ "step.step_configuring_aua_000017_5DFA6FB", "step.step_configuring_aua_000018_18F1571", "step.step_configuring_aua_00001E_68DE054", "step.step_configuring_aua_000021_A823171", { "table.table_configuring_aua_000023_411BA1B": [ { "thead.chhead_configuring_aua_000024_23D4D1B": [ "cell.choptionhd_configuring_aua_000025_D0F89BC", "cell.chdeschd_configuring_aua_000026_10C547E" ] }, { "row.chrow_configuring_aua_000027_1A41D69": [ "cell.choption_configuring_aua_000028_7BDBF99", "cell.chdesc_configuring_aua_00002A_92EA834" ] }, { "row.chrow_configuring_aua_00002E_A082F12": [ "cell.choption_configuring_aua_00002F_6C1C84C", "cell.chdesc_configuring_aua_000031_978D84F" ] }, { "row.chrow_configuring_aua_000035_086DF5A": [ "cell.choption_configuring_aua_000036_C67633F", "cell.chdesc_configuring_aua_000038_30F44A2" ] }, { "row.chrow_configuring_aua_00003C_3D56A52": [ "cell.choption_configuring_aua_00003D_50576AD", "cell.chdesc_configuring_aua_00003F_646431B" ] } ] }, "content.note_configuring_aua_000044_0D6B668", "step.step_configuring_aua_000045_A2CAF6B", "content.p_configuring_aua_000049_0171317", "step.step_configuring_aua_00004A_9ACFCAA", "step.step_configuring_aua_00004D_0C379DB" ] }, "content.note_configuring_aua_000050_053ADE8", "content.note_configuring_aua_000053_4539DBC" ] }, "specifying_http_proxy-latest-en.json": { "title": "title_specifying_http_proxy_0000F17A", "title_specifying_http_proxy_0000F17A": "Specifying an HTTP proxy", "shortdesc": "shortdesc_specifying_http_proxy_00007679", "shortdesc_specifying_http_proxy_00007679": "You can specify an HTTP proxy to use for features that require access to the internet. ", "content.p_specifying_http_proxy_000067CB": "Currently, only the reputation service (Object Reputation Service Platform or ORSP) depends on this setting, but other Security Cloud features could make use of it in the future as the product evolves.", "content.note_specifying_http_proxy_0000AD71": "Note: Policy Manager Server is assumed to not depend on this HTTP proxy setting but to be accessible directly. Also, the software update service is provided by Policy Manager Server and is therefore not affected by the HTTP proxy setting.", "content.p_specifying_http_proxy_0000209F": "In the Standard view of Policy Manager Console:", "step.step_specifying_http_proxy_0000D9E4": "Select the target domain.", "step.step_specifying_http_proxy_0000AF4C": "Go to the Settings > Linux > Centralized management page.", "step.step_specifying_http_proxy_0000CE79": "Select Use HTTP proxy.", "step.step_specifying_http_proxy_0000CB41": "Enter the host address and port number for the HTTP proxy.", "step.step_specifying_http_proxy_0000C933": "Click the following icon to distribute the policy:", "desc": [ "content.p_specifying_http_proxy_000067CB", "content.note_specifying_http_proxy_0000AD71", "content.p_specifying_http_proxy_0000209F", { "steps.steps_specifying_http_proxy_000078A4": [ "step.step_specifying_http_proxy_0000D9E4", "step.step_specifying_http_proxy_0000AF4C", "step.step_specifying_http_proxy_0000CE79", "step.step_specifying_http_proxy_0000CB41", "step.step_specifying_http_proxy_0000C933" ] } ] }, "configuring_settings-latest-en.json": { "title": "title_configuring_settings_000000725", "title_configuring_settings_000000725": "Configuring settings with the lsctl utility", "shortdesc": "shortdesc_configuring_settings_0000017FD", "shortdesc_configuring_settings_0000017FD": "You can check and edit the product settings using the lsctl command-line utility. ", "content.note_configuring_settings_00001AF3E": "Note: If a setting for the distributed policy is locked in Policy Manager, that setting is enforced and you cannot edit it with the lsctl command-line utility.", "content.p_configuring_settings_000010686": "To use the lsctl utility:", "step.step_configuring_settings_00001DC59": "Log in to the Linux host as root.", "subchoice.choice_configuring_settings_000010E99": "To see the current value of a setting, run /opt/f-secure/linuxsecurity/bin/lsctl get [OPTIONS] [SETTING]", "subchoice.choice_configuring_settings_000013F4B": "To assign a new value to a setting, run /opt/f-secure/linuxsecurity/bin/lsctl set [OPTIONS] [SETTING] [VALUE]", "subchoice.choice_configuring_settings_0000285CC": "To add an entry to a setting that holds several values, run /opt/f-secure/linuxsecurity/bin/lsctl add [OPTIONS] [SETTING] [VALUE]", "subchoice.choice_configuring_settings_000023EA4": "To remove an entry from a setting that holds several values, run /opt/f-secure/linuxsecurity/bin/lsctl del [OPTIONS] [SETTING] [KEY]", "subchoice.choice_configuring_settings_00002DF27": "To clear the value of a setting, run /opt/f-secure/linuxsecurity/bin/lsctl reset [OPTION] [SETTING]", "subchoice.choice_configuring_settings_000022AD0": "To see a list of the operations available for a setting, run /opt/f-secure/linuxsecurity/bin/lsctl help [OPTIONS] [SETTING]", "subchoice.choice_configuring_settings_000024F1E": "To load product settings from a backup, run /opt/f-secure/linuxsecurity/bin/lsctl load [OPTIONS] [SETTING] [VALUE]", "subchoice.choice_configuring_settings_0000202AC": "To get a list of all available settings, run /opt/f-secure/linuxsecurity/bin/lsctl -h", "step.step_configuring_settings_0000195BF": "Use the following commands:", "content.p_configuring_settings_00002DE9B": "The get, set, add, del, and load commands support the following options:", "content.dt_configuring_settings_000039F42": "--json, -j ", "content.dd_configuring_settings_000033B78": "Treat input as JSON and produce output in JSON format.", "content.dt_configuring_settings_0000346C8": "--raw, -r ", "content.dd_configuring_settings_0000389FD": "This is currently the default. Raw is an alternative input/output format that is similar to JSON with the following changes:", "choice.choice_configuring_settings_00003C84E": "String values are accepted and returned without surrounding quotes.", "choice.choice_configuring_settings_000031A70": "Boolean values accept additional expressions such as yes and no in addition to true and false.", "content.note_configuring_settings_00004D4FC": "Note: The default input/output format for lsctl is subject to change. If you rely on the format of lsctl, specify either --json or --raw explicitly when lsctl is run. In addition to setting values, the keys for array-type settings are considered as input and need to be entered in the correct format.", "content.p_configuring_settings_00004867C": "The set, add, and load commands accept the following options:", "content.dt_configuring_settings_000046417": "--prompt, -p ", "content.dd_configuring_settings_00004FD0F": "Prompt for input using a text editor.", "content.dt_configuring_settings_000051FBB": "--file, -f [PATH] ", "content.dd_configuring_settings_000054729": "Read the input value from a file. If the path is set to -, the input value is read from the standard input.", "content.p_configuring_settings_000054DA4": "If you use the --prompt or --file options, do not enter a [VALUE] for the command.", "content.note_configuring_settings_00005A76B": "Note: The set and load commands differ in how they handle settings that are not included in the input. The set command does not change the current values for any settings that are missing from the input, whereas the load command resets those settings to their default values.", "desc": [ "content.note_configuring_settings_00001AF3E", "content.p_configuring_settings_000010686", { "steps.steps_configuring_settings_000017EEC": [ "step.step_configuring_settings_00001DC59", "step.step_configuring_settings_0000195BF", { "subchoices.choices_configuring_settings_000016A43": [ "subchoice.choice_configuring_settings_000010E99", "subchoice.choice_configuring_settings_000013F4B", "subchoice.choice_configuring_settings_0000285CC", "subchoice.choice_configuring_settings_000023EA4", "subchoice.choice_configuring_settings_00002DF27", "subchoice.choice_configuring_settings_000022AD0", "subchoice.choice_configuring_settings_000024F1E", "subchoice.choice_configuring_settings_0000202AC" ] } ] }, "content.p_configuring_settings_00002DE9B", { "dl.dl_configuring_settings_000035A94": [ { "dlentry.dlentry_configuring_settings_00003A6C7": [ "content.dt_configuring_settings_000039F42", "content.dd_configuring_settings_000033B78" ] }, { "dlentry.dlentry_configuring_settings_00003768F": [ "content.dt_configuring_settings_0000346C8", "content.dd_configuring_settings_0000389FD", { "choices.ul_configuring_settings_00003E61C": [ "choice.choice_configuring_settings_00003C84E", "choice.choice_configuring_settings_000031A70" ] } ] } ] }, "content.note_configuring_settings_00004D4FC", "content.p_configuring_settings_00004867C", { "dl.dl_configuring_settings_00004E614": [ { "dlentry.dlentry_configuring_settings_000046E7D": [ "content.dt_configuring_settings_000046417", "content.dd_configuring_settings_00004FD0F" ] }, { "dlentry.dlentry_configuring_settings_000055EF1": [ "content.dt_configuring_settings_000051FBB", "content.dd_configuring_settings_000054729" ] } ] }, "content.p_configuring_settings_000054DA4", "content.note_configuring_settings_00005A76B" ] }, "lsctl_setting_types-latest-en.json": { "title": "title_lsctl_setting_types_00000197B5", "title_lsctl_setting_types_00000197B5": "Setting types and the settings tree", "shortdesc": "shortdesc_lsctl_setting_types_0000020D8E", "shortdesc_lsctl_setting_types_0000020D8E": "Each product setting has a type and a value, and the settings are organized in a tree-like structure. ", "content.p_lsctl_setting_types_00000F7AFB": "There are five basic types of settings:", "step.step_lsctl_setting_types_0000118A3D": "Boolean (true or false)", "step.step_lsctl_setting_types_0000147870": "Text", "step.step_lsctl_setting_types_000015C266": "Numbers", "step.step_lsctl_setting_types_0000163A80": "Objects, which combine a specific group of settings in one entity by assigning a name to each member. You can inspect and assign values to objects.", "step.step_lsctl_setting_types_0000176708": "Arrays, which are collections that contain a varying number of members. Each array member is identified by a unique key. Array keys are composed of the same basic value types as settings, for example a key might be a string, number, or object. You can add and delete the settings in an array. Each array can have additional restrictions on the type of settings that it accepts, for example it may only accept text-type settings as members.", "content.p_lsctl_setting_types_0000189827": "Product settings are organized in a tree structure, where the root is an object-type setting that contains all the other settings. To inspect this root setting, use the get sub-command, for example:", "content.p_lsctl_setting_types_000030D52A": "# /opt/f-secure/linuxsecurity/bin/lsctl get", "content.p_lsctl_setting_types_000031184C": "{
\"http_proxy\": {
\"enabled\": false,
\"host\": \"localhost\",
\"port\": 3128
},
\"ic\": {
\"enabled\": true,
\"profiles\": []
},
\"oas\": {
\"actions\": {
\"malware\": \"rename\",
\"pua\": \"none\",
\"suspected\": \"none\"
},
\"archive_max_nested\": 5,
\"block_archive_max_nested\": false,
\"block_encrypted_archives\": false,
\"detect_pua\": true,
\"enabled\": true,
\"exclude_paths\": [],
\"include_paths\": [],
\"scan_archives\": false,
\"scan_only_executables\": false
},
...
}", "content.p_lsctl_setting_types_00001C426B": "Note that this example does not include the full output.", "content.p_lsctl_setting_types_00001D4572": "The output shows the setting hierarchy, starting from the root object and continuing through all its child settings (http_proxy, ic, oas, etc.) and their sub-settings recursively.", "content.p_lsctl_setting_types_000021C4BE": "In this example, the root object contains the http_proxy setting, which is an object-type setting that contains three sub-settings: enabled (boolean value setting), host (text setting), and port (number setting).", "content.p_lsctl_setting_types_0000266ADD": "You can also use the get sub-command to inspect only parts of the setting tree. It selects the settings to retrieve using the names that object-type settings assign and the keys of array-type settings.", "content.p_lsctl_setting_types_00002805FA": "For example, you can retrieve the HTTP proxy settings alone as follows:", "content.p_lsctl_setting_types_000032FE80": "# /opt/f-secure/linuxsecurity/bin/lsctl get http_proxy", "content.p_lsctl_setting_types_000033A580": "{
\"enabled\": false,
\"host\": \"localhost\",
\"port\": 3128
}", "content.p_lsctl_setting_types_00002B185F": "In the same way, you can specify the command further to check if the use of an HTTP proxy is enabled by running:", "content.p_lsctl_setting_types_00003465C9": "# /opt/f-secure/linuxsecurity/bin/lsctl get http_proxy enabled", "content.p_lsctl_setting_types_0000353E62": "false", "content.p_lsctl_setting_types_00002E685F": "In addition to their type, settings can have additional constraints on the allowed values. For example, the http_proxy port setting does not allow negative numbers.", "desc": [ "content.p_lsctl_setting_types_00000F7AFB", { "steps.ul_lsctl_setting_types_0000104CE6": [ "step.step_lsctl_setting_types_0000118A3D", "step.step_lsctl_setting_types_0000147870", "step.step_lsctl_setting_types_000015C266", "step.step_lsctl_setting_types_0000163A80", "step.step_lsctl_setting_types_0000176708" ] }, "content.p_lsctl_setting_types_0000189827", "content.p_lsctl_setting_types_000030D52A", "content.p_lsctl_setting_types_000031184C", "content.p_lsctl_setting_types_00001C426B", "content.p_lsctl_setting_types_00001D4572", "content.p_lsctl_setting_types_000021C4BE", "content.p_lsctl_setting_types_0000266ADD", "content.p_lsctl_setting_types_00002805FA", "content.p_lsctl_setting_types_000032FE80", "content.p_lsctl_setting_types_000033A580", "content.p_lsctl_setting_types_00002B185F", "content.p_lsctl_setting_types_00003465C9", "content.p_lsctl_setting_types_0000353E62", "content.p_lsctl_setting_types_00002E685F" ] }, "lsctl_operating_with_settings-latest-en.json": { "title": "title_lsctl_operating_with_set_011DC", "title_lsctl_operating_with_set_011DC": "Operating with settings", "shortdesc": "shortdesc_lsctl_operating_with_set_04D7D", "shortdesc_lsctl_operating_with_set_04D7D": "There are six basic sub-commands for operating with settings: get, set, add, delete, reset, and load. ", "content.title_lsctl_operating_with_set_011C8": "Available sub-commands", "content.dt_lsctl_operating_with_set_08D46": "get ", "content.dd_lsctl_operating_with_set_04F86": "lsctl get [--json | --raw] SETTING...
", "content.dd_lsctl_operating_with_set_0A96B": "Use the get sub-command to inspect the current value of a setting.", "content.dt_lsctl_operating_with_set_0D27C": "set ", "content.dd_lsctl_operating_with_set_089DC": "lsctl set [--json | --raw] [--prompt | --file PATH] SETTING... VALUE
", "content.dd_lsctl_operating_with_set_08FE1": "Use the set sub-command to enter the value for a setting.", "content.dt_lsctl_operating_with_set_05BE3": "add ", "content.dd_lsctl_operating_with_set_019A3": "lsctl add [--json | --raw] [--prompt | --file PATH] SETTING... VALUE
", "content.dd_lsctl_operating_with_set_0D253": "Use the add sub-command to add new members to an array-type setting. The key that is used for the new array member is automatically derived from the value. How the key is derived is specific to each particular setting.", "content.dt_lsctl_operating_with_set_07D62": "delete ", "content.dd_lsctl_operating_with_set_0F192": "lsctl delete [--json | --raw] SETTING... KEY
", "content.dd_lsctl_operating_with_set_09060": "Use the delete sub-command to remove members from array-type settings. This means that you can only use it with settings that are immediate descendants of an array-type setting.
", "content.dd_lsctl_operating_with_set_00A4B": "You can use del as an alias for the delete sub-command.", "content.dt_lsctl_operating_with_set_09FEF": "reset ", "content.dd_lsctl_operating_with_set_090CE": "lsctl reset [--json | --raw] [--all] SETTING...
", "content.dd_lsctl_operating_with_set_09C92": "Use the reset sub-command to clear the local value of a setting. This means that the setting's value is set back to its default value. This also enables the setting to be changed using Policy Manager or Protection Service for Business.", "content.dt_lsctl_operating_with_set_037AE": "load ", "content.dd_lsctl_operating_with_set_079AD": "lsctl load [--json | --raw] [--prompt | --file PATH] SETTING... VALUE
", "content.dd_lsctl_operating_with_set_06CBB": "Use the load sub-command to restore the values for settings.
", "content.dd_lsctl_operating_with_set_01BC0": "", "content.note_lsctl_operating_with_set_072F3": "Note: The set and load commands differ in how they handle settings that are not included in the input. The set command does not change the current values for any settings that are missing from the input, whereas the load command resets those settings to their default values.
", "content.title_lsctl_operating_with_set_0F624": "Providing values for settings", "content.p_lsctl_operating_with_set_0BC9B": "The set and add sub-commands are used to alter setting values. Use the final command-line argument to enter the value to assign to a setting (for set sub-commands) or the member to add to an array-type setting (for add sub-commands).", "content.p_lsctl_operating_with_set_02297": "For example, to set a new value for the http_proxy host setting, you could use the following command: lsctl set http_proxy host example.com", "content.p_lsctl_operating_with_set_02E30": "This assigns example.com as the new value for the host text-type setting.", "content.p_lsctl_operating_with_set_055CE": "When you use the --prompt (-p) flag, lsctl opens a text editor for you to specify the value for a setting. For example: lsctl set --prompt http_proxy host", "content.p_lsctl_operating_with_set_0183D": "This opens a text editor that you can use to enter a new value for the host setting.", "content.p_lsctl_operating_with_set_0DC70": "By default, lsctl opens the editor specified by the EDITOR environment variable. If EDITOR is not set or the specified editor is not found in PATH, lsctl tries to find the following editors in order until it finds one that is available: nano, vim, vi.", "content.p_lsctl_operating_with_set_082BC": "When you use the --file (-f) switch, lsctl reads the value for a setting from a file. For example: lsctl set --file value.txt http_proxy host", "content.p_lsctl_operating_with_set_0F805": "This reads the value for the host setting from the value.txt file. You can also use the special - value to read the value from the standard input. For example: echo -n 'example.com' | lsctl set --file - value.txt http_proxy host", "content.p_lsctl_operating_with_set_0D77E": "This uses the output of the echo command as the value for the host setting.", "desc": [ "content.title_lsctl_operating_with_set_011C8", { "dl.dl_lsctl_operating_with_set_07F04": [ { "dlentry.dlentry_lsctl_operating_with_set_01DCB": [ "content.dt_lsctl_operating_with_set_08D46", "content.dd_lsctl_operating_with_set_04F86", "content.dd_lsctl_operating_with_set_0A96B" ] }, { "dlentry.dlentry_lsctl_operating_with_set_00D9F": [ "content.dt_lsctl_operating_with_set_0D27C", "content.dd_lsctl_operating_with_set_089DC", "content.dd_lsctl_operating_with_set_08FE1" ] }, { "dlentry.dlentry_lsctl_operating_with_set_0BFB5": [ "content.dt_lsctl_operating_with_set_05BE3", "content.dd_lsctl_operating_with_set_019A3", "content.dd_lsctl_operating_with_set_0D253" ] }, { "dlentry.dlentry_lsctl_operating_with_set_0A4FD": [ "content.dt_lsctl_operating_with_set_07D62", "content.dd_lsctl_operating_with_set_0F192", "content.dd_lsctl_operating_with_set_09060", "content.dd_lsctl_operating_with_set_00A4B" ] }, { "dlentry.dlentry_lsctl_operating_with_set_07BFE": [ "content.dt_lsctl_operating_with_set_09FEF", "content.dd_lsctl_operating_with_set_090CE", "content.dd_lsctl_operating_with_set_09C92" ] }, { "dlentry.dlentry_lsctl_operating_with_set_0E58D": [ "content.dt_lsctl_operating_with_set_037AE", "content.dd_lsctl_operating_with_set_079AD", "content.dd_lsctl_operating_with_set_06CBB", "content.dd_lsctl_operating_with_set_01BC0", "content.note_lsctl_operating_with_set_072F3" ] } ] }, "content.title_lsctl_operating_with_set_0F624", "content.p_lsctl_operating_with_set_0BC9B", "content.p_lsctl_operating_with_set_02297", "content.p_lsctl_operating_with_set_02E30", "content.p_lsctl_operating_with_set_055CE", "content.p_lsctl_operating_with_set_0183D", "content.p_lsctl_operating_with_set_0DC70", "content.p_lsctl_operating_with_set_082BC", "content.p_lsctl_operating_with_set_0F805", "content.p_lsctl_operating_with_set_0D77E" ], "related": [ "loading_product_settings_from_file-latest-en" ] }, "lsctl_input_output_formats-latest-en.json": { "title": "title_lsctl_input_output_forma_02F26", "title_lsctl_input_output_forma_02F26": "Input and output formats", "shortdesc": "shortdesc_lsctl_input_output_forma_0E364", "shortdesc_lsctl_input_output_forma_0E364": "The format defines how the setting values that you provide are interpreted and how lsctl prints the setting values in its output. ", "content.p_lsctl_input_output_forma_01874": "An input format defines how the entered setting values should be formatted. The input format affects all sources of inputs. This means that it does not matter if the setting value is entered using command line arguments or if it is read from a file (by using the --file switch); all input must follow the same formatting rules.", "content.p_lsctl_input_output_forma_0F56C": "An output format defines how setting values are formatted when lsctl prints them.", "content.p_lsctl_input_output_forma_0B5B2": "lsctl currently supports two formats: json and raw. You can select these using the --json (-j) and --raw (-r) flags respectively. By default, lsctl currently uses the raw format, but this is subject to change. If you depend on the exact input or output format of lsctl, always specify the desired format explicitly by using these flags.", "content.title_lsctl_input_output_forma_0B9BE": "JSON", "content.p_lsctl_input_output_forma_01971": "When you specify the --json flag, lsctl expects the input to be valid JSON and outputs valid JSON. For example:", "content.p_lsctl_input_output_forma_02D11": "lsctl set --json http_proxy host '\"example.com\"'", "content.p_lsctl_input_output_forma_0C77F": "Note the need for double quotes. JSON strings are always enclosed in double quotes (\"). However, because of the way shell handles word splitting, you need to enclose the JSON string within an additional pair of single quotes to prevent shell from removing the quotes from the value. As this is something specific to the way shell handles command line arguments, you do not need this when the value is read from a file (by using the --file switch) or received from an interactive editor (the --prompt flag).", "content.p_lsctl_input_output_forma_0F950": "Format flags also affect the output format. For example:", "content.p_lsctl_input_output_forma_0D2E0": "lsctl get --json http_proxy host", "content.p_lsctl_input_output_forma_0C374": "\"example.com\"", "content.p_lsctl_input_output_forma_08894": "Note that the output is a valid JSON string literal.", "content.title_lsctl_input_output_forma_0F3A1": "Raw", "content.p_lsctl_input_output_forma_0481A": "When you specify the --raw flag, lsctl uses the raw format. The raw format modifies the JSON format slightly to make certain operations more ergonomic for command line users. The differences between json and raw formats are:", "step.step_lsctl_input_output_forma_07E54": "Text values for settings do not need to be enclosed in double quotes. This means that the following command is valid: lsctl set http_proxy host example.com", "step.step_lsctl_input_output_forma_01CF8": "Boolean values for settings support additional literals (yes, y, no and n) in addition to true and false. This makes the following command valid: lsctl set http_proxy enabled yes", "content.p_lsctl_input_output_forma_076AC": "Note that these additions only apply when you are operating directly with text or boolean value settings. They are not applied when these settings appear as a part of other settings. Therefore, the following command is not valid:", "content.p_lsctl_input_output_forma_0E65C": "lsctl set http proxy '{\"enabled\": yes, \"host\": example.com, \"port\": 9090}'", "desc": [ "content.p_lsctl_input_output_forma_01874", "content.p_lsctl_input_output_forma_0F56C", "content.p_lsctl_input_output_forma_0B5B2", "content.title_lsctl_input_output_forma_0B9BE", "content.p_lsctl_input_output_forma_01971", "content.p_lsctl_input_output_forma_02D11", "content.p_lsctl_input_output_forma_0C77F", "content.p_lsctl_input_output_forma_0F950", "content.p_lsctl_input_output_forma_0D2E0", "content.p_lsctl_input_output_forma_0C374", "content.p_lsctl_input_output_forma_08894", "content.title_lsctl_input_output_forma_0F3A1", "content.p_lsctl_input_output_forma_0481A", { "steps.ul_lsctl_input_output_forma_08763": [ "step.step_lsctl_input_output_forma_07E54", "step.step_lsctl_input_output_forma_01CF8" ] }, "content.p_lsctl_input_output_forma_076AC", "content.p_lsctl_input_output_forma_0E65C" ] }, "lsctl_working_with_arrays-latest-en.json": { "title": "title_lsctl_working_with_array_094FE", "title_lsctl_working_with_array_094FE": "Working with arrays", "shortdesc": "shortdesc_lsctl_working_with_array_02EE7", "shortdesc_lsctl_working_with_array_02EE7": "Arrays differ from other settings in that they can contain a variable number of member settings. ", "content.p_lsctl_working_with_array_0CE51": "You can add members to and remove them from arrays using the add and delete sub-commands.", "content.p_lsctl_working_with_array_0B9AF": "For example, you can add a new directory to include in on-access scanning by adding a new member to the oas include_paths setting, which is an array setting that contains string members:", "content.p_lsctl_working_with_array_0ECD8": "lsctl add oas include_paths /home", "content.p_lsctl_working_with_array_0DBA4": "The lsctl add command adds the /home directory to the array.", "content.p_lsctl_working_with_array_0A84C": "To remove the newly added directory from include_paths, use the following command:", "content.p_lsctl_working_with_array_0B16F": "lsctl del oas include_paths /home", "content.p_lsctl_working_with_array_035CD": "Arrays can also include more complex settings are also possible. For example, integrity checker profiles are stored in the ic profiles array. Each integrity checker profile is an object that defines the profile properties. To add a new integrity checker profile, you could use the following command:", "content.p_lsctl_working_with_array_077BA": "lsctl add --file - ic profiles <<EOF
{
\"path\": \"/home\",
\"verify_attributes\": {
\"mode\": false,
\"user\": false,
\"group\": false,
\"size\": false,
\"mtime\": false
},
\"read_action\": \"deny\",
\"write_action\": \"allow\"
}
EOF", "content.note_lsctl_working_with_array_0F178": "Note: This example uses shell's here document syntax to make it easier to enter multi-line values.", "content.p_lsctl_working_with_array_00324": "Note the use of the --file switch with the - argument to indicate that the value should be read from the standard input. Alternatively, you could use the --prompt flag to make entering large input values easier.", "content.p_lsctl_working_with_array_0B46B": "To delete the newly added profile, use the following command:", "content.p_lsctl_working_with_array_09FAC": "lsctl del ic profiles /home", "content.p_lsctl_working_with_array_04D47": "Here the path member is the key that is used to identify members within the profiles array. How an array's elements are identified is specific to each array.", "content.p_lsctl_working_with_array_0E832": "You can also access settings within arrays using the usual sub-commands. For example, you could retrieve the value of the write_action setting inside the newly added profile:", "content.p_lsctl_working_with_array_02D46": "lsctl get ic profiles /home write_action", "content.p_lsctl_working_with_array_0FA6E": "allow", "content.p_lsctl_working_with_array_0FD05": "Or you could change the value of the mode setting within verify_attributes:", "content.p_lsctl_working_with_array_0FD53": "lsctl set ic profiles /home verify_attributes mode yes", "content.p_lsctl_working_with_array_03AF8": "In addition to affecting the way that setting values are handled, input and output formats also affect how you enter array keys. For example, if you want to retrieve the value of write_action settings when using the JSON format, you would have to enter the lsctl command like this:", "content.p_lsctl_working_with_array_0C55B": "lsctl get --json ic profiles '\"/home\"' write_action", "content.p_lsctl_working_with_array_09971": "\"allow\"", "desc": [ "content.p_lsctl_working_with_array_0CE51", "content.p_lsctl_working_with_array_0B9AF", "content.p_lsctl_working_with_array_0ECD8", "content.p_lsctl_working_with_array_0DBA4", "content.p_lsctl_working_with_array_0A84C", "content.p_lsctl_working_with_array_0B16F", "content.p_lsctl_working_with_array_035CD", "content.p_lsctl_working_with_array_077BA", "content.note_lsctl_working_with_array_0F178", "content.p_lsctl_working_with_array_00324", "content.p_lsctl_working_with_array_0B46B", "content.p_lsctl_working_with_array_09FAC", "content.p_lsctl_working_with_array_04D47", "content.p_lsctl_working_with_array_0E832", "content.p_lsctl_working_with_array_02D46", "content.p_lsctl_working_with_array_0FA6E", "content.p_lsctl_working_with_array_0FD05", "content.p_lsctl_working_with_array_0FD53", "content.p_lsctl_working_with_array_03AF8", "content.p_lsctl_working_with_array_0C55B", "content.p_lsctl_working_with_array_09971" ] }, "loading_product_settings_from_file-latest-en.json": { "title": "title_loading_product_settings_030B2", "title_loading_product_settings_030B2": "Loading product settings from a file", "shortdesc": "shortdesc_loading_product_settings_0AC96", "shortdesc_loading_product_settings_0AC96": "You can use the lsctl load command to restore settings from a JSON file saved earlier. ", "content.p_loading_product_settings_0C16D": "Before you begin, make sure you have a JSON backup file created earlier, for example with lsctl get --json > [PATH] (or the equivalent atlantctl command).", "content.p_loading_product_settings_06BC9": "This allows you to save your tested, functioning product configuration as a backup and then restore it if necessary. To save the current product configuration, you could use the following command, for example:", "content.p_loading_product_settings_0AEE0": "lsctl get --json > [PATH]", "content.p_loading_product_settings_092D6": "For this command, replace [PATH] with the full path and filename for the JSON backup file.", "content.p_loading_product_settings_086AC": "lsctl load --json --file [PATH]", "content.p_loading_product_settings_0C517": "This applies all the settings that are available in the backup file specified as [PATH] to your product configuration. Any settings that are missing are reset to their default value.", "step.step_loading_product_settings_08ADC": "To restore the product settings, run the following command:", "desc": [ "content.p_loading_product_settings_0C16D", "content.p_loading_product_settings_06BC9", "content.p_loading_product_settings_0AEE0", "content.p_loading_product_settings_092D6", { "steps.steps_loading_product_settings_0E576": [ "step.step_loading_product_settings_08ADC", "content.p_loading_product_settings_086AC", "content.p_loading_product_settings_0C517" ] } ] }, "lsctl_using_lsctl_and_policy_manager-latest-en.json": { "title": "title_lsctl_using_lsctl_and_po_03AEB", "title_lsctl_using_lsctl_and_po_03AEB": "Using lsctl and Policy Manager", "shortdesc": "shortdesc_lsctl_using_lsctl_and_po_0740F", "shortdesc_lsctl_using_lsctl_and_po_0740F": "By default, when you use lsctl to change settings locally, those local settings override the centrally managed setting values received from Policy Manager. ", "content.p_lsctl_using_lsctl_and_po_0F385": "This behavior changes if a setting is marked as locked in Policy Manager. If a setting is locked, the value that is set for it in Policy Manager is always used.", "content.p_lsctl_using_lsctl_and_po_0CCD9": "You can use the reset sub-command to remove a local override and revert the setting back under the control of Policy Manager. For example, you can use lsctl to disable on-access scanning locally:", "content.p_lsctl_using_lsctl_and_po_0C424": "lsctl set oas enabled false", "content.p_lsctl_using_lsctl_and_po_0FAE7": "Now the on-access scanning status has been set locally and can no longer be controlled using Policy Manager, except by locking the setting. If the setting is changed using Policy Manger, those changes are not taken into use.", "content.p_lsctl_using_lsctl_and_po_08E9A": "To remove the local setting override and allow Policy Manager to control the on-access scanning status, use the reset sub-command:", "content.p_lsctl_using_lsctl_and_po_070B5": "lsctl reset oas enabled", "content.p_lsctl_using_lsctl_and_po_096D7": "Now the setting can again be changed using Policy Manager.", "desc": [ "content.p_lsctl_using_lsctl_and_po_0F385", "content.p_lsctl_using_lsctl_and_po_0CCD9", "content.p_lsctl_using_lsctl_and_po_0C424", "content.p_lsctl_using_lsctl_and_po_0FAE7", "content.p_lsctl_using_lsctl_and_po_08E9A", "content.p_lsctl_using_lsctl_and_po_070B5", "content.p_lsctl_using_lsctl_and_po_096D7" ] }, "inspecting_product_state-latest-en.json": { "title": "title_inspecting_product_state_07267", "title_inspecting_product_state_07267": "Inspecting the state of the product", "shortdesc": "shortdesc_inspecting_product_state_0FC18", "shortdesc_inspecting_product_state_0FC18": "You can use the lsctl command-line utility to inspect the state of the product and to view various scanning and performance statistics with the status sub-command. ", "content.title_inspecting_product_state_011F0": "Available status values", "content.p_inspecting_product_state_0F937": "Inspecting different status values works similarly to inspecting setting values:", "choice.choice_inspecting_product_state_0A400": "To get a status value, run lsctl status get [--json | --raw] STATUS...", "choice.choice_inspecting_product_state_0CCC9": "To see the help for a status, run lsctl status help [--json | --raw] STATUS...", "content.p_inspecting_product_state_0EDF4": "", "content.dt_inspecting_product_state_08535": "scan_service ", "content.dd_inspecting_product_state_0E5E9": "Type: JSON object
", "content.dd_inspecting_product_state_0BF2C": "All statistics related to the scanning service.", "content.dt_inspecting_product_state_0448E": "scan_service connection_count ", "content.dd_inspecting_product_state_09921": "Type: integer
", "content.dd_inspecting_product_state_0B7C9": "The number of connected hosts.", "content.dt_inspecting_product_state_07AE1": "scan_service last_detection ", "content.dd_inspecting_product_state_04578": "Type: string
", "content.dd_inspecting_product_state_0E8AB": "The name of the last detection.", "content.dt_inspecting_product_state_0161C": "scan_service max_connection_count ", "content.dd_inspecting_product_state_0A809": "Type: JSON object
", "content.dd_inspecting_product_state_079FF": "All statistics related to the maximum number of connected hosts.", "content.dt_inspecting_product_state_064F8": "scan_service max_connection_count daily ", "content.dd_inspecting_product_state_0E05B": "Type: integer
", "content.dd_inspecting_product_state_0D71B": "The maximum number of connected hosts in the last 24 hours.", "content.dt_inspecting_product_state_09721": "scan_service max_connection_count weekly ", "content.dd_inspecting_product_state_088F5": "Type: integer
", "content.dd_inspecting_product_state_01C34": "The maximum number of connected hosts in the last week.", "content.dt_inspecting_product_state_018C7": "scan_service max_connection_count monthly ", "content.dd_inspecting_product_state_015F0": "Type: integer
", "content.dd_inspecting_product_state_0665C": "The maximum number of connected hosts in the last month.", "content.dt_inspecting_product_state_0E2D6": "scan_service transaction_count ", "content.dd_inspecting_product_state_0B69C": "Type: JSON object
", "content.dd_inspecting_product_state_0F551": "All statistics related to the scanning transaction figures.", "content.dt_inspecting_product_state_03B3E": "scan_service transaction_count total ", "content.dd_inspecting_product_state_0347D": "Type: integer
", "content.dd_inspecting_product_state_0C982": "The total number of transactions.", "content.dt_inspecting_product_state_083DE": "scan_service transaction_count daily ", "content.dd_inspecting_product_state_04030": "Type: integer
", "content.dd_inspecting_product_state_0A1CE": "The number of transactions in the last 24 hours.", "content.dt_inspecting_product_state_03AF2": "scan_service transaction_count weekly ", "content.dd_inspecting_product_state_056F3": "Type: integer
", "content.dd_inspecting_product_state_0E15C": "The number of transactions in the last week.", "content.dt_inspecting_product_state_0FCA6": "scan_service transaction_count monthly ", "content.dd_inspecting_product_state_01F78": "Type: integer
", "content.dd_inspecting_product_state_088FD": "The number of transactions in the last month.", "content.dt_inspecting_product_state_0BE88": "scan_service detection_count ", "content.dd_inspecting_product_state_02146": "Type: JSON object
", "content.dd_inspecting_product_state_0EB1D": "All statistics related to the detection figures.", "content.dt_inspecting_product_state_0947B": "scan_service detection_count total ", "content.dd_inspecting_product_state_0122F": "Type: integer
", "content.dd_inspecting_product_state_008D7": "The number of detections.", "content.dt_inspecting_product_state_0968A": "scan_service detection_count daily ", "content.dd_inspecting_product_state_06D24": "Type: integer
", "content.dd_inspecting_product_state_05930": "The number of detections in the last 24 hours.", "content.dt_inspecting_product_state_09642": "scan_service detection_count weekly ", "content.dd_inspecting_product_state_05C8D": "Type: integer
", "content.dd_inspecting_product_state_05A57": "The number of detections in the last week.", "content.dt_inspecting_product_state_0EC45": "scan_service detection_count monthly ", "content.dd_inspecting_product_state_0E404": "Type: integer
", "content.dd_inspecting_product_state_06267": "The number of detections in the last month.", "content.dt_inspecting_product_state_00F4F": "scan_service min_transaction_latency ", "content.dd_inspecting_product_state_01B85": "Type: JSON object
", "content.dd_inspecting_product_state_03726": "All statistics related to the minimum latency in scanning transactions.", "content.dt_inspecting_product_state_07B74": "scan_service min_transaction_latency daily ", "content.dd_inspecting_product_state_0D8BB": "Type: integer
", "content.dd_inspecting_product_state_06B23": "The minimum transaction latency (milliseconds) in the last 24 hours.", "content.dt_inspecting_product_state_0B0D9": "scan_service min_transaction_latency weekly ", "content.dd_inspecting_product_state_01471": "Type: integer
", "content.dd_inspecting_product_state_0C268": "The minimum transaction latency (milliseconds) in the last week.", "content.dt_inspecting_product_state_0D243": "scan_service min_transaction_latency monthly ", "content.dd_inspecting_product_state_0ECEB": "Type: integer
", "content.dd_inspecting_product_state_0EF2B": "The minimum transaction latency (milliseconds) in the last month.", "content.dt_inspecting_product_state_03FE7": "scan_service max_transaction_latency ", "content.dd_inspecting_product_state_027AA": "Type: JSON object
", "content.dd_inspecting_product_state_0B87F": "All statistics related to the maximum latency in scanning transactions.", "content.dt_inspecting_product_state_0D630": "scan_service max_transaction_latency daily ", "content.dd_inspecting_product_state_03594": "Type: integer
", "content.dd_inspecting_product_state_0361B": "The maximum transaction latency (milliseconds) in the last 24 hours.", "content.dt_inspecting_product_state_07909": "scan_service max_transaction_latency weekly ", "content.dd_inspecting_product_state_01BFC": "Type: integer
", "content.dd_inspecting_product_state_0D048": "The maximum transaction latency (milliseconds) in the last week.", "content.dt_inspecting_product_state_067A9": "scan_service max_transaction_latency monthly ", "content.dd_inspecting_product_state_0A7F5": "Type: integer
", "content.dd_inspecting_product_state_0C38E": "The maximum transaction latency (milliseconds) in the last month.", "content.dt_inspecting_product_state_05431": "scan_service avg_transaction_latency ", "content.dd_inspecting_product_state_09098": "Type: JSON object
", "content.dd_inspecting_product_state_01B33": "All statistics related to the average latency in scanning transactions.", "content.dt_inspecting_product_state_0BA76": "scan_service avg_transaction_latency daily ", "content.dd_inspecting_product_state_08F00": "Type: integer
", "content.dd_inspecting_product_state_044CD": "The average transaction latency (milliseconds) in the last 24 hours.", "content.dt_inspecting_product_state_0812B": "scan_service avg_transaction_latency weekly ", "content.dd_inspecting_product_state_055E6": "Type: integer
", "content.dd_inspecting_product_state_09018": "The average transaction latency (milliseconds) in the last week.", "content.dt_inspecting_product_state_0BA41": "scan_service avg_transaction_latency monthly ", "content.dd_inspecting_product_state_0B871": "Type: integer
", "content.dd_inspecting_product_state_01213": "The average transaction latency (milliseconds) in the last month.", "content.dt_inspecting_product_state_06F6A": "product_version ", "content.dd_inspecting_product_state_048D6": "Type: JSON object
", "content.dd_inspecting_product_state_00522": "All information related to the product version.", "content.dt_inspecting_product_state_05CC4": "product_version name ", "content.dd_inspecting_product_state_0FEFB": "Type: string
", "content.dd_inspecting_product_state_0F7E1": "The name of the pinned product version. This can be an empty string if no pinned product version has been specified.", "content.note_inspecting_product_state_04EC7": "Note: If you use a pinned version of the product, it works for one year from the date when the new pinnable product version is released. You should update the product to the new version during that time.
", "content.dt_inspecting_product_state_01758": "product_version status ", "content.dd_inspecting_product_state_028C2": "Type: string
", "content.dd_inspecting_product_state_026DB": "A string representing the status of the pinned product version. The value can be unset, error, in-progress, or applied.", "desc": [ "content.title_inspecting_product_state_011F0", "content.p_inspecting_product_state_0F937", { "choices.ul_inspecting_product_state_0EF6F": [ "choice.choice_inspecting_product_state_0A400", "choice.choice_inspecting_product_state_0CCC9" ] }, { "dl.dl_inspecting_product_state_006C1": [ { "dlentry.dlentry_inspecting_product_state_03199": [ "content.dt_inspecting_product_state_08535", "content.dd_inspecting_product_state_0E5E9", "content.dd_inspecting_product_state_0BF2C" ] }, { "dlentry.dlentry_inspecting_product_state_0F5D7": [ "content.dt_inspecting_product_state_0448E", "content.dd_inspecting_product_state_09921", "content.dd_inspecting_product_state_0B7C9" ] }, { "dlentry.dlentry_inspecting_product_state_04CC2": [ "content.dt_inspecting_product_state_07AE1", "content.dd_inspecting_product_state_04578", "content.dd_inspecting_product_state_0E8AB" ] }, { "dlentry.dlentry_inspecting_product_state_0BB74": [ "content.dt_inspecting_product_state_0161C", "content.dd_inspecting_product_state_0A809", "content.dd_inspecting_product_state_079FF" ] }, { "dlentry.dlentry_inspecting_product_state_03FBB": [ "content.dt_inspecting_product_state_064F8", "content.dd_inspecting_product_state_0E05B", "content.dd_inspecting_product_state_0D71B" ] }, { "dlentry.dlentry_inspecting_product_state_002ED": [ "content.dt_inspecting_product_state_09721", "content.dd_inspecting_product_state_088F5", "content.dd_inspecting_product_state_01C34" ] }, { "dlentry.dlentry_inspecting_product_state_0C772": [ "content.dt_inspecting_product_state_018C7", "content.dd_inspecting_product_state_015F0", "content.dd_inspecting_product_state_0665C" ] }, { "dlentry.dlentry_inspecting_product_state_0F5C9": [ "content.dt_inspecting_product_state_0E2D6", "content.dd_inspecting_product_state_0B69C", "content.dd_inspecting_product_state_0F551" ] }, { "dlentry.dlentry_inspecting_product_state_02E41": [ "content.dt_inspecting_product_state_03B3E", "content.dd_inspecting_product_state_0347D", "content.dd_inspecting_product_state_0C982" ] }, { "dlentry.dlentry_inspecting_product_state_0E72A": [ "content.dt_inspecting_product_state_083DE", "content.dd_inspecting_product_state_04030", "content.dd_inspecting_product_state_0A1CE" ] }, { "dlentry.dlentry_inspecting_product_state_0FC3C": [ "content.dt_inspecting_product_state_03AF2", "content.dd_inspecting_product_state_056F3", "content.dd_inspecting_product_state_0E15C" ] }, { "dlentry.dlentry_inspecting_product_state_093CD": [ "content.dt_inspecting_product_state_0FCA6", "content.dd_inspecting_product_state_01F78", "content.dd_inspecting_product_state_088FD" ] }, { "dlentry.dlentry_inspecting_product_state_079BE": [ "content.dt_inspecting_product_state_0BE88", "content.dd_inspecting_product_state_02146", "content.dd_inspecting_product_state_0EB1D" ] }, { "dlentry.dlentry_inspecting_product_state_045EE": [ "content.dt_inspecting_product_state_0947B", "content.dd_inspecting_product_state_0122F", "content.dd_inspecting_product_state_008D7" ] }, { "dlentry.dlentry_inspecting_product_state_0AD0E": [ "content.dt_inspecting_product_state_0968A", "content.dd_inspecting_product_state_06D24", "content.dd_inspecting_product_state_05930" ] }, { "dlentry.dlentry_inspecting_product_state_0A984": [ "content.dt_inspecting_product_state_09642", "content.dd_inspecting_product_state_05C8D", "content.dd_inspecting_product_state_05A57" ] }, { "dlentry.dlentry_inspecting_product_state_05B15": [ "content.dt_inspecting_product_state_0EC45", "content.dd_inspecting_product_state_0E404", "content.dd_inspecting_product_state_06267" ] }, { "dlentry.dlentry_inspecting_product_state_03AA3": [ "content.dt_inspecting_product_state_00F4F", "content.dd_inspecting_product_state_01B85", "content.dd_inspecting_product_state_03726" ] }, { "dlentry.dlentry_inspecting_product_state_0A604": [ "content.dt_inspecting_product_state_07B74", "content.dd_inspecting_product_state_0D8BB", "content.dd_inspecting_product_state_06B23" ] }, { "dlentry.dlentry_inspecting_product_state_0811B": [ "content.dt_inspecting_product_state_0B0D9", "content.dd_inspecting_product_state_01471", "content.dd_inspecting_product_state_0C268" ] }, { "dlentry.dlentry_inspecting_product_state_0F04A": [ "content.dt_inspecting_product_state_0D243", "content.dd_inspecting_product_state_0ECEB", "content.dd_inspecting_product_state_0EF2B" ] }, { "dlentry.dlentry_inspecting_product_state_08278": [ "content.dt_inspecting_product_state_03FE7", "content.dd_inspecting_product_state_027AA", "content.dd_inspecting_product_state_0B87F" ] }, { "dlentry.dlentry_inspecting_product_state_00EBF": [ "content.dt_inspecting_product_state_0D630", "content.dd_inspecting_product_state_03594", "content.dd_inspecting_product_state_0361B" ] }, { "dlentry.dlentry_inspecting_product_state_06876": [ "content.dt_inspecting_product_state_07909", "content.dd_inspecting_product_state_01BFC", "content.dd_inspecting_product_state_0D048" ] }, { "dlentry.dlentry_inspecting_product_state_0682C": [ "content.dt_inspecting_product_state_067A9", "content.dd_inspecting_product_state_0A7F5", "content.dd_inspecting_product_state_0C38E" ] }, { "dlentry.dlentry_inspecting_product_state_0FC95": [ "content.dt_inspecting_product_state_05431", "content.dd_inspecting_product_state_09098", "content.dd_inspecting_product_state_01B33" ] }, { "dlentry.dlentry_inspecting_product_state_09A17": [ "content.dt_inspecting_product_state_0BA76", "content.dd_inspecting_product_state_08F00", "content.dd_inspecting_product_state_044CD" ] }, { "dlentry.dlentry_inspecting_product_state_0EDBB": [ "content.dt_inspecting_product_state_0812B", "content.dd_inspecting_product_state_055E6", "content.dd_inspecting_product_state_09018" ] }, { "dlentry.dlentry_inspecting_product_state_07C27": [ "content.dt_inspecting_product_state_0BA41", "content.dd_inspecting_product_state_0B871", "content.dd_inspecting_product_state_01213" ] }, { "dlentry.dlentry_inspecting_product_state_040F0": [ "content.dt_inspecting_product_state_06F6A", "content.dd_inspecting_product_state_048D6", "content.dd_inspecting_product_state_00522" ] }, { "dlentry.dlentry_inspecting_product_state_0200C": [ "content.dt_inspecting_product_state_05CC4", "content.dd_inspecting_product_state_0FEFB", "content.dd_inspecting_product_state_0F7E1", "content.note_inspecting_product_state_04EC7" ] }, { "dlentry.dlentry_inspecting_product_state_0C916": [ "content.dt_inspecting_product_state_01758", "content.dd_inspecting_product_state_028C2", "content.dd_inspecting_product_state_026DB" ] } ] } ] }, "settings_real_time_scanning-latest-en.json": { "title": "title_settings_real_time_scann_06971", "title_settings_real_time_scann_06971": "Command-line settings for real-time scanning", "shortdesc": "shortdesc_settings_real_time_scann_04724", "shortdesc_settings_real_time_scann_04724": "The settings related to real-time scanning that are available for lsctl. ", "content.title_settings_real_time_scann_0AECC": "Available settings", "content.p_settings_real_time_scann_041D8": "", "content.note_settings_real_time_scann_04ACF": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_real_time_scann_0E6F1": "oas ", "content.pd_settings_real_time_scann_0133B": "Type: JSON object
", "content.pd_settings_real_time_scann_05339": "All settings related to real-time scanning.", "content.pt_settings_real_time_scann_0F9C2": "oas enabled ", "content.pd_settings_real_time_scann_07AD5": "Type: boolean
", "content.pd_settings_real_time_scann_0888D": "Controls whether real-time scanning is on or off.", "content.pt_settings_real_time_scann_0F90B": "oas include_paths ", "content.pd_settings_real_time_scann_01D6D": "Type: JSON array
", "content.pd_settings_real_time_scann_0035E": "The paths included in real-time scanning.", "content.pt_settings_real_time_scann_03387": "oas include_paths [PATH] ", "content.pd_settings_real_time_scann_0406D": "Type: string
", "content.pd_settings_real_time_scann_02A61": "A path included in real-time scanning. For use with add and del commands. [PATH] must be a full, absolute path name.", "content.dd_p_settings_real_time_scann_095C4": "You can use wildcards in paths, with ** matching any subdirectories.
", "content.pt_settings_real_time_scann_0BAB5": "oas exclude_paths ", "content.pd_settings_real_time_scann_01F44": "Type: JSON array
", "content.pd_settings_real_time_scann_0EAE2": "The paths excluded from real-time scanning.", "content.pt_settings_real_time_scann_025F3": "oas exclude_paths [PATH] ", "content.pd_settings_real_time_scann_0C017": "Type: string
", "content.pd_settings_real_time_scann_0CC8D": "A path excluded from real-time scanning. For use with add and del commands. [PATH] must be a full, absolute path name.", "content.dd_p_settings_real_time_scann_0F941": "You can use wildcards in paths, with ** matching any subdirectories.
", "content.pt_settings_real_time_scann_08481": "oas trusted_application_paths", "content.pd_settings_real_time_scann_0CA3E": "Type: JSON array
", "content.pd_settings_real_time_scann_069B6": "The paths to trusted applications whose file access events are excluded from real-time scanning.", "content.pt_settings_real_time_scann_0A9E2": "oas trusted_application_paths [PATH]", "content.pd_settings_real_time_scann_0BCE7": "Type: string
", "content.pd_settings_real_time_scann_0900D": "A path to the executable file of a trusted application whose file access events are excluded from real-time scanning. For use with add and del commands. [PATH] must be a full, absolute path name. The path is a prefix match: any file path that starts with this path matches. For example, if you set /opt/app/, then /opt/app/bin/myapp matches.", "content.dd_p_settings_real_time_scann_012F4": "You can use wildcards in paths, with ** matching any subdirectories.
", "content.note_settings_real_time_scann_0B031": "Note: Exclusions reduce scanning but do not guarantee complete bypass, especially for short-lived processes.
", "content.pt_settings_real_time_scann_0476A": "oas actions ", "content.pd_settings_real_time_scann_093D6": "Type: JSON object
", "content.pd_settings_real_time_scann_0AF09": "The actions configuration for real-time scanning.", "content.pt_settings_real_time_scann_044CF": "oas actions malware ", "content.pd_settings_real_time_scann_008A5": "Type: string
", "content.scanning_actions_malware": "The action on detecting files that are identified as malware. Allowed values are:", "choice.choice_settings_real_time_scann_0CC71": "remove - delete the file", "choice.choice_settings_real_time_scann_0916B": "rename - add a .malware extension to the file name", "choice.choice_settings_real_time_scann_050E6": "none - do not do anything to the file", "content.pt_settings_real_time_scann_037BF": "oas actions suspected ", "content.pd_settings_real_time_scann_05A69": "Type: string
", "content.scanning_actions_suspected": "The action on detecting files that are suspected to be unsafe. Allowed values are:", "choice.choice_settings_real_time_scann_0B911": "remove - delete the file", "choice.choice_settings_real_time_scann_06F08": "rename - add a .suspected extension to the file name", "choice.choice_settings_real_time_scann_02815": "none - do not do anything to the file", "content.pt_settings_real_time_scann_0BC4C": "oas detect_pua ", "content.pd_settings_real_time_scann_06648": "Type: boolean
", "content.scanning_detect_pua": "Controls whether scanning for potentially unwanted applications (PUA) is on or off.", "content.pt_settings_real_time_scann_06103": "oas actions pua ", "content.pd_settings_real_time_scann_0FFEC": "Type: string
", "content.scanning_actions_pua": "The action on detecting files that are identified as potentially unwanted applications. Allowed values are:", "choice.choice_settings_real_time_scann_01160": "remove - delete the file", "choice.choice_settings_real_time_scann_0E659": "rename - add a .pua extension to the file name", "choice.choice_settings_real_time_scann_0755B": "none - do not do anything to the file", "content.pt_settings_real_time_scann_0ABF0": "oas scan_archives ", "content.pd_settings_real_time_scann_0E4E3": "Type: boolean
", "content.scanning_scan_archives": "Controls whether scanning inside archive files is on or off.", "content.pt_settings_real_time_scann_0A1CC": "oas block_archive_max_nested ", "content.pd_settings_real_time_scann_09296": "Type: boolean
", "content.scanning_block_nested": "Controls whether or not archive files that are too deeply nested are considered unsafe.", "content.pt_settings_real_time_scann_0AA9D": "oas archive_max_nested ", "content.pd_settings_real_time_scann_0D29B": "Type: integer
", "content.pd_settings_real_time_scann_0900A": "The maximum allowed level of nesting for archive files. If oas block_archive_max_nested is set to true, archive files that exceed this level of nesting are considered unsafe.", "content.pt_settings_real_time_scann_0FBFB": "oas block_encrypted_archives ", "content.pd_settings_real_time_scann_067A2": "Type: boolean
", "content.scanning_block_encrypted": "Controls whether or not encrypted archive files are considered unsafe.", "content.pt_settings_real_time_scann_088B0": "oas scan_only_executables ", "content.pd_settings_real_time_scann_08F41": "Type: boolean
", "content.pd_settings_real_time_scann_007AC": "Controls whether or not scanning is restricted to files that have execute permissions.", "desc": [ "content.title_settings_real_time_scann_0AECC", "content.note_settings_real_time_scann_04ACF", { "parml.parml_settings_real_time_scann_0BB6D": [ { "plentry.plentry_settings_real_time_scann_001A5": [ "content.pt_settings_real_time_scann_0E6F1", "content.pd_settings_real_time_scann_0133B", "content.pd_settings_real_time_scann_05339" ] }, { "plentry.plentry_settings_real_time_scann_0CD64": [ "content.pt_settings_real_time_scann_0F9C2", "content.pd_settings_real_time_scann_07AD5", "content.pd_settings_real_time_scann_0888D" ] }, { "plentry.plentry_settings_real_time_scann_00DCB": [ "content.pt_settings_real_time_scann_0F90B", "content.pd_settings_real_time_scann_01D6D", "content.pd_settings_real_time_scann_0035E" ] }, { "plentry.plentry_settings_real_time_scann_00699": [ "content.pt_settings_real_time_scann_03387", "content.pd_settings_real_time_scann_0406D", "content.pd_settings_real_time_scann_02A61", "content.dd_p_settings_real_time_scann_095C4" ] }, { "plentry.plentry_settings_real_time_scann_06AC3": [ "content.pt_settings_real_time_scann_0BAB5", "content.pd_settings_real_time_scann_01F44", "content.pd_settings_real_time_scann_0EAE2" ] }, { "plentry.plentry_settings_real_time_scann_06AA2": [ "content.pt_settings_real_time_scann_025F3", "content.pd_settings_real_time_scann_0C017", "content.pd_settings_real_time_scann_0CC8D", "content.dd_p_settings_real_time_scann_0F941" ] }, { "plentry.plentry_settings_real_time_scann_0C7F7": [ "content.pt_settings_real_time_scann_08481", "content.pd_settings_real_time_scann_0CA3E", "content.pd_settings_real_time_scann_069B6" ] }, { "plentry.plentry_settings_real_time_scann_0F856": [ "content.pt_settings_real_time_scann_0A9E2", "content.pd_settings_real_time_scann_0BCE7", "content.pd_settings_real_time_scann_0900D", "content.dd_p_settings_real_time_scann_012F4", "content.note_settings_real_time_scann_0B031" ] }, { "plentry.plentry_settings_real_time_scann_0F4DB": [ "content.pt_settings_real_time_scann_0476A", "content.pd_settings_real_time_scann_093D6", "content.pd_settings_real_time_scann_0AF09" ] }, { "plentry.plentry_settings_real_time_scann_0BF13": [ "content.pt_settings_real_time_scann_044CF", "content.pd_settings_real_time_scann_008A5", "content.scanning_actions_malware", { "choices.ul_settings_real_time_scann_0B1B9": [ "choice.choice_settings_real_time_scann_0CC71", "choice.choice_settings_real_time_scann_0916B", "choice.choice_settings_real_time_scann_050E6" ] } ] }, { "plentry.plentry_settings_real_time_scann_0C5AA": [ "content.pt_settings_real_time_scann_037BF", "content.pd_settings_real_time_scann_05A69", "content.scanning_actions_suspected", { "choices.ul_settings_real_time_scann_0FC19": [ "choice.choice_settings_real_time_scann_0B911", "choice.choice_settings_real_time_scann_06F08", "choice.choice_settings_real_time_scann_02815" ] } ] }, { "plentry.plentry_settings_real_time_scann_01E04": [ "content.pt_settings_real_time_scann_0BC4C", "content.pd_settings_real_time_scann_06648", "content.scanning_detect_pua" ] }, { "plentry.plentry_settings_real_time_scann_04E1D": [ "content.pt_settings_real_time_scann_06103", "content.pd_settings_real_time_scann_0FFEC", "content.scanning_actions_pua", { "choices.ul_settings_real_time_scann_03849": [ "choice.choice_settings_real_time_scann_01160", "choice.choice_settings_real_time_scann_0E659", "choice.choice_settings_real_time_scann_0755B" ] } ] }, { "plentry.plentry_settings_real_time_scann_06A72": [ "content.pt_settings_real_time_scann_0ABF0", "content.pd_settings_real_time_scann_0E4E3", "content.scanning_scan_archives" ] }, { "plentry.plentry_settings_real_time_scann_0D976": [ "content.pt_settings_real_time_scann_0A1CC", "content.pd_settings_real_time_scann_09296", "content.scanning_block_nested" ] }, { "plentry.plentry_settings_real_time_scann_0F56B": [ "content.pt_settings_real_time_scann_0AA9D", "content.pd_settings_real_time_scann_0D29B", "content.pd_settings_real_time_scann_0900A" ] }, { "plentry.plentry_settings_real_time_scann_01DAB": [ "content.pt_settings_real_time_scann_0FBFB", "content.pd_settings_real_time_scann_067A2", "content.scanning_block_encrypted" ] }, { "plentry.plentry_settings_real_time_scann_08FEB": [ "content.pt_settings_real_time_scann_088B0", "content.pd_settings_real_time_scann_08F41", "content.pd_settings_real_time_scann_007AC" ] } ] } ] }, "settings_manual_scheduled_scanning-latest-en.json": { "title": "title_settings_manual_schedule_0AC1D", "title_settings_manual_schedule_0AC1D": "Settings for manual and scheduled scanning", "shortdesc": "shortdesc_settings_manual_schedule_0A9A2", "shortdesc_settings_manual_schedule_0A9A2": "The settings related to manual and scheduled scanning that are available for lsctl. ", "content.title_settings_manual_schedule_0BA2B": "Available settings", "content.p_settings_manual_schedule_0A67F": "", "content.note_settings_manual_schedule_09AB4": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_manual_schedule_0D94F": "ods ", "content.pd_settings_manual_schedule_030A8": "Type: JSON object
", "content.pd_settings_manual_schedule_00FE5": "All settings related to manual and scheduled scanning.", "content.pt_settings_manual_schedule_0216F": "ods exclude_paths ", "content.pd_settings_manual_schedule_041A7": "Type: JSON array
", "content.pd_settings_manual_schedule_05DB9": "The paths excluded from scheduled scanning.", "content.pt_settings_manual_schedule_0CD9D": "ods exclude_paths [PATH] ", "content.pd_settings_manual_schedule_0B232": "Type: string
", "content.pd_settings_manual_schedule_07148": "A path excluded from scheduled scanning. For use with add and del commands. [PATH] must be a full, absolute path name.", "content.dd_p_settings_manual_schedule_0C444": "You can use wildcards in paths, with ** matching any subdirectories.
", "content.pt_settings_manual_schedule_0F1D5": "ods actions ", "content.pd_settings_manual_schedule_08596": "Type: JSON object
", "content.pd_settings_manual_schedule_02C14": "The actions configuration for manual and scheduled scanning.", "content.pt_settings_manual_schedule_0A4AF": "ods actions malware ", "content.pd_settings_manual_schedule_0F347": "Type: string
", "content.pd_settings_manual_schedule_07370": "The action on detecting files that are identified as malware. Allowed values are:", "choice.choice_settings_manual_schedule_0E083": "remove - delete the file", "choice.choice_settings_manual_schedule_06BB4": "rename - add a .malware extension to the file name", "choice.choice_settings_manual_schedule_020A5": "none - do not do anything to the file", "content.pt_settings_manual_schedule_06574": "ods actions suspected ", "content.pd_settings_manual_schedule_07D52": "Type: string
", "content.pd_settings_manual_schedule_0F847": "The action on detecting files that are suspected to be unsafe. Allowed values are:", "choice.choice_settings_manual_schedule_09462": "remove - delete the file", "choice.choice_settings_manual_schedule_05E29": "rename - add a .suspected extension to the file name", "choice.choice_settings_manual_schedule_03797": "none - do not do anything to the file", "content.pt_settings_manual_schedule_01852": "ods detect_pua ", "content.pd_settings_manual_schedule_05C23": "Type: boolean
", "content.pd_settings_manual_schedule_0E5A0": "Controls whether scanning for potentially unwanted applications (PUA) is on or off.", "content.pt_settings_manual_schedule_044AC": "ods actions pua ", "content.pd_settings_manual_schedule_0BF52": "Type: string
", "content.pd_settings_manual_schedule_0FCD1": "The action on detecting files that are identified as potentially unwanted applications. Allowed values are:", "choice.choice_settings_manual_schedule_043C3": "remove - delete the file", "choice.choice_settings_manual_schedule_01555": "rename - add a .pua extension to the file name", "choice.choice_settings_manual_schedule_09CB6": "none - do not do anything to the file", "content.pt_settings_manual_schedule_0B224": "ods scan_archives ", "content.pd_settings_manual_schedule_0F9C2": "Type: boolean
", "content.pd_settings_manual_schedule_0B807": "Controls whether scanning inside archive files is on or off.", "content.pt_settings_manual_schedule_0E1BD": "ods block_archive_max_nested ", "content.pd_settings_manual_schedule_04E7D": "Type: boolean
", "content.pd_settings_manual_schedule_09033": "Controls whether or not archive files that are too deeply nested are considered unsafe.", "content.pt_settings_manual_schedule_0E823": "ods archive_max_nested ", "content.pd_settings_manual_schedule_03B72": "Type: integer
", "content.pd_settings_manual_schedule_0F941": "The maximum allowed level of nesting for archive files. If ods block_archive_max_nested is set to true, archive files that exceed this level of nesting are considered unsafe.", "content.pt_settings_manual_schedule_02DDD": "ods block_encrypted_archives ", "content.pd_settings_manual_schedule_0BAC3": "Type: boolean
", "content.pd_settings_manual_schedule_019B9": "Controls whether or not encrypted archive files are considered unsafe.", "content.pt_settings_manual_schedule_02D81": "ods schedule ", "content.pd_settings_manual_schedule_0B5CD": "Type: JSON object
", "content.pd_settings_manual_schedule_03BE8": "All settings related to scheduled scanning.", "content.pt_settings_manual_schedule_0D730": "ods schedule schedule_type ", "content.pd_settings_manual_schedule_0AF17": "Type: string
", "content.pd_settings_manual_schedule_0F5A6": "Type of scheduled scanning in use. Currently the only allowed value is weekly.", "content.pt_settings_manual_schedule_04903": "ods schedule weekly_schedule ", "content.pd_settings_manual_schedule_0F1E3": "Type: JSON object
", "content.pd_settings_manual_schedule_09EB6": "Settings for scanning on a weekly schedule.", "content.pt_settings_manual_schedule_02A81": "ods schedule weekly_schedule [monday|tuesday|wednesday|thursday|friday|saturday|sunday] ", "content.pd_settings_manual_schedule_0AFAE": "Type: boolean
", "content.pd_settings_manual_schedule_0174E": "This group of settings controls if the scheduled scan is run on the given weekday.", "content.pt_settings_manual_schedule_0592A": "ods schedule weekly_schedule time_of_day ", "content.pd_settings_manual_schedule_0D901": "Type: string
", "content.pd_settings_manual_schedule_09271": "The time to start a scheduled scan on the set days. The value is a 24-hour time value (HH:MM) in the endpoint's time zone.", "desc": [ "content.title_settings_manual_schedule_0BA2B", "content.note_settings_manual_schedule_09AB4", { "parml.parml_settings_manual_schedule_0D17A": [ { "plentry.plentry_settings_manual_schedule_051C2": [ "content.pt_settings_manual_schedule_0D94F", "content.pd_settings_manual_schedule_030A8", "content.pd_settings_manual_schedule_00FE5" ] }, { "plentry.plentry_settings_manual_schedule_07930": [ "content.pt_settings_manual_schedule_0216F", "content.pd_settings_manual_schedule_041A7", "content.pd_settings_manual_schedule_05DB9" ] }, { "plentry.plentry_settings_manual_schedule_01755": [ "content.pt_settings_manual_schedule_0CD9D", "content.pd_settings_manual_schedule_0B232", "content.pd_settings_manual_schedule_07148", "content.dd_p_settings_manual_schedule_0C444" ] }, { "plentry.plentry_settings_manual_schedule_09C9B": [ "content.pt_settings_manual_schedule_0F1D5", "content.pd_settings_manual_schedule_08596", "content.pd_settings_manual_schedule_02C14" ] }, { "plentry.plentry_settings_manual_schedule_0E93B": [ "content.pt_settings_manual_schedule_0A4AF", "content.pd_settings_manual_schedule_0F347", "content.pd_settings_manual_schedule_07370", { "choices.ul_settings_manual_schedule_0FB42": [ "choice.choice_settings_manual_schedule_0E083", "choice.choice_settings_manual_schedule_06BB4", "choice.choice_settings_manual_schedule_020A5" ] } ] }, { "plentry.plentry_settings_manual_schedule_0D18F": [ "content.pt_settings_manual_schedule_06574", "content.pd_settings_manual_schedule_07D52", "content.pd_settings_manual_schedule_0F847", { "choices.ul_settings_manual_schedule_0A9DB": [ "choice.choice_settings_manual_schedule_09462", "choice.choice_settings_manual_schedule_05E29", "choice.choice_settings_manual_schedule_03797" ] } ] }, { "plentry.plentry_settings_manual_schedule_051FB": [ "content.pt_settings_manual_schedule_01852", "content.pd_settings_manual_schedule_05C23", "content.pd_settings_manual_schedule_0E5A0" ] }, { "plentry.plentry_settings_manual_schedule_023A8": [ "content.pt_settings_manual_schedule_044AC", "content.pd_settings_manual_schedule_0BF52", "content.pd_settings_manual_schedule_0FCD1", { "choices.ul_settings_manual_schedule_00D9A": [ "choice.choice_settings_manual_schedule_043C3", "choice.choice_settings_manual_schedule_01555", "choice.choice_settings_manual_schedule_09CB6" ] } ] }, { "plentry.plentry_settings_manual_schedule_0816F": [ "content.pt_settings_manual_schedule_0B224", "content.pd_settings_manual_schedule_0F9C2", "content.pd_settings_manual_schedule_0B807" ] }, { "plentry.plentry_settings_manual_schedule_011EA": [ "content.pt_settings_manual_schedule_0E1BD", "content.pd_settings_manual_schedule_04E7D", "content.pd_settings_manual_schedule_09033" ] }, { "plentry.plentry_settings_manual_schedule_08EB8": [ "content.pt_settings_manual_schedule_0E823", "content.pd_settings_manual_schedule_03B72", "content.pd_settings_manual_schedule_0F941" ] }, { "plentry.plentry_settings_manual_schedule_046B9": [ "content.pt_settings_manual_schedule_02DDD", "content.pd_settings_manual_schedule_0BAC3", "content.pd_settings_manual_schedule_019B9" ] }, { "plentry.plentry_settings_manual_schedule_00126": [ "content.pt_settings_manual_schedule_02D81", "content.pd_settings_manual_schedule_0B5CD", "content.pd_settings_manual_schedule_03BE8" ] }, { "plentry.plentry_settings_manual_schedule_0FA2F": [ "content.pt_settings_manual_schedule_0D730", "content.pd_settings_manual_schedule_0AF17", "content.pd_settings_manual_schedule_0F5A6" ] }, { "plentry.plentry_settings_manual_schedule_091A9": [ "content.pt_settings_manual_schedule_04903", "content.pd_settings_manual_schedule_0F1E3", "content.pd_settings_manual_schedule_09EB6" ] }, { "plentry.plentry_settings_manual_schedule_02AB5": [ "content.pt_settings_manual_schedule_02A81", "content.pd_settings_manual_schedule_0AFAE", "content.pd_settings_manual_schedule_0174E" ] }, { "plentry.plentry_settings_manual_schedule_0C174": [ "content.pt_settings_manual_schedule_0592A", "content.pd_settings_manual_schedule_0D901", "content.pd_settings_manual_schedule_09271" ] } ] } ] }, "orsp_settings-latest-en.json": { "title": "title_orsp_settings_000001_002160AF", "title_orsp_settings_000001_002160AF": "ORSP settings", "shortdesc": "shortdesc_orsp_settings_000002_C5708872", "shortdesc_orsp_settings_000002_C5708872": "The settings related to the Object Reputation Services Platform (ORSP) that are available for lsctl. ", "content.p_orsp_settings_00000F_C91F70C3": "", "content.note_orsp_settings_000010_228C01CA": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_orsp_settings_000014_D2B104AD": "orsp ", "content.pd_orsp_settings_000015_3315BD14": "Type: JSON object
", "content.pd_orsp_settings_000016_0976C1C7": "Settings related to using the cloud-based Object Reputation Services Platform (ORSP) in scanning.", "content.pt_orsp_settings_000018_E49276EF": "orsp enabled ", "content.pd_orsp_settings_000019_B382D553": "Type: boolean
", "content.pd_orsp_settings_00001A_E480B1E6": "Controls whether ORSP is switched on or off for file scanning.", "desc": [ "content.note_orsp_settings_000010_228C01CA", { "parml.parml_orsp_settings_000012_5307BF23": [ { "plentry.plentry_orsp_settings_000013_AC37493A": [ "content.pt_orsp_settings_000014_D2B104AD", "content.pd_orsp_settings_000015_3315BD14", "content.pd_orsp_settings_000016_0976C1C7" ] }, { "plentry.plentry_orsp_settings_000017_D6B608BA": [ "content.pt_orsp_settings_000018_E49276EF", "content.pd_orsp_settings_000019_B382D553", "content.pd_orsp_settings_00001A_E480B1E6" ] } ] } ] }, "settings_integrity_checking-latest-en.json": { "title": "title_settings_integrity_check_0FA41", "title_settings_integrity_check_0FA41": "Command-line settings for integrity checking", "shortdesc": "shortdesc_settings_integrity_check_0379F", "shortdesc_settings_integrity_check_0379F": "The settings related to integrity checking that are available for lsctl. ", "content.title_settings_integrity_check_0B67D": "Available settings", "content.p_settings_integrity_check_053C1": "", "content.note_settings_integrity_check_015D5": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_integrity_check_05E5C": "ic ", "content.pd_settings_integrity_check_0F9D9": "Type: JSON object
", "content.pd_settings_integrity_check_029D8": "All settings related to integrity checking.", "content.pt_settings_integrity_check_0563B": "ic enabled ", "content.pd_settings_integrity_check_0B602": "Type: boolean
", "content.pd_settings_integrity_check_0829F": "Controls whether integrity checking is on or off.", "content.pt_settings_integrity_check_0DA6E": "ic profiles ", "content.pd_settings_integrity_check_07537": "Type: JSON array
", "content.pd_settings_integrity_check_0734F": "The baseline list of path names included in integrity checking.", "content.pt_settings_integrity_check_03753": "ic profiles [PATH] ", "content.pd_settings_integrity_check_0EDF7": "Type: JSON object
", "content.pd_settings_integrity_check_0AF1A": "All integrity checking settings for the given path.", "content.pt_settings_integrity_check_0C543": "ic profiles [PATH] path ", "content.pd_settings_integrity_check_032FF": "Type: string
", "content.pd_settings_integrity_check_00CC8": "A path name included in integrity checking.", "content.pt_settings_integrity_check_028DF": "ic profiles [PATH] verify_attributes ", "content.pd_settings_integrity_check_07740": "Type: JSON object
", "content.pd_settings_integrity_check_0BB1A": "All monitored attributes for the given path.", "content.pt_settings_integrity_check_0D60B": "ic profiles [PATH] verify_attributes [mode|user|group|size|mtime] ", "content.pd_settings_integrity_check_0F6E5": "Type: boolean
", "content.pd_settings_integrity_check_043EB": "This group of settings controls whether to monitor changes in the file mode, the owning user or group, size, or modification time of the given path.", "content.pt_settings_integrity_check_03800": "ic profiles [PATH] read_action ", "content.pd_settings_integrity_check_0BE16": "Type: string
", "content.pd_settings_integrity_check_07134": "The action on an attempt to read from the given path if its contents or monitored attributes have changed. The allowed values are allow and deny, which respectively permit or prevent access to the file.", "content.pt_settings_integrity_check_08755": "ic profiles [PATH] write_action ", "content.pd_settings_integrity_check_0AF44": "Type: string
", "content.pd_settings_integrity_check_07D14": "The action on an attempt to write to the given path. The allowed values are allow and deny, which respectively permit or prevent access to the file.", "content.pt_settings_integrity_check_032EB": "ic profiles [PATH] exclude_patterns ", "content.pd_settings_integrity_check_0DAE7": "Type: JSON array
", "content.pd_settings_integrity_check_0A6E2": "List of file name patterns to be excluded from integrity checking. For example, \"*.log\" pattern could be used to exclude all files with .log file extension from integrity checking.", "content.note_settings_integrity_check_0DE9F": "Note: You can use wildcards in file name patterns, but the path does not support them.
", "content.pt_settings_integrity_check_08391": "ic system_updates ", "content.pd_settings_integrity_check_05270": "Type: boolean
", "content.pd_settings_integrity_check_0D24F": "This group of settings controls whether baseline is automatically updated whenever packages are installed or upgraded with package managers.", "content.pt_settings_integrity_check_0CA39": "ic system_updates apt ", "content.pd_settings_integrity_check_00413": "Type: boolean
", "content.pd_settings_integrity_check_0C88B": "This group of settings is for the APT package management system.", "content.pt_settings_integrity_check_0BB60": "ic system_updates apt enabled ", "content.pd_settings_integrity_check_0FB68": "Type: boolean
", "content.pd_settings_integrity_check_0DD37": "When the apt integration is enabled, integrity checking updates the baseline automatically whenever packages are installed or upgraded with apt and its related tools like apt-get.", "content.pt_settings_integrity_check_01E20": "ic system_updates dnf ", "content.pd_settings_integrity_check_05CC6": "Type: boolean
", "content.pd_settings_integrity_check_0EAE5": "This group of settings is for the DNF package manager.", "content.pt_settings_integrity_check_01FBF": "ic system_updates dnf enabled ", "content.pd_settings_integrity_check_04BB4": "Type: boolean
", "content.pd_settings_integrity_check_0FF98": "When the dnf integration is enabled, integrity checking updates the baseline automatically whenever packages are installed or upgraded with the dnf package manager.", "desc": [ "content.title_settings_integrity_check_0B67D", "content.note_settings_integrity_check_015D5", { "parml.parml_settings_integrity_check_0AB9C": [ { "plentry.plentry_settings_integrity_check_05C65": [ "content.pt_settings_integrity_check_05E5C", "content.pd_settings_integrity_check_0F9D9", "content.pd_settings_integrity_check_029D8" ] }, { "plentry.plentry_settings_integrity_check_0CDC1": [ "content.pt_settings_integrity_check_0563B", "content.pd_settings_integrity_check_0B602", "content.pd_settings_integrity_check_0829F" ] }, { "plentry.plentry_settings_integrity_check_0A121": [ "content.pt_settings_integrity_check_0DA6E", "content.pd_settings_integrity_check_07537", "content.pd_settings_integrity_check_0734F" ] }, { "plentry.plentry_settings_integrity_check_0F922": [ "content.pt_settings_integrity_check_03753", "content.pd_settings_integrity_check_0EDF7", "content.pd_settings_integrity_check_0AF1A" ] }, { "plentry.plentry_settings_integrity_check_06D72": [ "content.pt_settings_integrity_check_0C543", "content.pd_settings_integrity_check_032FF", "content.pd_settings_integrity_check_00CC8" ] }, { "plentry.plentry_settings_integrity_check_060F3": [ "content.pt_settings_integrity_check_028DF", "content.pd_settings_integrity_check_07740", "content.pd_settings_integrity_check_0BB1A" ] }, { "plentry.plentry_settings_integrity_check_04443": [ "content.pt_settings_integrity_check_0D60B", "content.pd_settings_integrity_check_0F6E5", "content.pd_settings_integrity_check_043EB" ] }, { "plentry.plentry_settings_integrity_check_0304F": [ "content.pt_settings_integrity_check_03800", "content.pd_settings_integrity_check_0BE16", "content.pd_settings_integrity_check_07134" ] }, { "plentry.plentry_settings_integrity_check_01607": [ "content.pt_settings_integrity_check_08755", "content.pd_settings_integrity_check_0AF44", "content.pd_settings_integrity_check_07D14" ] }, { "plentry.plentry_settings_integrity_check_04F54": [ "content.pt_settings_integrity_check_032EB", "content.pd_settings_integrity_check_0DAE7", "content.pd_settings_integrity_check_0A6E2", "content.note_settings_integrity_check_0DE9F" ] }, { "plentry.plentry_settings_integrity_check_0428B": [ "content.pt_settings_integrity_check_08391", "content.pd_settings_integrity_check_05270", "content.pd_settings_integrity_check_0D24F" ] }, { "plentry.plentry_settings_integrity_check_0B06A": [ "content.pt_settings_integrity_check_0CA39", "content.pd_settings_integrity_check_00413", "content.pd_settings_integrity_check_0C88B" ] }, { "plentry.plentry_settings_integrity_check_0E219": [ "content.pt_settings_integrity_check_0BB60", "content.pd_settings_integrity_check_0FB68", "content.pd_settings_integrity_check_0DD37" ] }, { "plentry.plentry_settings_integrity_check_04A85": [ "content.pt_settings_integrity_check_01E20", "content.pd_settings_integrity_check_05CC6", "content.pd_settings_integrity_check_0EAE5" ] }, { "plentry.plentry_settings_integrity_check_04047": [ "content.pt_settings_integrity_check_01FBF", "content.pd_settings_integrity_check_04BB4", "content.pd_settings_integrity_check_0FF98" ] } ] } ] }, "settings_offload_scanning-latest-en.json": { "title": "title_settings_offload_scannin_06082", "title_settings_offload_scannin_06082": "Command-line settings for offload scanning", "shortdesc": "shortdesc_settings_offload_scannin_00401", "shortdesc_settings_offload_scannin_00401": "The settings related to offload scanning that are available for lsctl. ", "content.title_settings_offload_scannin_0025A": "Available settings", "content.p_settings_offload_scannin_0F579": "", "content.note_settings_offload_scannin_0FA7B": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_offload_scannin_032B1": "offload_scanning ", "content.pd_settings_offload_scannin_0FDEE": "Type: boolean
", "content.pd_settings_offload_scannin_08D7E": "All settings related to offload scanning.", "content.pt_settings_offload_scannin_0E0D3": "offload_scanning enabled ", "content.pd_settings_offload_scannin_0D738": "Type: boolean
", "content.pd_settings_offload_scannin_012C3": "Controls whether offload scanning is on or off.", "content.pt_settings_offload_scannin_06C0A": "offload_scanning icap_servers ", "content.pd_settings_offload_scannin_030DF": "Type: JSON array
", "content.pd_settings_offload_scannin_04CBD": "List of ICAP servers that can be used for offloading scans.", "content.pt_settings_offload_scannin_0BBC3": "offload_scanning icap_servers [SERVER] ", "content.pd_settings_offload_scannin_0376B": "Type: string
", "content.pd_settings_offload_scannin_0DBD2": "The ICAP server settings.", "content.pt_settings_offload_scannin_094C4": "offload_scanning icap_servers [SERVER] address ", "content.pd_settings_offload_scannin_08202": "Type: string
", "content.pd_settings_offload_scannin_08A0D": "The address of the ICAP server that performs the offload scanning.", "content.pt_settings_offload_scannin_01681": "offload_scanning icap_servers [SERVER] port ", "content.pd_settings_offload_scannin_012AF": "Type: integer
", "content.pd_settings_offload_scannin_0A499": "The port number for offload scanning on the ICAP server.", "content.pt_settings_offload_scannin_0CF89": "offload_scanning timeout ", "content.pd_settings_offload_scannin_0FB8C": "Type: integer
", "content.pd_settings_offload_scannin_07BF9": "This setting controls the time, in seconds, to wait for a response from the offloading server.", "desc": [ "content.title_settings_offload_scannin_0025A", "content.note_settings_offload_scannin_0FA7B", { "parml.parml_settings_offload_scannin_0A5F9": [ { "plentry.plentry_settings_offload_scannin_0D055": [ "content.pt_settings_offload_scannin_032B1", "content.pd_settings_offload_scannin_0FDEE", "content.pd_settings_offload_scannin_08D7E" ] }, { "plentry.plentry_settings_offload_scannin_013F4": [ "content.pt_settings_offload_scannin_0E0D3", "content.pd_settings_offload_scannin_0D738", "content.pd_settings_offload_scannin_012C3" ] }, { "plentry.plentry_settings_offload_scannin_0DC41": [ "content.pt_settings_offload_scannin_06C0A", "content.pd_settings_offload_scannin_030DF", "content.pd_settings_offload_scannin_04CBD" ] }, { "plentry.plentry_settings_offload_scannin_0A5EE": [ "content.pt_settings_offload_scannin_0BBC3", "content.pd_settings_offload_scannin_0376B", "content.pd_settings_offload_scannin_0DBD2" ] }, { "plentry.plentry_settings_offload_scannin_041EC": [ "content.pt_settings_offload_scannin_094C4", "content.pd_settings_offload_scannin_08202", "content.pd_settings_offload_scannin_08A0D" ] }, { "plentry.plentry_settings_offload_scannin_0F8B5": [ "content.pt_settings_offload_scannin_01681", "content.pd_settings_offload_scannin_012AF", "content.pd_settings_offload_scannin_0A499" ] }, { "plentry.plentry_settings_offload_scannin_0ADF4": [ "content.pt_settings_offload_scannin_0CF89", "content.pd_settings_offload_scannin_0FB8C", "content.pd_settings_offload_scannin_07BF9" ] } ] } ] }, "concept_settings_logging-latest-en.json": { "title": "title_settings_logging_000001_F1E3A7", "title_settings_logging_000001_F1E3A7": "Command-line settings for logging", "shortdesc": "shortdesc_settings_logging_000002_EBE028", "shortdesc_settings_logging_000002_EBE028": "The settings related to logging that are available for lsctl.", "content.title_settings_logging_00000D_F6EDB3": "Available settings", "content.p_settings_logging_00000E_B7198F": "", "content.note_settings_logging_00000F_31C97C": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_logging_000013_0510C6": "logging", "content.pd_settings_logging_000014_B88FB8": "Type: JSON object
", "content.pd_settings_logging_000015_1868C5": "All logging settings.", "content.pt_settings_logging_000017_EF004D": "logging scanning", "content.pd_settings_logging_000018_1496F3": "Type: JSON object
", "content.pd_settings_logging_000019_797FC7": "Logging settings for scanning.", "content.pt_settings_logging_00001B_342867": "logging scanning rotation", "content.pd_settings_logging_00001C_F006FB": "Type: JSON object
", "content.pd_settings_logging_00001D_D11E10": "Log rotation settings for access.log.", "content.pt_settings_logging_000020_E79F50": "logging scanning rotation file_size", "content.pd_settings_logging_000021_1FE8A3": "Type: JSON object
", "content.pd_settings_logging_000022_126A2B": "Rotate the log when the file reaches a size limit.", "content.pt_settings_logging_000024_2BE25E": "logging scanning rotation file_size enabled", "content.pd_settings_logging_000025_84D617": "Type: boolean
", "content.pd_settings_logging_000026_F2233F": "Turns size-based rotation on or off. When off, access.log grows indefinitely.", "content.pt_settings_logging_000029_B15632": "logging scanning rotation file_size limit", "content.pd_settings_logging_00002A_F2936E": "Type: integer
", "content.pd_settings_logging_00002B_0DD455": "The size threshold, in bytes.", "content.pt_settings_logging_00002D_1494BF": "logging scanning rotation max_bytes", "content.pd_settings_logging_00002E_D02391": "Type: JSON object
", "content.pd_settings_logging_00002F_97F152": "Limit the total size of rotated logs.", "content.pt_settings_logging_000031_BB5991": "logging scanning rotation max_bytes enabled", "content.pd_settings_logging_000032_FC3691": "Type: boolean
", "content.pd_settings_logging_000033_DBC298": "Turns the cumulative size limit on or off.", "content.pt_settings_logging_000035_5082F7": "logging scanning rotation max_bytes limit", "content.pd_settings_logging_000036_925AE8": "Type: integer
", "content.pd_settings_logging_000037_DEF394": "The maximum cumulative size of rotated logs, in bytes.", "content.pt_settings_logging_000039_3750E6": "logging scanning rotation max_days", "content.pd_settings_logging_00003A_58941F": "Type: JSON object
", "content.pd_settings_logging_00003B_181DC0": "Limit how long to keep rotated logs.", "content.pt_settings_logging_00003D_C67FF0": "logging scanning rotation max_days enabled", "content.pd_settings_logging_00003E_B7FD63": "Type: boolean
", "content.pd_settings_logging_00003F_17CB25": "Turns the retention limit on or off.", "content.pt_settings_logging_000041_F9076D": "logging scanning rotation max_days limit", "content.pd_settings_logging_000042_3C8F04": "Type: integer
", "content.pd_settings_logging_000043_BDC9DF": "The maximum number of days to keep logs.", "content.pt_settings_logging_000045_03A48E": "logging scanning rotation max_files", "content.pd_settings_logging_000046_454BB4": "Type: JSON object
", "content.pd_settings_logging_000047_054AF0": "Limit the number of rotated files.", "content.pt_settings_logging_000049_EFFB9C": "logging scanning rotation max_files enabled", "content.pd_settings_logging_00004A_853F33": "Type: boolean
", "content.pd_settings_logging_00004B_E2FDB2": "Turns the file count limit on or off.", "content.pt_settings_logging_00004D_14D796": "logging scanning rotation max_files limit", "content.pd_settings_logging_00004E_BDAB8E": "Type: integer
", "content.pd_settings_logging_00004F_859C80": "The maximum number of rotated files.", "desc": [ "content.title_settings_logging_00000D_F6EDB3", "content.note_settings_logging_00000F_31C97C", { "parml.parml_settings_logging_000011_3B946B": [ { "plentry.plentry_settings_logging_000012_8E00E5": [ "content.pt_settings_logging_000013_0510C6", "content.pd_settings_logging_000014_B88FB8", "content.pd_settings_logging_000015_1868C5" ] }, { "plentry.plentry_settings_logging_000016_6F5D00": [ "content.pt_settings_logging_000017_EF004D", "content.pd_settings_logging_000018_1496F3", "content.pd_settings_logging_000019_797FC7" ] }, { "plentry.plentry_settings_logging_00001A_1945E3": [ "content.pt_settings_logging_00001B_342867", "content.pd_settings_logging_00001C_F006FB", "content.pd_settings_logging_00001D_D11E10" ] }, { "plentry.plentry_settings_logging_00001F_41F147": [ "content.pt_settings_logging_000020_E79F50", "content.pd_settings_logging_000021_1FE8A3", "content.pd_settings_logging_000022_126A2B" ] }, { "plentry.plentry_settings_logging_000023_F7E991": [ "content.pt_settings_logging_000024_2BE25E", "content.pd_settings_logging_000025_84D617", "content.pd_settings_logging_000026_F2233F" ] }, { "plentry.plentry_settings_logging_000028_A336BE": [ "content.pt_settings_logging_000029_B15632", "content.pd_settings_logging_00002A_F2936E", "content.pd_settings_logging_00002B_0DD455" ] }, { "plentry.plentry_settings_logging_00002C_430EBC": [ "content.pt_settings_logging_00002D_1494BF", "content.pd_settings_logging_00002E_D02391", "content.pd_settings_logging_00002F_97F152" ] }, { "plentry.plentry_settings_logging_000030_9E0D3F": [ "content.pt_settings_logging_000031_BB5991", "content.pd_settings_logging_000032_FC3691", "content.pd_settings_logging_000033_DBC298" ] }, { "plentry.plentry_settings_logging_000034_A2F231": [ "content.pt_settings_logging_000035_5082F7", "content.pd_settings_logging_000036_925AE8", "content.pd_settings_logging_000037_DEF394" ] }, { "plentry.plentry_settings_logging_000038_9D73D6": [ "content.pt_settings_logging_000039_3750E6", "content.pd_settings_logging_00003A_58941F", "content.pd_settings_logging_00003B_181DC0" ] }, { "plentry.plentry_settings_logging_00003C_C96327": [ "content.pt_settings_logging_00003D_C67FF0", "content.pd_settings_logging_00003E_B7FD63", "content.pd_settings_logging_00003F_17CB25" ] }, { "plentry.plentry_settings_logging_000040_26AAAD": [ "content.pt_settings_logging_000041_F9076D", "content.pd_settings_logging_000042_3C8F04", "content.pd_settings_logging_000043_BDC9DF" ] }, { "plentry.plentry_settings_logging_000044_5A5D6E": [ "content.pt_settings_logging_000045_03A48E", "content.pd_settings_logging_000046_454BB4", "content.pd_settings_logging_000047_054AF0" ] }, { "plentry.plentry_settings_logging_000048_3E5308": [ "content.pt_settings_logging_000049_EFFB9C", "content.pd_settings_logging_00004A_853F33", "content.pd_settings_logging_00004B_E2FDB2" ] }, { "plentry.plentry_settings_logging_00004C_1767F7": [ "content.pt_settings_logging_00004D_14D796", "content.pd_settings_logging_00004E_BDAB8E", "content.pd_settings_logging_00004F_859C80" ] } ] } ] }, "concept_settings_online_services-latest-en.json": { "title": "title_settings_online_services_043DA", "title_settings_online_services_043DA": "Command-line settings for online services", "shortdesc": "shortdesc_settings_online_services_0AE37", "shortdesc_settings_online_services_0AE37": "The settings related to online services that are available for lsctl.", "content.p_settings_online_services_045E7": "", "content.note_settings_online_services_07DB1": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_online_services_0561D": "online_services", "content.pd_settings_online_services_04CF0": "Type: JSON object
", "content.pd_settings_online_services_04956": "All online services settings.", "content.pt_settings_online_services_06791": "online_services enabled", "content.pd_settings_online_services_0CA6D": "Type: boolean
", "content.pd_settings_online_services_0713F": "", "content.dd_p_settings_online_services_0DE5A": "Enables or disables online services.
", "choice.choice_settings_online_services_0B5D4": "When true, features that need internet access are available.", "choice.choice_settings_online_services_01420": "When false, these features are turned off. The product can then run in environments with little or no internet access.", "desc": [ "content.note_settings_online_services_07DB1", { "parml.parml_settings_online_services_099EE": [ { "plentry.plentry_settings_online_services_09B0F": [ "content.pt_settings_online_services_0561D", "content.pd_settings_online_services_04CF0", "content.pd_settings_online_services_04956" ] }, { "plentry.plentry_settings_online_services_04318": [ "content.pt_settings_online_services_06791", "content.pd_settings_online_services_0CA6D", "content.pd_settings_online_services_0713F", "content.dd_p_settings_online_services_0DE5A", { "choices.ul_settings_online_services_0B166": [ "choice.choice_settings_online_services_0B5D4", "choice.choice_settings_online_services_01420" ] } ] } ] } ] }, "settings_automatic_updates-latest-en.json": { "title": "title_settings_automatic_updat_0A4BE", "title_settings_automatic_updat_0A4BE": "Command-line settings for automatic updates", "shortdesc": "shortdesc_settings_automatic_updat_01301", "shortdesc_settings_automatic_updat_01301": "The settings related to automatic updates that are available for lsctl. ", "content.title_settings_automatic_updat_0CAEE": "Available settings", "content.p_settings_automatic_updat_065AB": "", "content.note_settings_automatic_updat_00C8E": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_settings_automatic_updat_00CAA": "updates ", "content.pd_settings_automatic_updat_0BB87": "Type: JSON object
", "content.pd_settings_automatic_updat_0B3D2": "All settings related to automatic updates.", "content.pt_settings_automatic_updat_08D00": "updates enabled ", "content.pd_settings_automatic_updat_0C54F": "Type: boolean
", "content.pd_settings_automatic_updat_04055": "Controls whether automatic updates are switched on or off.", "content.pt_settings_automatic_updat_0060C": "updates product_version ", "content.pd_settings_automatic_updat_0224D": "Type: string
", "content.pd_settings_automatic_updat_0294C": "If not empty, this sets a specific product version to use instead of automatically updating to the latest available version.", "content.pt_settings_automatic_updat_022C1": "updates schedule ", "content.pd_settings_automatic_updat_0CAEF": "Type: JSON object
", "content.pd_settings_automatic_updat_07804": "The automatic update schedule.", "content.pt_settings_automatic_updat_0E7CF": "updates schedule regime ", "content.pd_settings_automatic_updat_00E9D": "Type: string
", "content.pd_settings_automatic_updat_02C9F": "The type of scheduling for automatic updates. The allowed values are:", "choice.choice_settings_automatic_updat_00C2E": "on_arrival - updates are applied as soon as they become available", "choice.choice_settings_automatic_updat_0A830": "at_date - updates are postponed until the time specified in the at_date_schedule setting", "choice.choice_settings_automatic_updat_0F245": "with_repetition - updates are applied regularly according to the repetition_schedule settings", "content.pt_settings_automatic_updat_0BD65": "updates schedule at_date_schedule ", "content.pd_settings_automatic_updat_094CC": "Type: integer
", "content.pd_settings_automatic_updat_06428": "The time to apply updates when regime is set to at_date. The value must be a timestamp in epoch time format.", "content.pt_settings_automatic_updat_0A1B0": "updates schedule repetition_schedule ", "content.pd_settings_automatic_updat_0AB0D": "Type: JSON object
", "content.pd_settings_automatic_updat_06613": "Settings related to automatic updates with a fixed repetition schedule.", "content.pt_settings_automatic_updat_04EE2": "updates schedule repetition_schedule day ", "content.pd_settings_automatic_updat_0801F": "Type: string
", "content.pd_settings_automatic_updat_04A32": "The scheduled day for repeated updates. Allowed values are daily, to check for updates every day at the specific time, or monday, tuesday, wednesday, thursday, friday, saturday, or sunday to check for updates on the given day each week.", "content.pt_settings_automatic_updat_09D95": "updates schedule repetition_schedule time_of_day ", "content.pd_settings_automatic_updat_054CF": "Type: string
", "content.pd_settings_automatic_updat_0F5C2": "The scheduled time of day for applying updates. The value is a 24-hour UTC time value (HH:MM).", "content.pt_settings_automatic_updat_0BFF7": "updates use_tls ", "content.pd_settings_automatic_updat_08225": "Type: boolean
", "content.pd_settings_automatic_updat_06956": "Controls whether Transport Layer Security (TLS) is used when downloading updates.", "desc": [ "content.title_settings_automatic_updat_0CAEE", "content.note_settings_automatic_updat_00C8E", { "parml.parml_settings_automatic_updat_0297C": [ { "plentry.plentry_settings_automatic_updat_025DC": [ "content.pt_settings_automatic_updat_00CAA", "content.pd_settings_automatic_updat_0BB87", "content.pd_settings_automatic_updat_0B3D2" ] }, { "plentry.plentry_settings_automatic_updat_04693": [ "content.pt_settings_automatic_updat_08D00", "content.pd_settings_automatic_updat_0C54F", "content.pd_settings_automatic_updat_04055" ] }, { "plentry.plentry_settings_automatic_updat_0B3EC": [ "content.pt_settings_automatic_updat_0060C", "content.pd_settings_automatic_updat_0224D", "content.pd_settings_automatic_updat_0294C" ] }, { "plentry.plentry_settings_automatic_updat_048F1": [ "content.pt_settings_automatic_updat_022C1", "content.pd_settings_automatic_updat_0CAEF", "content.pd_settings_automatic_updat_07804" ] }, { "plentry.plentry_settings_automatic_updat_0B91D": [ "content.pt_settings_automatic_updat_0E7CF", "content.pd_settings_automatic_updat_00E9D", "content.pd_settings_automatic_updat_02C9F", { "choices.ul_settings_automatic_updat_0738E": [ "choice.choice_settings_automatic_updat_00C2E", "choice.choice_settings_automatic_updat_0A830", "choice.choice_settings_automatic_updat_0F245" ] } ] }, { "plentry.plentry_settings_automatic_updat_060DC": [ "content.pt_settings_automatic_updat_0BD65", "content.pd_settings_automatic_updat_094CC", "content.pd_settings_automatic_updat_06428" ] }, { "plentry.plentry_settings_automatic_updat_08951": [ "content.pt_settings_automatic_updat_0A1B0", "content.pd_settings_automatic_updat_0AB0D", "content.pd_settings_automatic_updat_06613" ] }, { "plentry.plentry_settings_automatic_updat_042F1": [ "content.pt_settings_automatic_updat_04EE2", "content.pd_settings_automatic_updat_0801F", "content.pd_settings_automatic_updat_04A32" ] }, { "plentry.plentry_settings_automatic_updat_03854": [ "content.pt_settings_automatic_updat_09D95", "content.pd_settings_automatic_updat_054CF", "content.pd_settings_automatic_updat_0F5C2" ] }, { "plentry.plentry_settings_automatic_updat_0C6D8": [ "content.pt_settings_automatic_updat_0BFF7", "content.pd_settings_automatic_updat_08225", "content.pd_settings_automatic_updat_06956" ] } ] } ], "related": [ "updating_manually_using_update_archive-latest-en", "services_installed_ls64-latest-en" ] }, "http_proxy_settings-latest-en.json": { "title": "title_http_proxy_settings_000001051D", "title_http_proxy_settings_000001051D": "HTTP proxy settings", "shortdesc": "shortdesc_http_proxy_settings_000002966F", "shortdesc_http_proxy_settings_000002966F": "The settings related to HTTP proxy usage that are available for lsctl. ", "content.title_http_proxy_settings_00000FCFC7": "Available settings", "content.p_http_proxy_settings_0000101CAE": "", "content.note_http_proxy_settings_000011FB41": "Tip: To see an example of the structure for any of the settings, you can check the output for the following command: /opt/f-secure/linuxsecurity/bin/lsctl get [--json|--raw] [SETTING]", "content.pt_http_proxy_settings_0000155194": "http_proxy ", "content.pd_http_proxy_settings_000016B52E": "Type: JSON object
", "content.pd_http_proxy_settings_0000171982": "All HTTP proxy settings.", "content.pt_http_proxy_settings_000019D3D6": "http_proxy enabled ", "content.pd_http_proxy_settings_00001A329E": "Type: boolean
", "content.pd_http_proxy_settings_00001BE092": "Controls whether or not to use an HTTP proxy for features that require network access.", "content.pt_http_proxy_settings_00001D6B18": "http_proxy host ", "content.pd_http_proxy_settings_00001E828C": "Type: string
", "content.pd_http_proxy_settings_00001F441A": "The host name of the HTTP proxy.", "content.pt_http_proxy_settings_0000219BD2": "http_proxy port ", "content.pd_http_proxy_settings_0000222661": "Type: integer
", "content.pd_http_proxy_settings_0000233BF9": "The HTTP proxy port. The value must be a number between 1 and 65535.", "desc": [ "content.title_http_proxy_settings_00000FCFC7", "content.note_http_proxy_settings_000011FB41", { "parml.parml_http_proxy_settings_000013122C": [ { "plentry.plentry_http_proxy_settings_0000141196": [ "content.pt_http_proxy_settings_0000155194", "content.pd_http_proxy_settings_000016B52E", "content.pd_http_proxy_settings_0000171982" ] }, { "plentry.plentry_http_proxy_settings_000018C1F7": [ "content.pt_http_proxy_settings_000019D3D6", "content.pd_http_proxy_settings_00001A329E", "content.pd_http_proxy_settings_00001BE092" ] }, { "plentry.plentry_http_proxy_settings_00001C7FF2": [ "content.pt_http_proxy_settings_00001D6B18", "content.pd_http_proxy_settings_00001E828C", "content.pd_http_proxy_settings_00001F441A" ] }, { "plentry.plentry_http_proxy_settings_000020EB7E": [ "content.pt_http_proxy_settings_0000219BD2", "content.pd_http_proxy_settings_0000222661", "content.pd_http_proxy_settings_0000233BF9" ] } ] } ] }, "command_line_usage-latest-en.json": { "title": "title_command_line_usage_000001_B811", "title_command_line_usage_000001_B811": "Command line usage", "shortdesc": "shortdesc_command_line_usage_000002_A61C", "shortdesc_command_line_usage_000002_A61C": "This section describes the commands that you can run from the command line in the product. ", "content.p_command_line_usage_00000D_3097": "Use the command-line topics in this section to control product services, run scans, test protection, and update the product manually. The available procedures describe the commands and options for each operation.", "desc": [ "content.p_command_line_usage_00000D_3097" ] }, "starting_stopping_services-latest-en.json": { "title": "title_starting_stopping_servic_042D4", "title_starting_stopping_servic_042D4": "Starting and stopping services", "shortdesc": "shortdesc_starting_stopping_servic_0A934", "shortdesc_starting_stopping_servic_0A934": "The product contains a number of background services, which you can control using the /opt/f-secure/fsbg/bin/master-switch command. ", "content.p_starting_stopping_servic_0F3AF": "You can use the master-switch command to control all the services related to the product. The syntax for the command is:", "content.p_starting_stopping_servic_0DB02": "/opt/f-secure/fsbg/bin/master-switch ( on | off | status | enable | disable | is-enabled )", "content.note_starting_stopping_servic_0766B": "Note: Policy Manager controls whether or not the master-switch command can be used for turning off WithSecure services. Change this using the Linux > Centralized management > Allow users to unload products setting.", "content.p_starting_stopping_servic_05922": "Use the off sub-command to temporarily stop all WithSecure services:", "content.p_starting_stopping_servic_05AD1": "/opt/f-secure/fsbg/bin/master-switch off", "content.p_starting_stopping_servic_0C39C": "The on sub-command restarts the stopped services:", "content.p_starting_stopping_servic_0FC1A": "/opt/f-secure/fsbg/bin/master-switch on", "content.p_starting_stopping_servic_0C5B7": "To view the status of WithSecure services, use the status sub-command:", "content.p_starting_stopping_servic_07E0B": "/opt/f-secure/fsbg/bin/master-switch status", "content.p_starting_stopping_servic_06985": "The disable sub-command turns off all WithSecure services. The services stay turned off after you restart the computer. The enable sub-command turns on all WithSecure services again. Use the is-enabled sub-command to check if WithSecure services are turned on.", "desc": [ "content.p_starting_stopping_servic_0F3AF", "content.p_starting_stopping_servic_0DB02", "content.note_starting_stopping_servic_0766B", "content.p_starting_stopping_servic_05922", "content.p_starting_stopping_servic_05AD1", "content.p_starting_stopping_servic_0C39C", "content.p_starting_stopping_servic_0FC1A", "content.p_starting_stopping_servic_0C5B7", "content.p_starting_stopping_servic_07E0B", "content.p_starting_stopping_servic_06985" ] }, "scanning_manually-latest-en.json": { "title": "title_scanning_manually_000001_96595", "title_scanning_manually_000001_96595": "Scanning the computer manually from the command line", "shortdesc": "shortdesc_scanning_manually_000002_7F307", "shortdesc_scanning_manually_000002_7F307": "You can scan the computer for malware manually from the command line of a Linux host that has the product installed. ", "content.p_scanning_manually_00000F_2BDC2": "Make sure the user account you run fsanalyze as has read access to the files, and read and execute access to all directories to be scanned. To rename or remove infected files, the user also needs write access to those directories.", "content.p_scanning_manually_000012_7072F": "The fsanalyze command scans specified targets (files or directories) and reports any malicious code it detects.", "content.p_scanning_manually_000014_9D3B6": "If no files are specified on the command line, fsanalyze reads the standard input for content to analyze. Otherwise, every given file is analyzed and every given directory is scanned recursively, with the following exceptions:", "step.step_scanning_manually_000017_07FE4": "Special files (such as socket, FIFO, or device files), and files on the /proc and /sys special file systems are skipped.", "step.step_scanning_manually_00001A_4ED92": "Recursive scanning does not follow symbolic links unless this is explicitly requested with the --follow command line option.", "step.step_scanning_manually_00001C_B1675": "Recursive scanning does not automatically cross file system boundaries. To scan files mounted on other file systems, specify the mount points explicitly on the command line.", "content.note_scanning_manually_00001D_70C1F": "Note: The exclusions that are set in the current policy for manual scanning are applied when you use manual scanning from the command line. If you have excluded any paths in the manual scanning policy, recursive scanning crosses file system boundaries.", "content.p_scanning_manually_000022_16BB1": "Usage: fsanalyze [OPTIONS] [FILE...]", "content.p_scanning_manually_000024_F1626": "Analyze each FILE for potential malicious content. If no file is specified, analyze standard input, in which case the only supported action is none.", "content.dt_scanning_manually_00002A_FD5D9": "-h, --help ", "content.dd_scanning_manually_00002B_C0E8A": "Show help.", "content.dt_scanning_manually_00002D_D5E68": "--malware=ACTION ", "content.dd_scanning_manually_00002E_28021": "Action to take when a file is detected as malware. If ACTION is remove the file is removed; if ACTION is rename the file is renamed adding the detection type as an extension; if ACTION is none, the infection is only reported on standard output.
", "content.dd_scanning_manually_000032_92A88": "Default: rename", "content.dt_scanning_manually_000035_BA2FC": "--pua=ACTION ", "content.dd_scanning_manually_000036_D732A": "Action to take when a file is detected as a potentially unwanted application. Options for the action are the same as for malware.
", "content.dd_scanning_manually_000037_31A87": "Default: none", "content.dt_scanning_manually_00003A_76272": "--suspected=ACTION ", "content.dd_scanning_manually_00003B_E4304": "Action to take when a file is detected as suspicious. Options for the action are the same as for malware.
", "content.dd_scanning_manually_00003C_14E22": "Default: none", "content.dt_scanning_manually_00003F_65316": "-L, --follow ", "content.dd_scanning_manually_000040_B1D46": "Follow symbolic links.", "content.dt_scanning_manually_000042_8C8F1": "-l, --list ", "content.dd_scanning_manually_000043_6A922": "List all scanned files.", "content.dt_scanning_manually_000045_03074": "--preserve-atime=VALUE ", "content.dd_scanning_manually_000046_2571D": "Preserve the access time of files that are scanned. Value can be yes or no.
", "content.dd_scanning_manually_000049_BC1D9": "Default: no", "content.dt_scanning_manually_00004C_E4021": "-q, --quiet ", "content.dd_scanning_manually_00004D_B4FC7": "Only output the scan results.", "content.dt_scanning_manually_00004F_A188D": "--scan-archives=VALUE ", "content.dd_scanning_manually_000050_B3131": "Enable archive scanning. Value can be yes or no.
", "content.dd_scanning_manually_000053_FFF00": "Default: no", "content.dt_scanning_manually_000056_59278": "--max-nested=NUMBER ", "content.dd_scanning_manually_000057_E81D6": "Set the maximum allowed nesting level of scanned archives.
", "content.dd_scanning_manually_000058_04153": "Default: 5", "content.dt_scanning_manually_00005B_014D9": "--detect-max-nested=VALUE ", "content.dd_scanning_manually_00005C_90B86": "If enabled, treat archives that exceed the maximum depth as malware. Value can be yes or no.
", "content.dd_scanning_manually_00005F_19DD3": "Default: no", "content.dt_scanning_manually_000062_FA341": "--detect-encrypted-archives=VALUE ", "content.dd_scanning_manually_000063_A0885": "Treat encrypted archives as malware. Value can be yes or no.
", "content.dd_scanning_manually_000066_DF612": "Default: no", "content.dt_scanning_manually_000069_94668": "--detect-pua=VALUE ", "content.dd_scanning_manually_00006A_B35A6": "If disabled, potentially unwanted applications are ignored. Value can be yes or no.
", "content.dd_scanning_manually_00006D_A731D": "Default: yes", "content.dt_scanning_manually_000070_39EFC": "--use-orsp=VALUE ", "content.dd_scanning_manually_000071_B1E00": "If enabled, use the reputation service (ORSP) from Security Cloud. Value can be yes or no.
", "content.dd_scanning_manually_000074_C0281": "Default: yes", "content.dt_scanning_manually_000077_66DDA": "-v, --version ", "content.dd_scanning_manually_000078_66C05": "Display program version and exit.", "content.dt_scanning_manually_00007A_6E3EA": "--quoting-style=STYLE ", "content.dd_scanning_manually_00007B_6AC88": "Set how to quote the output. If STYLE is url, the output is URL-encoded; if STYLE is escape, ASCII control characters in the output are escaped as <NAME>, and if the output is not redirected to a file, they are also highlighted; if STYLE is literal, the output is printed as is.
", "content.dd_scanning_manually_000080_065E9": "Default: url", "content.dt_scanning_manually_000083_A0C32": "--ignore-exclude-paths ", "content.dd_scanning_manually_000084_4BEEF": "Does not use the exclusions set from the current policy for manual scanning.", "content.p_scanning_manually_000027_8CE89": "", "step.step_scanning_manually_00001F_FA594": "Run the following command from the shell to start the manual scan: /opt/f-secure/linuxsecurity/bin/fsanalyze [OPTIONS] [FILE...]", "content.p_scanning_manually_000086_0AB0F": "The scanning exit codes are as follows:", "step.step_scanning_manually_000088_6FB33": "0 = scanning was completed with no errors, and no malware, PUA, or suspicious content was detected", "step.step_scanning_manually_00008A_84FF1": "1 = scanning failed for one or more files", "step.step_scanning_manually_00008C_E7261": "2 = scanning was completed with no errors, but malware, PUA, or suspicious content was detected", "desc": [ "content.p_scanning_manually_00000F_2BDC2", "content.p_scanning_manually_000012_7072F", "content.p_scanning_manually_000014_9D3B6", { "steps.ul_scanning_manually_000016_F4DB8": [ "step.step_scanning_manually_000017_07FE4", "step.step_scanning_manually_00001A_4ED92", "step.step_scanning_manually_00001C_B1675" ] }, "content.note_scanning_manually_00001D_70C1F", { "steps.steps_scanning_manually_00001E_665AB": [ "step.step_scanning_manually_00001F_FA594", "content.p_scanning_manually_000022_16BB1", "content.p_scanning_manually_000024_F1626", "content.p_scanning_manually_000027_8CE89", { "dl.dl_scanning_manually_000028_964ED": [ { "dlentry.dlentry_scanning_manually_000029_F15E8": [ "content.dt_scanning_manually_00002A_FD5D9", "content.dd_scanning_manually_00002B_C0E8A" ] }, { "dlentry.dlentry_scanning_manually_00002C_3E9D5": [ "content.dt_scanning_manually_00002D_D5E68", "content.dd_scanning_manually_00002E_28021", "content.dd_scanning_manually_000032_92A88" ] }, { "dlentry.dlentry_scanning_manually_000034_B542B": [ "content.dt_scanning_manually_000035_BA2FC", "content.dd_scanning_manually_000036_D732A", "content.dd_scanning_manually_000037_31A87" ] }, { "dlentry.dlentry_scanning_manually_000039_0170F": [ "content.dt_scanning_manually_00003A_76272", "content.dd_scanning_manually_00003B_E4304", "content.dd_scanning_manually_00003C_14E22" ] }, { "dlentry.dlentry_scanning_manually_00003E_86C89": [ "content.dt_scanning_manually_00003F_65316", "content.dd_scanning_manually_000040_B1D46" ] }, { "dlentry.dlentry_scanning_manually_000041_F8765": [ "content.dt_scanning_manually_000042_8C8F1", "content.dd_scanning_manually_000043_6A922" ] }, { "dlentry.dlentry_scanning_manually_000044_0660F": [ "content.dt_scanning_manually_000045_03074", "content.dd_scanning_manually_000046_2571D", "content.dd_scanning_manually_000049_BC1D9" ] }, { "dlentry.dlentry_scanning_manually_00004B_A272D": [ "content.dt_scanning_manually_00004C_E4021", "content.dd_scanning_manually_00004D_B4FC7" ] }, { "dlentry.dlentry_scanning_manually_00004E_9FCF3": [ "content.dt_scanning_manually_00004F_A188D", "content.dd_scanning_manually_000050_B3131", "content.dd_scanning_manually_000053_FFF00" ] }, { "dlentry.dlentry_scanning_manually_000055_97731": [ "content.dt_scanning_manually_000056_59278", "content.dd_scanning_manually_000057_E81D6", "content.dd_scanning_manually_000058_04153" ] }, { "dlentry.dlentry_scanning_manually_00005A_DEFF3": [ "content.dt_scanning_manually_00005B_014D9", "content.dd_scanning_manually_00005C_90B86", "content.dd_scanning_manually_00005F_19DD3" ] }, { "dlentry.dlentry_scanning_manually_000061_B851F": [ "content.dt_scanning_manually_000062_FA341", "content.dd_scanning_manually_000063_A0885", "content.dd_scanning_manually_000066_DF612" ] }, { "dlentry.dlentry_scanning_manually_000068_B49C1": [ "content.dt_scanning_manually_000069_94668", "content.dd_scanning_manually_00006A_B35A6", "content.dd_scanning_manually_00006D_A731D" ] }, { "dlentry.dlentry_scanning_manually_00006F_8B8BD": [ "content.dt_scanning_manually_000070_39EFC", "content.dd_scanning_manually_000071_B1E00", "content.dd_scanning_manually_000074_C0281" ] }, { "dlentry.dlentry_scanning_manually_000076_DAB9A": [ "content.dt_scanning_manually_000077_66DDA", "content.dd_scanning_manually_000078_66C05" ] }, { "dlentry.dlentry_scanning_manually_000079_D6E1B": [ "content.dt_scanning_manually_00007A_6E3EA", "content.dd_scanning_manually_00007B_6AC88", "content.dd_scanning_manually_000080_065E9" ] }, { "dlentry.dlentry_scanning_manually_000082_09EFA": [ "content.dt_scanning_manually_000083_A0C32", "content.dd_scanning_manually_000084_4BEEF" ] } ] } ] }, "content.p_scanning_manually_000086_0AB0F", { "steps.ul_scanning_manually_000087_C049C": [ "step.step_scanning_manually_000088_6FB33", "step.step_scanning_manually_00008A_84FF1", "step.step_scanning_manually_00008C_E7261" ] } ] }, "testing_av-latest-en.json": { "title": "title_testing_av_000001_36AED9CE", "title_testing_av_000001_36AED9CE": "Testing the antivirus protection ", "shortdesc": "shortdesc_testing_av_000002_035D5049", "shortdesc_testing_av_000002_035D5049": "To test whether the product operates correctly, you can use a special test file that is detected as a virus. ", "content.p_testing_av_00000F_EE40A4B6": "The EICAR (EICAR is the European Institute of Computer Anti-virus Research) standard antivirus test file is detected by several antivirus programs. The Eicar info page can be found at EICAR info page.", "subchoice.choice_testing_av_000015_B90C49A1": "Download the EICAR test file from EICAR test file, or", "subchoice.choice_testing_av_000017_0B61BFBF": "Use any text editor to create the eicar.com file with the following single line in it: X5O!P%@AP[4\\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*", "step.step_testing_av_000012_F25E4850": "Download or create the EICAR test file.", "step.step_testing_av_000019_04F0F690": "Run the following command: /opt/f-secure/linuxsecurity/bin/fsanalyze eicar.com ", "content.p_testing_av_00001D_7869664F": "The product should detect the EICAR test file as a virus.", "desc": [ "content.p_testing_av_00000F_EE40A4B6", { "steps.steps_testing_av_000011_E80DFCFF": [ "step.step_testing_av_000012_F25E4850", { "subchoices.choices_testing_av_000014_3313E8AE": [ "subchoice.choice_testing_av_000015_B90C49A1", "subchoice.choice_testing_av_000017_0B61BFBF" ] }, "step.step_testing_av_000019_04F0F690" ] }, "content.p_testing_av_00001D_7869664F" ] }, "integrity_checker_command_line-latest-en.json": { "title": "title_integrity_checker_comman_01B72", "title_integrity_checker_comman_01B72": "Running the integrity checker from the command line", "shortdesc": "shortdesc_integrity_checker_comman_03FC6", "shortdesc_integrity_checker_comman_03FC6": "Integrity checking functionality is partially available on the command line. ", "content.p_integrity_checker_comman_0C825": "To run the integrity checker from the command line on a Linux host:", "step.step_integrity_checker_comman_0FCBE": "Log in to the Linux host as root.", "content.p_integrity_checker_comman_00B99": "Usage:", "cell.choptionhd_integrity_checker_comman_0AD9C": "Option", "cell.chdeschd_integrity_checker_comman_0106A": "Description", "cell.choption_integrity_checker_comman_0D3C3": "fsic verify", "cell.chdesc_integrity_checker_comman_0F086": "This checks each file in the baseline that is configured for the policy. It checks if the file has been tampered with and also scans the file for malware. The command prints every file that fails verification to the standard output.", "cell.choption_integrity_checker_comman_090E4": "fsic unprotect", "cell.chdesc_integrity_checker_comman_0FCA3": "This allows baseline files to be modified.", "cell.choption_integrity_checker_comman_0260B": "fsic protect", "cell.chdesc_integrity_checker_comman_052CD": "This regenerates the baseline index and prevents modifications to the baseline files.", "step.step_integrity_checker_comman_0B822": "Run the following command from the shell: /opt/f-secure/linuxsecurity/bin/fsic", "subchoice.choice_integrity_checker_comman_052B2": "0 = No errors or failed verification results were encountered", "subchoice.choice_integrity_checker_comman_0D38B": "1 = An error occurred that prevented the command from running successfully", "subchoice.choice_integrity_checker_comman_0728D": "2 = One or more files have been tampered with or contained malware, PUA, or suspicious content", "step.step_integrity_checker_comman_00DA1": "Check the exit code for the command:", "desc": [ "content.p_integrity_checker_comman_0C825", { "steps.steps_integrity_checker_comman_0624F": [ "step.step_integrity_checker_comman_0FCBE", "step.step_integrity_checker_comman_0B822", "content.p_integrity_checker_comman_00B99", { "table.table_integrity_checker_comman_06308": [ { "thead.chhead_integrity_checker_comman_00D44": [ "cell.choptionhd_integrity_checker_comman_0AD9C", "cell.chdeschd_integrity_checker_comman_0106A" ] }, { "row.chrow_integrity_checker_comman_0CFBA": [ "cell.choption_integrity_checker_comman_0D3C3", "cell.chdesc_integrity_checker_comman_0F086" ] }, { "row.chrow_integrity_checker_comman_062CB": [ "cell.choption_integrity_checker_comman_090E4", "cell.chdesc_integrity_checker_comman_0FCA3" ] }, { "row.chrow_integrity_checker_comman_06AA9": [ "cell.choption_integrity_checker_comman_0260B", "cell.chdesc_integrity_checker_comman_052CD" ] } ] }, "step.step_integrity_checker_comman_00DA1", { "subchoices.choices_integrity_checker_comman_04A49": [ "subchoice.choice_integrity_checker_comman_052B2", "subchoice.choice_integrity_checker_comman_0D38B", "subchoice.choice_integrity_checker_comman_0728D" ] } ] } ] }, "updating_the_product_manually_from_the_command_line-latest-en.json": { "title": "title_updating_the_product_man_009F1", "title_updating_the_product_man_009F1": "Updating the product manually from the command line", "shortdesc": "shortdesc_updating_the_product_man_03508", "shortdesc_updating_the_product_man_03508": "You can update the product, the malware definition databases, and the scanning engines manually to their latest versions using the lsctl program. ", "content.note_updating_the_product_man_0296D": "Note: The instructions in this topic do not apply to isolated product installations.", "content.p_updating_the_product_man_08D27": "You can update the product from the command line by running the following command as the root user:", "content.p_updating_the_product_man_0813E": "/opt/f-secure/linuxsecurity/bin/lsctl update", "content.p_updating_the_product_man_0D139": "This command checks for the availability of new updates over the network, and downloads and installs them on the system to make sure that everything is up to date.", "content.p_updating_the_product_man_01273": "The --timeout option can be used to specify the period of time to wait, in seconds, for the update to complete before letting it finish in the background. The value 0, which is used as the default if the option is not specified, disables the timeout.", "content.note_updating_the_product_man_0BE9E": "Note: There are a few things to consider before and during the update: ", "desc": [ "content.note_updating_the_product_man_0296D", "content.p_updating_the_product_man_08D27", "content.p_updating_the_product_man_0813E", "content.p_updating_the_product_man_0D139", "content.p_updating_the_product_man_01273", "content.note_updating_the_product_man_0BE9E" ], "related": [ "updating_manually_using_update_archive-latest-en", "starting_stopping_services-latest-en" ] }, "updating_manually_using_update_archive-latest-en.json": { "title": "title_updating_manually_using__04877", "title_updating_manually_using__04877": "Updating the product manually using an update archive", "shortdesc": "shortdesc_updating_manually_using__050BE", "shortdesc_updating_manually_using__050BE": "In isolated environments with limited network connectivity, you can update the product and virus definition databases by creating an update archive and deploying it on the hosts. ", "content.note_updating_manually_using__08358": "Note: To generate the update archive, use a computer that has network access to WithSecure servers and either Policy Manager Server (Linux or Windows) installed or a separately available fspm-definitions-update-tool downloaded (Linux).", "content.p_updating_manually_using__0D86B": "Follow these instructions to create the update archive and install the updates with the update tool.", "content.note_updating_manually_using__002C2": "Note: These instructions are for Linux. You can find the command path and the syntax for Windows in the Policy Manager administrator's guide.", "subchoice.choice_updating_manually_using__09771": "If you are using the fspm-definitions-update-tool tool from Policy Manager Server 16, then you are already at a new enough version.", "subchoice.choice_updating_manually_using__0B586": "If you are not using Policy Manager 16, or are unsure about the version of the fspm-definitions-update-tool tool, download the latest program version from the product support page.", "content.p_updating_manually_using__0E019": "", "step.step_updating_manually_using__08716": "Make sure that you have the current version of fspm-definitions-update-tool.", "content.p_updating_manually_using__0D915": "This computer must have a network connection so that it can connect to WithSecure servers.", "step.step_updating_manually_using__0D43C": "Open a command line.", "content.p_updating_manually_using__07A73": "Make sure that you use an existing directory. In the following examples, replace <DIR> with the path to that directory.", "step.step_updating_manually_using__05401": "Select the directory where you want to extract the Policy Manager definitions update tool.", "content.p_updating_manually_using__01B7C": "/opt/f-secure/fspms/bin/prepare-fspm-definitions-update-tool <DIR>", "subchoice.choice_updating_manually_using__00211": "If you have Policy Manager Server, run the following command:", "content.p_updating_manually_using__0F5A7": "tar -C <DIR> -xf /PATH/TO/fspm-definitions-update-tool.tar.gz", "subchoice.choice_updating_manually_using__06BE0": "If you have downloaded the fspm-definitions-update-tool.tar.gz file, run the following command:", "step.step_updating_manually_using__05B09": "Extract the definitions update tool.", "step.step_updating_manually_using__0C6D6": "Make sure that you have the latest version of the channels.json file. If you are unsure about the version, download the latest channels.json file.", "content.note_updating_manually_using__01B7A": "Note: Make sure to keep the channels.json file name when copying. You may safely replace any previous version of the file which may already exist in the directory.", "step.step_updating_manually_using__02D1D": "Copy the file into the <DIR>/fspm-definitions-update-tool/conf/ directory.", "content.p_updating_manually_using__024DD": "rm -rf <DIR>/fspm-definitions-update-tool/data/", "step.step_updating_manually_using__021F6": "Make sure that the <DIR>/fspm-definitions-update-tool/data/ directory is empty or does not exist by running the following command:", "content.p_updating_manually_using__090C0": "<DIR>/fspm-definitions-update-tool/fspm-definitions-update-tool", "content.p_updating_manually_using__08FB1": "This command will create two ZIP files, f-secure-updates.zip and withsecure-updates.zip, under the <DIR>/fspm-definitions-update-tool/data/ directory.", "step.step_updating_manually_using__09FC7": "Run the following command to create the content package:", "subchoice.choice_updating_manually_using__0135E": "Log on to the host on which you wish to install the updates.", "subchoice.choice_updating_manually_using__051AE": "Run the following command and check the last line of the command output to choose which one of the ZIP files you use for installing the updates: /opt/f-secure/fsbg/bin/withsecure-migrator status", "subchoice.choice_updating_manually_using__0BB51": "If the system reports that the command does not exist or if the command reports “not-performed” or “not-ready”, use the f-secure-updates.zip archive for installing updates on the host.", "subchoice.choice_updating_manually_using__096BD": "If the command reports “migrated”, use the withsecure-updates.zip file to install the updates.", "content.note_updating_manually_using__0540F": "Note: Only one of the ZIP files is needed.", "content.p_updating_manually_using__07B14": "The program prepares the updates for installation and prints the channel names as the updates are extracted from the archive and then registered for installation.", "subchoice.choice_updating_manually_using__06A71": "Copy the appropriate zip file to the host, and run the following command as the root user to install the product updates: /opt/f-secure/fsbg/bin/offline-update /PATH/TO/ZIP-FILE", "content.p_updating_manually_using__0FA38": "The registered updates are installed immediately without regard to any update schedule that is defined in the product configuration.", "content.p_updating_manually_using__07247": "", "step.step_updating_manually_using__0D0EC": "Install the updates on a host as follows:", "step.step_updating_manually_using__015D9": "Repeat the previous step to copy and install the updates on each host where you want to install them.", "content.note_updating_manually_using__0A3E8": "Note: To create another update archive with newer updates, repeat steps starting from the step 7. An empty data directory is required to create packages that are valid for use with Linux Security 64.", "desc": [ "content.note_updating_manually_using__08358", "content.p_updating_manually_using__0D86B", "content.note_updating_manually_using__002C2", { "steps.steps_updating_manually_using__02BFF": [ "step.step_updating_manually_using__08716", "content.p_updating_manually_using__0E019", { "subchoices.ul_updating_manually_using__0251A": [ "subchoice.choice_updating_manually_using__09771", "subchoice.choice_updating_manually_using__0B586" ] }, "step.step_updating_manually_using__0D43C", "content.p_updating_manually_using__0D915", "step.step_updating_manually_using__05401", "content.p_updating_manually_using__07A73", "step.step_updating_manually_using__05B09", { "subchoices.choices_updating_manually_using__08AF1": [ "subchoice.choice_updating_manually_using__00211", "content.p_updating_manually_using__01B7C", "subchoice.choice_updating_manually_using__06BE0", "content.p_updating_manually_using__0F5A7" ] }, "step.step_updating_manually_using__0C6D6", "step.step_updating_manually_using__02D1D", "content.note_updating_manually_using__01B7A", "step.step_updating_manually_using__021F6", "content.p_updating_manually_using__024DD", "step.step_updating_manually_using__09FC7", "content.p_updating_manually_using__090C0", "content.p_updating_manually_using__08FB1", "step.step_updating_manually_using__0D0EC", "content.p_updating_manually_using__07247", { "subchoices.ul_updating_manually_using__07DE6": [ "subchoice.choice_updating_manually_using__0135E", "subchoice.choice_updating_manually_using__051AE", "subchoice.choice_updating_manually_using__0BB51", "subchoice.choice_updating_manually_using__096BD", "subchoice.choice_updating_manually_using__06A71", "content.note_updating_manually_using__0540F", "content.p_updating_manually_using__07B14" ] }, "content.p_updating_manually_using__0FA38", "step.step_updating_manually_using__015D9" ] }, "content.note_updating_manually_using__0A3E8" ] }, "alert_levels-latest-en.json": { "title": "title_alert_levels_000001_C29E371F", "title_alert_levels_000001_C29E371F": "Alert severity levels ", "shortdesc": "shortdesc_alert_levels_000002_22D00CCC", "shortdesc_alert_levels_000002_22D00CCC": "Alerts are divided into severity levels. ", "content.title_alert_levels_00000B_7B52C049": "Severity levels", "cell.entry_alert_levels_000012_51A22C3D": "Severity level", "cell.entry_alert_levels_000013_3D1455AF": "Syslog priority", "cell.entry_alert_levels_000014_3BB8B849": "Description", "cell.entry_alert_levels_000017_095FD5FF": "Informational", "cell.entry_alert_levels_000018_8F89BA8E": "info", "cell.entry_alert_levels_000019_F03F903B": "Normal operating information from the host.", "cell.entry_alert_levels_00001C_A13DB97F": "Warning", "cell.entry_alert_levels_00001D_A24C529A": "warning", "cell.entry_alert_levels_00001E_F69D75F6": "A warning from the host.
For example, an error when trying to read a file.", "cell.entry_alert_levels_000022_3AE852BA": "Error", "cell.entry_alert_levels_000023_5AB5C038": "err", "cell.entry_alert_levels_000024_46149613": "Recoverable error on the host.
For example, the virus definition database update is older than the earlier accepted version.", "cell.entry_alert_levels_000028_9D28ED72": "Fatal Error", "cell.entry_alert_levels_000029_E6A7BBA5": "emerg", "cell.entry_alert_levels_00002A_B12AC69A": "Unrecoverable error on the host that requires attention from the administrator.
For example, a process fails to start or loading a kernel module fails.", "cell.entry_alert_levels_00002E_D04C71FB": "Security alert", "cell.entry_alert_levels_00002F_A006333B": "alert", "cell.entry_alert_levels_000030_45DF576D": "A security alert on the host.
For example, a virus-alert. The alert includes information of the infection and the performed operation.", "desc": [ "content.title_alert_levels_00000B_7B52C049", { "table.table_severity-levels": [ { "thead.thead_alert_levels_000010_0B1265A4": [ "cell.entry_alert_levels_000012_51A22C3D", "cell.entry_alert_levels_000013_3D1455AF", "cell.entry_alert_levels_000014_3BB8B849" ] }, { "row.row_alert_levels_000016_A026A00F": [ "cell.entry_alert_levels_000017_095FD5FF", "cell.entry_alert_levels_000018_8F89BA8E", "cell.entry_alert_levels_000019_F03F903B" ] }, { "row.row_alert_levels_00001B_86CC4389": [ "cell.entry_alert_levels_00001C_A13DB97F", "cell.entry_alert_levels_00001D_A24C529A", "cell.entry_alert_levels_00001E_F69D75F6" ] }, { "row.row_alert_levels_000021_3989F670": [ "cell.entry_alert_levels_000022_3AE852BA", "cell.entry_alert_levels_000023_5AB5C038", "cell.entry_alert_levels_000024_46149613" ] }, { "row.row_alert_levels_000027_9CDFAF2E": [ "cell.entry_alert_levels_000028_9D28ED72", "cell.entry_alert_levels_000029_E6A7BBA5", "cell.entry_alert_levels_00002A_B12AC69A" ] }, { "row.row_alert_levels_00002D_09632057": [ "cell.entry_alert_levels_00002E_D04C71FB", "cell.entry_alert_levels_00002F_A006333B", "cell.entry_alert_levels_000030_45DF576D" ] } ] } ] }, "services_and_logs-latest-en.json": { "title": "title_services_and_logs_000001_E5BCB", "title_services_and_logs_000001_E5BCB": "Services and logs", "shortdesc": "shortdesc_services_and_logs_000002_C3E46", "shortdesc_services_and_logs_000002_C3E46": "Lists of services and logs that the product uses. ", "content.p_services_and_logs_00000F_7FDA5": "The following topics list the services installed with the product and the log files that record their activity. Use these references to identify the services and logs that are relevant when you manage or troubleshoot the product.", "desc": [ "content.p_services_and_logs_00000F_7FDA5" ] }, "services_installed_ls64-latest-en.json": { "title": "title_services_installed_ls64_001A49", "title_services_installed_ls64_001A49": "Services installed with the product", "shortdesc": "shortdesc_services_installed_ls64_0067D0", "shortdesc_services_installed_ls64_0067D0": "The product installs several services that are used to handle various product features. ", "content.title_services_installed_ls64_006F94": "Installed services", "content.p_services_installed_ls64_0057C4": "", "content.note_services_installed_ls64_0092B7": "Note: The services listed here are subject to change without advance notice.", "content.p_services_installed_ls64_00C273": "", "content.note_services_installed_ls64_001FE2": "Important: Do not manually start or stop any of the services listed here.", "content.title_services_installed_ls64_00046F": "Active services", "content.dt_services_installed_ls64_00DDDA": "f-secure-baseguard-accd.service ", "content.dd_services_installed_ls64_00FE59": "Real-time scanner service that handles file access notifications.", "content.dt_services_installed_ls64_0094D2": "f-secure-baseguard-as.service ", "content.dd_services_installed_ls64_00951C": "A BaseGuard facility for email spam scanning.", "content.note_services_installed_ls64_00258D": "Note: As of linuxsecurity channel version 12.0.286, this service is no longer running.
", "content.dt_services_installed_ls64_002156": "f-secure-baseguard-cleanup.service ", "content.dd_services_installed_ls64_00B2AC": "Makes sure that older channel updates are cleaned up to save disk space.", "content.dt_services_installed_ls64_009360": "f-secure-baseguard-doormand.service ", "content.dd_services_installed_ls64_00A927": "Helps handle subscriptions, registration and cloud service lookups.", "content.dt_services_installed_ls64_00947B": "f-secure-baseguard-icap.service ", "content.dd_services_installed_ls64_004AC0": "The malware analysis service used for realtime, scheduled and manual scanning.", "content.dt_services_installed_ls64_00A628": "f-secure-baseguard-telemetry.service ", "content.dd_services_installed_ls64_00E153": "Collects information for monitoring and analysis to keep the product features working as they should.", "content.dt_services_installed_ls64_0090D6": "f-secure-baseguard-tokenverify.service ", "content.dd_services_installed_ls64_007264": "An OAuth 2 authentication manager used with HTTP APIs.
", "content.dd_services_installed_ls64_00C94B": "This service is running, but is not used by the product.", "content.dt_services_installed_ls64_00DC1B": "fsbg-hotfixctl.service", "content.dd_services_installed_ls64_008A03": "WithSecure hotfix service that checks if there are hotfixes available.
", "content.dd_services_installed_ls64_00533D": "Usually in an inactive state.", "content.dt_services_installed_ls64_00F16E": "fsbg-hotfixctl.timer", "content.dd_services_installed_ls64_00E3A6": "WithSecure hotfix service timer.
", "content.dd_services_installed_ls64_001DCE": "Runs fsbg-hotfixctl.service to check hotfixes once per hour.", "content.dt_services_installed_ls64_004D8B": "f-secure-linuxsecurity-fsicd.service ", "content.dd_services_installed_ls64_00ADC9": "Maintains the file integrity checker baseline.", "content.dt_services_installed_ls64_00C186": "f-secure-linuxsecurity-scand.service ", "content.dd_services_installed_ls64_00AF16": "Manages manual and scheduled scans.", "content.dt_services_installed_ls64_00E07A": "f-secure-linuxsecurity-lspmd.service ", "content.dd_services_installed_ls64_0021BA": "Locally distributes centrally managed settings to product services.", "content.dt_services_installed_ls64_001D21": "f-secure-linuxsecurity-statusd.service ", "content.dd_services_installed_ls64_00BB01": "Collects status and statistics information from product services and relays them to the central management agent (fsma2).", "content.dt_services_installed_ls64_00CCA0": "f-secure-linuxsecurity-webserver.service ", "content.dd_services_installed_ls64_000E85": "Provides an internal interface for centrally managed settings.", "content.dt_services_installed_ls64_00FD54": "fsbg-pmd.service ", "content.dd_services_installed_ls64_005F62": "Locally distributes centrally managed settings to BaseGuard services.", "content.dt_services_installed_ls64_006B5A": "fsbg-statusd.service ", "content.dd_services_installed_ls64_0071E9": "Collects status and statistics information from BaseGuard services and relays them to the central management agent (fsma2).", "content.dt_services_installed_ls64_008600": "fsbg-updated.service ", "content.dd_services_installed_ls64_00BEFE": "Schedules the installation of online channel updates.", "content.dt_services_installed_ls64_001093": "fsma2.service ", "content.dd_services_installed_ls64_009AFA": "Handles centrally managed settings and communication (for example, with Policy Manager or F-Secure Elements Endpoint Protection).", "content.title_services_installed_ls64_004D79": "Inactive services", "content.p_services_installed_ls64_002CE2": "These services are included during installation, but are not loaded by the product.", "content.dt_services_installed_ls64_000FFE": "f-secure-baseguard-authorize.service ", "content.dd_services_installed_ls64_000B33": "An OAuth 2 authorization server used with HTTP APIs.", "content.dt_services_installed_ls64_00A347": "f-secure-baseguard-sensor.service ", "content.dd_services_installed_ls64_000F39": "Handles the functionality of WithSecure Elements Endpoint Detection and Response. If the Endpoint Detection and Response feature is enabled for the subscription key in use, this service is active, but it is inactive by default.", "content.dt_services_installed_ls64_00E015": "f-secure-linuxsecurity-rmmd.service ", "content.dd_services_installed_ls64_009A97": "Provides status information for 3rd party RMM systems.", "content.dt_services_installed_ls64_00E612": "fsbg-enable-platform-selinux-policy.service ", "content.dd_services_installed_ls64_00D9C5": "Turns on the SELinux confinement for product services to restrict their access to resources and actions based on the policies that are defined in the SELinux configuration.", "content.dt_services_installed_ls64_00CE25": "fsbg-disable-platform-selinux-policy.service ", "content.dd_services_installed_ls64_005E3C": "Turns off the SELinux confinement for product services so that their access is not restricted.", "content.note_services_installed_ls64_0086C3": "Note: Both fsbg-{enable,disable}-platform-selinux-policy.service services are normally inactive, but on SELinux-capable systems, they may run temporarily after the initial product installation or after changes are made to the product configuration.", "desc": [ "content.title_services_installed_ls64_006F94", "content.note_services_installed_ls64_0092B7", "content.note_services_installed_ls64_001FE2", "content.title_services_installed_ls64_00046F", { "dl.dl_services_installed_ls64_00A3BC": [ { "dlentry.dlentry_services_installed_ls64_007425": [ "content.dt_services_installed_ls64_00DDDA", "content.dd_services_installed_ls64_00FE59" ] }, { "dlentry.dlentry_services_installed_ls64_004A33": [ "content.dt_services_installed_ls64_0094D2", "content.dd_services_installed_ls64_00951C", "content.note_services_installed_ls64_00258D" ] }, { "dlentry.dlentry_services_installed_ls64_000ABC": [ "content.dt_services_installed_ls64_002156", "content.dd_services_installed_ls64_00B2AC" ] }, { "dlentry.dlentry_services_installed_ls64_007799": [ "content.dt_services_installed_ls64_009360", "content.dd_services_installed_ls64_00A927" ] }, { "dlentry.dlentry_services_installed_ls64_00A621": [ "content.dt_services_installed_ls64_00947B", "content.dd_services_installed_ls64_004AC0" ] }, { "dlentry.dlentry_services_installed_ls64_001768": [ "content.dt_services_installed_ls64_00A628", "content.dd_services_installed_ls64_00E153" ] }, { "dlentry.dlentry_services_installed_ls64_006F35": [ "content.dt_services_installed_ls64_0090D6", "content.dd_services_installed_ls64_007264", "content.dd_services_installed_ls64_00C94B" ] }, { "dlentry.dlentry_services_installed_ls64_00A617": [ "content.dt_services_installed_ls64_00DC1B", "content.dd_services_installed_ls64_008A03", "content.dd_services_installed_ls64_00533D" ] }, { "dlentry.dlentry_services_installed_ls64_00A330": [ "content.dt_services_installed_ls64_00F16E", "content.dd_services_installed_ls64_00E3A6", "content.dd_services_installed_ls64_001DCE" ] }, { "dlentry.dlentry_services_installed_ls64_005617": [ "content.dt_services_installed_ls64_004D8B", "content.dd_services_installed_ls64_00ADC9" ] }, { "dlentry.dlentry_services_installed_ls64_009608": [ "content.dt_services_installed_ls64_00C186", "content.dd_services_installed_ls64_00AF16" ] }, { "dlentry.dlentry_services_installed_ls64_00B792": [ "content.dt_services_installed_ls64_00E07A", "content.dd_services_installed_ls64_0021BA" ] }, { "dlentry.dlentry_services_installed_ls64_00A790": [ "content.dt_services_installed_ls64_001D21", "content.dd_services_installed_ls64_00BB01" ] }, { "dlentry.dlentry_services_installed_ls64_00C8FB": [ "content.dt_services_installed_ls64_00CCA0", "content.dd_services_installed_ls64_000E85" ] }, { "dlentry.dlentry_services_installed_ls64_00CD70": [ "content.dt_services_installed_ls64_00FD54", "content.dd_services_installed_ls64_005F62" ] }, { "dlentry.dlentry_services_installed_ls64_00D01E": [ "content.dt_services_installed_ls64_006B5A", "content.dd_services_installed_ls64_0071E9" ] }, { "dlentry.dlentry_services_installed_ls64_0061F2": [ "content.dt_services_installed_ls64_008600", "content.dd_services_installed_ls64_00BEFE" ] }, { "dlentry.dlentry_services_installed_ls64_0074D4": [ "content.dt_services_installed_ls64_001093", "content.dd_services_installed_ls64_009AFA" ] } ] }, "content.title_services_installed_ls64_004D79", "content.p_services_installed_ls64_002CE2", { "dl.dl_services_installed_ls64_00BF1F": [ { "dlentry.dlentry_services_installed_ls64_007D4C": [ "content.dt_services_installed_ls64_000FFE", "content.dd_services_installed_ls64_000B33" ] }, { "dlentry.dlentry_services_installed_ls64_00349B": [ "content.dt_services_installed_ls64_00A347", "content.dd_services_installed_ls64_000F39" ] }, { "dlentry.dlentry_services_installed_ls64_00DCEF": [ "content.dt_services_installed_ls64_00E015", "content.dd_services_installed_ls64_009A97" ] }, { "dlentry.dlentry_services_installed_ls64_000ACB": [ "content.dt_services_installed_ls64_00E612", "content.dd_services_installed_ls64_00D9C5" ] }, { "dlentry.dlentry_services_installed_ls64_001CE5": [ "content.dt_services_installed_ls64_00CE25", "content.dd_services_installed_ls64_005E3C" ] } ] }, "content.note_services_installed_ls64_0086C3" ] }, "log_files-latest-en.json": { "title": "title_log_files_000001_24FF1A28", "title_log_files_000001_24FF1A28": "Logs used by the product", "shortdesc": "shortdesc_log_files_000002_00893A0B", "shortdesc_log_files_000002_00893A0B": "The product uses several logs for various product features. ", "content.note_log_files_000010_1291365E": "Note: The format and contents of logs listed here are subject to change without advance notice.", "content.dt_log_files_000013_43423056": "systemd journal / syslog ", "content.dd_log_files_000014_104C8468": "All services log events into the syslog.", "content.dt_log_files_000016_EA693E4F": "access.log ", "content.dd_log_files_000017_14F31069": "Records all log entries caused by scanning.", "content.dt_log_files_000019_2E1601C9": "fsicapd.log ", "content.dd_log_files_00001A_6E8C1EE7": "Records errors from the scanning service.", "content.dt_log_files_00001C_A255FD2B": "update.log ", "content.dd_log_files_00001D_6A62E284": "Records information related to updates.", "desc": [ "content.note_log_files_000010_1291365E", { "dl.dl_log_files_000011_61542A52": [ { "dlentry.dlentry_log_files_000012_7CB9E7D1": [ "content.dt_log_files_000013_43423056", "content.dd_log_files_000014_104C8468" ] }, { "dlentry.dlentry_log_files_000015_787CC4D2": [ "content.dt_log_files_000016_EA693E4F", "content.dd_log_files_000017_14F31069" ] }, { "dlentry.dlentry_log_files_000018_14229388": [ "content.dt_log_files_000019_2E1601C9", "content.dd_log_files_00001A_6E8C1EE7" ] }, { "dlentry.dlentry_log_files_00001B_D0CC6B27": [ "content.dt_log_files_00001C_A255FD2B", "content.dd_log_files_00001D_6A62E284" ] } ] } ] }, "cloud_services-latest-en.json": { "title": "title_cloud_services_000001_86ECB78D", "title_cloud_services_000001_86ECB78D": "Cloud services", "shortdesc": "shortdesc_cloud_services_000002_EC1D25F9", "shortdesc_cloud_services_000002_EC1D25F9": "The product connects to various services over the network, for example to check for updates to malware definitions. ", "content.p_cloud_services_00000B_6453FDE0": "The product may need to access any subdomain within the fsapi.com domain. Ensure it can connect to all addresses under *.fsapi.com.", "content.note_cloud_services_00000E_B4CD83E3": "Note: More detailed information about network addresses can be found in the WithSecure Community page.", "desc": [ "content.p_cloud_services_00000B_6453FDE0", "content.note_cloud_services_00000E_B4CD83E3" ] }, "toc-latest-en.json": { "toc": [ "product_webhelp-latest-en", { "welcome-latest-en": [ "sys_reqs-latest-en", "how_product_works-latest-en", "features_and_benefits-latest-en", { "what_is_harmful_content-latest-en": [ "viruses-latest-en", "potentially_unwanted-latest-en", "worms-latest-en", "trojans-latest-en", "backdoors-latest-en", "exploits-latest-en", "exploit_kits-latest-en", "rootkits-latest-en" ] } ] }, { "installation-latest-en": [ "creating_installation_package-2-latest-en", "creating_content_package_for_isolated_environments-latest-en", { "deploying_installation_package-latest-en": [ "delaying_product_activation-latest-en" ] }, { "migrating_ls64_to_elements-latest-en": [ "inspecting_migration_status-latest-en", "migrating_ls64_to_withsecure_elements-latest-en", "associating_migrated_devies_with_a_profile-latest-en" ] }, "uninstalling_product-latest-en" ] }, { "administering-latest-en": [ "real_time_scanning-latest-en", "integrity_checking-latest-en", "aua-latest-en", "using_http_proxies-latest-en", "lsctl_example_managing_ic_profiles-latest-en", { "pm_basics-latest-en": [ { "configuring_realtime_scanning-latest-en": [ "scanning_pua-latest-en", "scanning_archives-latest-en", "configuring_manual_scanning-latest-en", "scanning_manually_pm-latest-en", "creating_scheduled_scanning_task-latest-en" ] }, { "turning_on_integrity_checking-latest-en": [ "adding_known_files-latest-en" ] }, { "configuring_aua-latest-en": [ "specifying_http_proxy-latest-en" ] } ] }, { "configuring_settings-latest-en": [ "lsctl_setting_types-latest-en", "lsctl_operating_with_settings-latest-en", "lsctl_input_output_formats-latest-en", "lsctl_working_with_arrays-latest-en", "loading_product_settings_from_file-latest-en", "lsctl_using_lsctl_and_policy_manager-latest-en", "inspecting_product_state-latest-en", { "settings_real_time_scanning-latest-en": [ "settings_manual_scheduled_scanning-latest-en", "orsp_settings-latest-en" ] }, "settings_integrity_checking-latest-en", "settings_offload_scanning-latest-en", "concept_settings_logging-latest-en", "concept_settings_online_services-latest-en", { "settings_automatic_updates-latest-en": [ "http_proxy_settings-latest-en" ] } ] }, { "command_line_usage-latest-en": [ "starting_stopping_services-latest-en", "scanning_manually-latest-en", "testing_av-latest-en", "integrity_checker_command_line-latest-en", "updating_the_product_manually_from_the_command_line-latest-en", "updating_manually_using_update_archive-latest-en" ] } ] }, "alert_levels-latest-en", { "services_and_logs-latest-en": [ "services_installed_ls64-latest-en", "log_files-latest-en" ] }, "cloud_services-latest-en" ], "product_webhelp-latest-en": "Linux Protection ", "sys_reqs-latest-en": "System requirements", "how_product_works-latest-en": "How the product works ", "features_and_benefits-latest-en": "Key features and benefits ", "viruses-latest-en": "Viruses", "potentially_unwanted-latest-en": "Potentially unwanted applications (PUA) and unwanted applications (UA)", "worms-latest-en": "Worms", "trojans-latest-en": "Trojans", "backdoors-latest-en": "Backdoors", "exploits-latest-en": "Exploits", "exploit_kits-latest-en": "Exploit kits", "rootkits-latest-en": "Rootkits", "what_is_harmful_content-latest-en": "What is harmful content", "welcome-latest-en": "Introduction ", "creating_installation_package-2-latest-en": "Creating the installation package", "creating_content_package_for_isolated_environments-latest-en": "Creating the content package for isolated environments", "delaying_product_activation-latest-en": "Delaying product activation", "deploying_installation_package-latest-en": "Deploying the installation package ", "inspecting_migration_status-latest-en": "Inspecting the migration status", "migrating_ls64_to_withsecure_elements-latest-en": "Migrating Linux Security 64 to WithSecure Elements", "associating_migrated_devies_with_a_profile-latest-en": "Assigning profile to migrated devices", "migrating_ls64_to_elements-latest-en": "Migrating from Business Suite to WithSecure Elements", "uninstalling_product-latest-en": "Uninstalling the product", "installation-latest-en": "Installation", "real_time_scanning-latest-en": "Real-time scanning", "integrity_checking-latest-en": "Integrity checking ", "aua-latest-en": "Automatic updates ", "using_http_proxies-latest-en": "Using HTTP proxies", "lsctl_example_managing_ic_profiles-latest-en": "Example: managing integrity checker profiles", "scanning_pua-latest-en": "Scanning for potentially unwanted applications", "scanning_archives-latest-en": "Scanning archive files", "configuring_manual_scanning-latest-en": "Configuring manual scanning", "scanning_manually_pm-latest-en": "Scanning a computer manually from Policy Manager", "creating_scheduled_scanning_task-latest-en": "Creating a scheduled scanning task", "configuring_realtime_scanning-latest-en": "Using real-time scanning with Policy Manager", "adding_known_files-latest-en": "Adding files to the integrity checker baseline", "turning_on_integrity_checking-latest-en": "Using integrity checking with Policy Manager", "specifying_http_proxy-latest-en": "Specifying an HTTP proxy", "configuring_aua-latest-en": "Configuring automatic update options with Policy Manager", "pm_basics-latest-en": "Basics of using Policy Manager ", "lsctl_setting_types-latest-en": "Setting types and the settings tree", "lsctl_operating_with_settings-latest-en": "Operating with settings", "lsctl_input_output_formats-latest-en": "Input and output formats", "lsctl_working_with_arrays-latest-en": "Working with arrays", "loading_product_settings_from_file-latest-en": "Loading product settings from a file", "lsctl_using_lsctl_and_policy_manager-latest-en": "Using lsctl and Policy Manager", "inspecting_product_state-latest-en": "Inspecting the state of the product", "settings_manual_scheduled_scanning-latest-en": "Settings for manual and scheduled scanning", "orsp_settings-latest-en": "ORSP settings", "settings_real_time_scanning-latest-en": "Command-line settings for real-time scanning", "settings_integrity_checking-latest-en": "Command-line settings for integrity checking", "settings_offload_scanning-latest-en": "Command-line settings for offload scanning", "concept_settings_logging-latest-en": "Command-line settings for logging", "concept_settings_online_services-latest-en": "Command-line settings for online services", "http_proxy_settings-latest-en": "HTTP proxy settings", "settings_automatic_updates-latest-en": "Command-line settings for automatic updates", "configuring_settings-latest-en": "Configuring settings with the lsctl utility", "starting_stopping_services-latest-en": "Starting and stopping services", "scanning_manually-latest-en": "Scanning the computer manually from the command line", "testing_av-latest-en": "Testing the antivirus protection ", "integrity_checker_command_line-latest-en": "Running the integrity checker from the command line", "updating_the_product_manually_from_the_command_line-latest-en": "Updating the product manually from the command line", "updating_manually_using_update_archive-latest-en": "Updating the product manually using an update archive", "command_line_usage-latest-en": "Command line usage", "administering-latest-en": "Using the product ", "alert_levels-latest-en": "Alert severity levels ", "services_installed_ls64-latest-en": "Services installed with the product", "log_files-latest-en": "Logs used by the product", "services_and_logs-latest-en": "Services and logs", "cloud_services-latest-en": "Cloud services" } }