{ "concept_product_webhelp-16.10-en.json": { "title": "title_63D5D4809D124E6697FBD195CEC12AB0", "title_63D5D4809D124E6697FBD195CEC12AB0": "Policy Manager ", "shortdesc": "shortdesc_BE65A0C15BD945FF995C8638F15418DD", "shortdesc_BE65A0C15BD945FF995C8638F15418DD": "This documentation provides instructions and information on using the product. ", "content.p_2CAF249F883743EE953FA85D13C188": "Download the Policy Manager administrator's guide (PDF).", "content.title_F1F5BD23172242559F3A09E4409AE2": "Other material", "content.dd_product_webhelp_000003_3940BEB": "To see the latest release information for Policy Manager and Policy Manager Proxy (available in English only), see the Policy Manager change log.", "content.title_25946B2F481643FEB1D567723D7687": "Supported platforms", "content.p_131EF5DC909743339A16C77D9E6BE3": "Policy Manager Server:", "subchoice.choice_7C3928151D9D4D2C8C984423F57AB1": "Windows Server 2016; Essentials, Standard or Datacenter editions", "subchoice.choice_26848E9294EC4E0787228943692052": "Windows Server 2019; Essentials, Standard or Datacenter editions (Server Core is not supported)", "subchoice.choice_E21EC14662C94FF9BBC2C62602BB73": "Microsoft Windows Server 2022; Essentials, Standard, or Datacenter editions (Server Core is not supported)", "subchoice.choice_product_webhelp_000007_8A49979": "Microsoft Windows Server 2025 (Server Core is not supported)", "choice.choice_D44F8461D4104823B6B419D4DAB6A7": "Microsoft Windows:", "subchoice.choice_248579368EE544599FED139175993C": "Alma Linux 8, 9", "subchoice.choice_DD25437F949648ED9197CA04EDD496": "Debian 11, 12", "subchoice.choice_EE97C940A9A54417BAD42C399ED91F": "openSUSE Leap 15", "subchoice.choice_89D87CD6D7704D50A755B2E072E7D8": "Oracle Linux 8, 9", "subchoice.choice_BD3C68FE400241949412B07DBEE107": "Red Hat Enterprise Linux 8, 9", "subchoice.choice_631CFBC3083243C5AEEBD066B48DD3": "SUSE Linux Enterprise Server 12, 15", "subchoice.choice_5A253D7CFB7B4E2895FC2E5963A9E0": "SUSE Linux Enterprise Desktop 12, 15", "subchoice.choice_F2C79F8A336244E6B029DEFE8237BC": "Ubuntu 18, 04, 20.04, 22.04, 24.04 LTS", "subchoice.choice_product_webhelp_000008_4656460": "Rocky Linux 8, 9", "choice.choice_2C5A62B5793A4547AF6CE1C9BD0278": "Linux (only 64-bit versions of all distributions listed are supported):", "content.p_product_webhelp_00000C_DBD3C56": "", "content.p_770BC70A9F364C2D9F08408F55E776": "Policy Manager Console:", "subchoice.choice_product_webhelp_00000A_3B1BB6B": "Windows 11 (64-bit)", "subchoice.choice_0EF47A792C1B4711B393702E3050CC": "Windows 10 (64-bit)", "subchoice.choice_3A1B7FE6ADF94FFD907902B6C9475A": "Windows Server 2016; Essentials, Standard or Datacenter editions", "content.note_EF7D62DA68B04D418D9AD786E41B5A": "Note: Server Core installation option is not supported.", "subchoice.choice_3D8974649AEB49949F661E4B3B0062": "Windows Server 2019; Essentials, Standard or Datacenter editions", "subchoice.choice_53DADD40F4894276BC8F32A314BD3F": "Microsoft Windows Server 2022; Essentials, Standard, or Datacenter editions", "subchoice.choice_product_webhelp_00000B_21088DA": "Microsoft Windows Server 2025; Essentials, Standard, or Datacenter editions", "choice.choice_565159E51C7C48AF83739D41582224": "Microsoft Windows:", "subchoice.choice_1852A630AF9F4AD393683738357E3D": "Alma Linux 8", "subchoice.choice_25BEFC91DCF2433EA94890209B1598": "Debian 11, 12", "subchoice.choice_5C881F416B5A4291A369CDD2E6F9EC": "openSUSE Leap 15", "subchoice.choice_B2C21A5BFD4B472792A297A53ACF83": "Oracle Linux 8", "subchoice.choice_597F88FCA77A43BD874EA982244426": "Red Hat Enterprise Linux 7, 8", "subchoice.choice_AAA183B9A6514935932B6D032A7EEF": "SUSE Linux Enterprise Server 12, 15", "subchoice.choice_370855EAB91A4DFAA0C490EBBABD4C": "SUSE Linux Enterprise Desktop 12, 15", "subchoice.choice_184D3F8096844639A311D878FFF25B": "Ubuntu 20.04, 22.04, 24.04 LTS", "subchoice.choice_CFCAA3E726D14943B6774F1D3AF164": "Rocky 8", "choice.choice_19035F05FB0D4B9B96E1B9CF130C2A": "Linux (only 64-bit versions of all distributions listed are supported):", "desc": [ "content.p_2CAF249F883743EE953FA85D13C188", { "dl.dl_product_webhelp_000002_F251364": [ { "dlentry.section_C7DA3ABD0F7C406D85F9B7504C6E4E": [ "content.title_F1F5BD23172242559F3A09E4409AE2", "content.dd_product_webhelp_000003_3940BEB" ] }, { "dlentry.section_BD4D625A56024BAE94152AC982724C": [ "content.title_25946B2F481643FEB1D567723D7687", "content.p_131EF5DC909743339A16C77D9E6BE3", { "choices.ul_DAC2B67B4B36492884D5942F73C0A9": [ "choice.choice_D44F8461D4104823B6B419D4DAB6A7", { "subchoices.ul_pmserver_windows_platforms": [ "subchoice.choice_7C3928151D9D4D2C8C984423F57AB1", "subchoice.choice_26848E9294EC4E0787228943692052", "subchoice.choice_E21EC14662C94FF9BBC2C62602BB73", "subchoice.choice_product_webhelp_000007_8A49979" ] }, "choice.choice_2C5A62B5793A4547AF6CE1C9BD0278", { "subchoices.ul_ysm_c52_qbc": [ "subchoice.choice_248579368EE544599FED139175993C", "subchoice.choice_DD25437F949648ED9197CA04EDD496", "subchoice.choice_EE97C940A9A54417BAD42C399ED91F", "subchoice.choice_89D87CD6D7704D50A755B2E072E7D8", "subchoice.choice_BD3C68FE400241949412B07DBEE107", "subchoice.choice_631CFBC3083243C5AEEBD066B48DD3", "subchoice.choice_5A253D7CFB7B4E2895FC2E5963A9E0", "subchoice.choice_F2C79F8A336244E6B029DEFE8237BC", "subchoice.choice_product_webhelp_000008_4656460" ] } ] }, "content.p_product_webhelp_00000C_DBD3C56", "content.p_770BC70A9F364C2D9F08408F55E776", { "choices.ul_A8BD643035EC4A14A2A1FFF8A7DC5E": [ "choice.choice_565159E51C7C48AF83739D41582224", { "subchoices.ul_pmconsole_windows_platforms": [ "subchoice.choice_product_webhelp_00000A_3B1BB6B", "subchoice.choice_0EF47A792C1B4711B393702E3050CC", "subchoice.choice_3A1B7FE6ADF94FFD907902B6C9475A", "subchoice.choice_3D8974649AEB49949F661E4B3B0062", "content.note_EF7D62DA68B04D418D9AD786E41B5A", "subchoice.choice_53DADD40F4894276BC8F32A314BD3F", "subchoice.choice_product_webhelp_00000B_21088DA" ] }, "choice.choice_19035F05FB0D4B9B96E1B9CF130C2A", { "subchoices.ul_ghz_d52_qbc": [ "subchoice.choice_1852A630AF9F4AD393683738357E3D", "subchoice.choice_25BEFC91DCF2433EA94890209B1598", "subchoice.choice_5C881F416B5A4291A369CDD2E6F9EC", "subchoice.choice_B2C21A5BFD4B472792A297A53ACF83", "subchoice.choice_597F88FCA77A43BD874EA982244426", "subchoice.choice_AAA183B9A6514935932B6D032A7EEF", "subchoice.choice_370855EAB91A4DFAA0C490EBBABD4C", "subchoice.choice_184D3F8096844639A311D878FFF25B", "subchoice.choice_CFCAA3E726D14943B6774F1D3AF164" ] } ] } ] } ] } ] }, "concept_introduction_fspm-16.10-en.json": { "title": "title_147E2CFAF1FC407F88ECD40B52720699", "title_147E2CFAF1FC407F88ECD40B52720699": "Introduction", "shortdesc": "shortdesc_AAA3C07710ED4396BBE3B7401D18886A", "shortdesc_AAA3C07710ED4396BBE3B7401D18886A": "Policy Manager provides a central location for managing security applications across different operating systems. ", "content.p_73CB115D131B469E8A62EDEC7AEF8B": "Policy Manager can be used for:", "choice.choice_99CC047D31B944498D7325AF14CC92": "setting and distributing security policies,", "choice.choice_4D40972D6BED4503B32EC7A60976C4": "installing application software to local and remote systems,", "choice.choice_FA5E3CCA40344DCE9331E040ADA365": "monitoring the activities of all systems in the enterprise for compliance with corporate policies and centralized control.", "content.p_8E768642EB4745109A84E0ACE52E0A": "When the system has been set up, you can see status information from the entire managed domain in one single location. This helps you to make sure that the entire domain is protected, and to modify the protection settings when necessary. You can also restrict the users from making changes to the security settings, and be sure that the protection is always up-to-date.", "desc": [ "content.p_73CB115D131B469E8A62EDEC7AEF8B", { "choices.ul_4FBD98332BA949D38E8FA0F3D4FBFD": [ "choice.choice_99CC047D31B944498D7325AF14CC92", "choice.choice_4D40972D6BED4503B32EC7A60976C4", "choice.choice_FA5E3CCA40344DCE9331E040ADA365" ] }, "content.p_8E768642EB4745109A84E0ACE52E0A" ] }, "concept_fspm_components-16.10-en.json": { "title": "title_E786E9EC0DA74DF38CF49249B956F20B", "title_E786E9EC0DA74DF38CF49249B956F20B": "Main components", "shortdesc": "shortdesc_D19EEE9F16DD49BE997DD9AEEC3213B0", "shortdesc_D19EEE9F16DD49BE997DD9AEEC3213B0": "The power of Policy Manager lies in the WithSecure management architecture, which provides high scalability for a distributed workforce. ", "content.dt_D3285C9B4C1A4D158FC8EEB9D24F3B": "Policy Manager Console ", "content.dd_2F56015694804CFF86F8991D407A73": "Policy Manager Console provides a centralized management console for the security of the managed hosts in the network. It enables the administrator to organize the network into logical units for sharing policies. These policies are defined in Policy Manager Console and then distributed to the workstations through Policy Manager Server. Policy Manager Console is a Java-based application that can be run on several different platforms. It can be used to remotely install the Management Agent on other workstations without the need for local login scripts, restarting, or any intervention by the end user.", "content.dt_CE025973DBAF474CBEA496C59FEFE7": "Policy Manager Server ", "content.dd_A1F3BE1CFED94C8E94320A0BCDB114": "Policy Manager Server is the repository for policies and software packages distributed by the administrator, as well as status information and alerts sent by the managed hosts. Communication between Policy Manager Server and the managed hosts is secured with the HTTPS protocol, although non-sensitive data, such as updates to the virus definitions database, are handled through the standard HTTP protocol.", "content.dt_9B2BCB0F605C433F88912A78D6ED0D": "Web Reporting ", "content.dd_6C0F22965F044B46A7EE1733ADA08C": "Web Reporting is an enterprise-wide, web-based graphical reporting system included in Policy Manager Server. With Web Reporting you can create reports and identify computers that are unprotected or vulnerable to virus outbreaks.", "desc": [ { "dl.dl_7CA9F021A38740C8A3B08A29116AE0": [ { "dlentry.dlentry_E5E99A2E21A94CAF92C6C39C3CED87": [ "content.dt_D3285C9B4C1A4D158FC8EEB9D24F3B", "content.dd_2F56015694804CFF86F8991D407A73" ] }, { "dlentry.dlentry_9453316A6E744B3C95A214D063212D": [ "content.dt_CE025973DBAF474CBEA496C59FEFE7", "content.dd_A1F3BE1CFED94C8E94320A0BCDB114" ] }, { "dlentry.dlentry_92DD42A3A1F742FA8AD3944675B9A7": [ "content.dt_9B2BCB0F605C433F88912A78D6ED0D", "content.dd_6C0F22965F044B46A7EE1733ADA08C" ] } ] } ] }, "concept_fspm_features-16.10-en.json": { "title": "title_5FCA55DE20A14A6FBD8260DBDB759438", "title_5FCA55DE20A14A6FBD8260DBDB759438": "Features", "shortdesc": "shortdesc_1FDADF46A5EB47A8BFEA6C491EF5D485", "shortdesc_1FDADF46A5EB47A8BFEA6C491EF5D485": "Some of the main features of Policy Manager are described here. ", "content.dt_3D275010122B42A8A3CB1E38ED4C58": "Software distribution ", "content.dd_B2618EE252D3432CB50EA6E879622C": "", "choice.choice_4352AD772F024A04B3662BC6D2EDE0": "Installation of WithSecure products on hosts from one central location, and updating of executable files and data files, including virus definitions updates.", "choice.choice_A1D7863132DF44DAB1D5B723178028": "Updates can be installed automatically by Automatic Update Agent.", "choice.choice_D876621E640645F78075A460F1B32D": "Policy Manager Console can be used to export pre-configured installation packages, which can also be delivered using third-party software, such as ConfigMgr (System Center Configuration Manager) and similar tools.", "content.dt_5C0BF8F8C6784F54AEBEA200ACEC9A": "Configuration and policy management ", "content.dd_09CF87EFDB5145FC870BF204126DB1": "", "choice.choice_928E14B42E494417A8903709AB00F8": "Centralized configuration of security policies. The policies are distributed from Policy Manager Server by the administrator to the user’s workstation.", "content.dt_1803F9379E5A4D5B8BCC4D010B93DF": "Event management ", "content.dd_CF0999B736024B0D94E217A86744E2": "", "choice.choice_67FF1D8F68054CDEB822C208170987": "Host events are reported to Policy Manager and on the local Event Viewer. You can also set Policy Manager to forward alerts to a third-party syslog server.", "content.dt_2F1BE53020EA404C8B75E979817D4C": "Task management ", "content.dd_812197FEC92F48F89FA33176656C87": "", "choice.choice_DCCABAF91E5B46D1BD9148C1570757": "Management of virus scanning tasks and other operations.", "content.title_6150252BCFF7405C918772C47715A23A": "Differences between Windows and Linux", "content.p_E39E32CD868D4644872FD833774716": "Services not available when Policy Manager Console is running on Linux:", "choice.choice_2165EEC131EB4D54A7525758E16D38": "Push installation features", "choice.choice_504E9F053633402E88280396645EAB": "Microsoft Windows Installer (MSI) package support (but you can prepare MSI packages for distribution, see How to prepare MSI installation packages with Policy Manager for Linux for details)", "choice.choice_B910E55A54EF4FF5BF55699551456D": "Autodiscovery of workstations on the network", "desc": [ { "dl.dl_C4EC5EE796C840B2A25F25E0F57196": [ { "dlentry.dlentry_6733CAE5D56D4082A324A122F7D71A": [ "content.dt_3D275010122B42A8A3CB1E38ED4C58", "content.dd_B2618EE252D3432CB50EA6E879622C", { "choices.ul_E3AD7ABF6DB545EDAA019B18AB1A8D": [ "choice.choice_4352AD772F024A04B3662BC6D2EDE0", "choice.choice_A1D7863132DF44DAB1D5B723178028", "choice.choice_D876621E640645F78075A460F1B32D" ] } ] }, { "dlentry.dlentry_036553834B954A889E328080299890": [ "content.dt_5C0BF8F8C6784F54AEBEA200ACEC9A", "content.dd_09CF87EFDB5145FC870BF204126DB1", { "choices.ul_01CBFF48A9E64541830AF75D1A7714": [ "choice.choice_928E14B42E494417A8903709AB00F8" ] } ] }, { "dlentry.dlentry_542F456931AE443A85F8EF47C99A78": [ "content.dt_1803F9379E5A4D5B8BCC4D010B93DF", "content.dd_CF0999B736024B0D94E217A86744E2", { "choices.ul_6DEF5C0728B84ABF9C4FB0B7F32CFE": [ "choice.choice_67FF1D8F68054CDEB822C208170987" ] } ] }, { "dlentry.dlentry_C485F7502BF64134802048526829C3": [ "content.dt_2F1BE53020EA404C8B75E979817D4C", "content.dd_812197FEC92F48F89FA33176656C87", { "choices.ul_21B4B922F6534A6C80B06BBEA1BC93": [ "choice.choice_DCCABAF91E5B46D1BD9148C1570757" ] } ] } ] }, "content.title_6150252BCFF7405C918772C47715A23A", "content.p_E39E32CD868D4644872FD833774716", { "choices.ul_C1B4BD9E878B439E9C551FB16B0C68": [ "choice.choice_2165EEC131EB4D54A7525758E16D38", "choice.choice_504E9F053633402E88280396645EAB", "choice.choice_B910E55A54EF4FF5BF55699551456D" ] } ], "related": [ "task_preparing_msi_linux-16.10-en" ] }, "concept_product_registration-16.10-en.json": { "title": "title_147E2CFAF1FC407F88ECD40B52720699", "title_147E2CFAF1FC407F88ECD40B52720699": "Product registration", "shortdesc": "shortdesc_AAA3C07710ED4396BBE3B7401D18886A", "shortdesc_AAA3C07710ED4396BBE3B7401D18886A": "To use Policy Manager for other than evaluation purposes, you need to register your product.", "content.p_29325DC924894845987E5B48A045B5": "To register your product, enter the customer number from your license certificate when you start up Policy Manager Console.", "content.p_73CB115D131B469E8A62EDEC7AEF8B": "If you do not register your product, you can only use Policy Manager for a 30-day evaluation period.", "content.p_A6A9445178524028805B892E188056": "The following questions and answers provide some more information about registering your installation of Policy Manager. You should also view the WithSecure license terms and privacy policy.", "content.title_D5024E10921C496EB30628358AB9C7": "Where can I find my customer number for registering my product?", "content.dd_product_registration_000001F91": "The customer number is printed on the license certificate that you get when buying WithSecure products.", "content.title_DFEF1AA668F64B0BA3EFF180F281EB": "Where can I get my customer number if I lose it?", "content.dd_product_registration_00000D559": "Contact the WithSecure partner from whom you bought your WithSecure product.", "content.title_BFF7F63EE5F34370B9C4494C6FFA1A": "What if I have several Policy Manager installations?", "content.dd_product_registration_000004613": "The number of installations is not limited; you can use the same customer number to register all of them.", "content.title_32F696785129431A8CA0C8B81AC9BE": "What should I do if registration fails, saying that my customer number could not be validated?", "content.dd_product_registration_00001AB42": "Check your network configuration to make sure that Policy Manager Server is able to access the WithSecure registration server (corp-reg.fsapi.com:443).", "content.title_68FFAD088EAD458E99511920807498": "What should I do if registration fails, saying that my customer number is invalid?", "content.dd_product_registration_00001335C": "Check your license certificate to make sure that you entered the correct customer number. Otherwise, please contact your WithSecure partner to check your license agreement.", "content.title_B94C002EBA58412C9EE68E0FCA4971": "Who should I contact for help?", "content.dd_product_registration_00001C39F": "If registration issues persist, please contact your WithSecure partner or WithSecure support directly.", "desc": [ "content.p_29325DC924894845987E5B48A045B5", "content.p_73CB115D131B469E8A62EDEC7AEF8B", "content.p_A6A9445178524028805B892E188056", { "dl.dl_product_registration_000001191": [ { "dlentry.section_32F19AC350054AA08DB030465E0003": [ "content.title_D5024E10921C496EB30628358AB9C7", "content.dd_product_registration_000001F91" ] }, { "dlentry.section_A2CB5F4BD994496ABC1F479666CE69": [ "content.title_DFEF1AA668F64B0BA3EFF180F281EB", "content.dd_product_registration_00000D559" ] }, { "dlentry.section_698D5F5C7E654621A198FB6C29F1BC": [ "content.title_BFF7F63EE5F34370B9C4494C6FFA1A", "content.dd_product_registration_000004613" ] }, { "dlentry.section_46EE89D00AB74DDC95CCF411F90106": [ "content.title_32F696785129431A8CA0C8B81AC9BE", "content.dd_product_registration_00001AB42" ] }, { "dlentry.section_B818DB9E309F4700AD10C04A77BC48": [ "content.title_68FFAD088EAD458E99511920807498", "content.dd_product_registration_00001335C" ] }, { "dlentry.section_060B830D07FE4B26A10AC21015CC87": [ "content.title_B94C002EBA58412C9EE68E0FCA4971", "content.dd_product_registration_00001C39F" ] } ] } ] }, "concept_upstream_reporting-16.10-en.json": { "title": "title_856797C088A94BED939F43FF47D9DE62", "title_856797C088A94BED939F43FF47D9DE62": "Upstream reporting", "shortdesc": "shortdesc_D24A54BA0578484993CA333E2EF89F06", "shortdesc_D24A54BA0578484993CA333E2EF89F06": "We collect data from registered products to help support and improve our products. ", "content.title_145389C7D4CB4BFBAFEC53FE7E1CA8": "Why does WithSecure collect data?", "content.dd_upstream_reporting_000007_24A1": "We collect statistical information about the use of registered WithSecure products. This helps us improve our products, while also providing better service and support.", "content.title_EEC84DB55B5C4BF98FEFE953C6AE35": "What information is sent?", "content.dd_upstream_reporting_000009_041A": "We collect information that cannot be linked to the end user or the use of the computer. The collected information includes WithSecure product versions, operating system versions, the number of managed hosts, the number of disconnected hosts, and feature usage statistics from Policy Manager. The information is transferred in a secure and encrypted format.", "content.title_854E1A3F462B4EFBA808EB7B3FBE1A": "Where is the information stored and who can access it?", "content.dd_upstream_reporting_00000B_3CF1": "The data is stored in WithSecure's highly secured data center, and only WithSecure's assigned representatives can access the data.", "desc": [ { "dl.dl_upstream_reporting_000005_4019": [ { "dlentry.section_67D1DFA24D6A45CBA71640A4D2F4F9": [ "content.title_145389C7D4CB4BFBAFEC53FE7E1CA8", "content.dd_upstream_reporting_000007_24A1" ] }, { "dlentry.section_1ABB1ABA3C1644DCB7E68712598F63": [ "content.title_EEC84DB55B5C4BF98FEFE953C6AE35", "content.dd_upstream_reporting_000009_041A" ] }, { "dlentry.section_44137B968D6F4A60BA45FA30A4C08D": [ "content.title_854E1A3F462B4EFBA808EB7B3FBE1A", "content.dd_upstream_reporting_00000B_3CF1" ] } ] } ] }, "concept_basic_terminology-16.10-en.json": { "title": "title_3F59CBA03C3646E7AC731EE18C933313", "title_3F59CBA03C3646E7AC731EE18C933313": "Basic terminology", "shortdesc": "shortdesc_79D830EBEB1F44858DDD79DEF81C9063", "shortdesc_79D830EBEB1F44858DDD79DEF81C9063": "Here you will find descriptions for some of the commonly used terms in this guide. ", "content.dt_B2B8A016F8B748548E968E46E8AB58": "Host ", "content.dd_D997C7B6F8754BA4B711B4E7AEBA2D": "Host refers to a computer that is centrally managed with Policy Manager.", "content.dt_B808B814456E47B7A53AFB66D0141D": "Policy ", "content.p_D513B4CB1FB143C5A8FD94B877A6AC": "A security policy is a set of well-defined rules that regulate how sensitive information and other resources are managed, protected, and distributed. The management architecture of WithSecure software uses policies that are centrally configured by the administrator for optimum control of security in a corporate environment.
", "content.p_08F09DDD504B48BC9CA248FFC66B0F": "The information flow between Policy Manager Server and the hosts is accomplished by transferring policy files.", "content.dt_5CBC31A9F3F147C8876331A1821630": "Policy domain ", "content.dd_A84BB3F983844115A406C0D7B7E426": "Policy domains are groups of hosts or subdomains that have a similar security policy.", "content.dt_941CCF7A131E4256AEB8B89CB5A811": "Policy inheritance ", "content.p_6ED0B616ED14495A8CAD7504680627": "Policy inheritance simplifies the defining of a common policy. In Policy Manager Server, each policy domain automatically inherits the settings of its parent domain, allowing for easy and efficient management of large networks. The inherited settings may be overridden for individual hosts or domains. When a domain's inherited settings are changed, the changes are inherited by all of the domain’s hosts and subdomains.
", "content.p_6D555499D18A44BF94AFD8A6BB1A1A": "The policy can be further refined for subdomains or even individual hosts. The granularity of policy definitions can vary considerably among installations. Some administrators might want to define only a few different policies for large domains. Other administrators might attach policies directly to each host, achieving the finest granularity.", "desc": [ { "dl.dl_8A19C76CD27343B6A238B01810AA81": [ { "dlentry.dlentry_619EA31955E540CDAAFBA9586E65F8": [ "content.dt_B2B8A016F8B748548E968E46E8AB58", "content.dd_D997C7B6F8754BA4B711B4E7AEBA2D" ] }, { "dlentry.dlentry_1E2B32246FDE44858343A1EAC32B62": [ "content.dt_B808B814456E47B7A53AFB66D0141D", "content.p_D513B4CB1FB143C5A8FD94B877A6AC", "content.p_08F09DDD504B48BC9CA248FFC66B0F" ] }, { "dlentry.dlentry_E68A305E90D944F7A1C5AD8F9599B2": [ "content.dt_5CBC31A9F3F147C8876331A1821630", "content.dd_A84BB3F983844115A406C0D7B7E426" ] }, { "dlentry.dlentry_6A5CF2A40056496BA4B566BF801029": [ "content.dt_941CCF7A131E4256AEB8B89CB5A811", "content.p_6ED0B616ED14495A8CAD7504680627", "content.p_6D555499D18A44BF94AFD8A6BB1A1A" ] } ] } ] }, "concept_policy_based_management-16.10-en.json": { "title": "title_EE40F4947BB3411CAE6CB2E76CF8F3A6", "title_EE40F4947BB3411CAE6CB2E76CF8F3A6": "Policy-based management", "shortdesc": "shortdesc_707DF58051A445EB927850D65F6C451B", "shortdesc_707DF58051A445EB927850D65F6C451B": "A security policy is a set of well-defined rules that regulate how sensitive information and other resources are managed, protected, and distributed. ", "content.p_457F0780295A47FA994BF65C9CBE13": "The management architecture of WithSecure software uses policies that are centrally configured by the administrator for optimum control of security in a corporate environment. Policy-based management implements many functions:", "choice.choice_1CA4DD6078A14C51AB2A9C76339593": "Remotely controlling and monitoring the behavior of the products.", "choice.choice_945C8CC27708412A99A8134E86C1ED": "Monitoring statistics provided by the products and the Management Agent.", "choice.choice_5C6836C4F7384F5BB0A6CC3E625D16": "Remotely starting predefined operations.", "choice.choice_BEDAFD76FA6E40B1A6EDC1F9C29EF6": "Transmission of alerts and notifications from the products to the system administrator.", "content.p_34346638AA604217A0DAC021A21373": "The current settings of a product consist of all three policy file types:", "content.dt_6C99AB4B71AF46A395E2FFAA371FE1": "Default policy files ", "content.dd_6CCD83005F74455D8BF57AD145EFA0": "The default policy file contains the default values (the factory settings) for a single product that are installed by the setup. Default policies are used only on the host. If neither the base policy file nor the incremental policy file contains an entry for a variable, then the value is taken from the default policy file. New product versions get new versions of the default policy file.", "content.dt_4663AF91A1DC4D8CA6367E5353A627": "Base policy files ", "content.dd_7F17C0118FA74CF6B0862CC8DD9D6E": "Base policy files contain the administrative settings and restrictions for all the variables for all WithSecure products on a specific host (with domain level policies, a group of hosts may share the same file). Base policy files are created on Policy Manager Server, and all related communication with Policy Manager Console is handled via HTTPS.", "content.dt_B399DE876DE641B5AFE497EC8F2CD4": "Incremental policy files ", "content.dd_FB06CA722E10430FAC26A66D4D3B76": "Incremental policy files are used to store local changes to the base policy. Only changes that fall within the limits specified in the base policy are allowed.", "desc": [ "content.p_457F0780295A47FA994BF65C9CBE13", { "choices.ul_529D5172D2054754A807E5639D6ADE": [ "choice.choice_1CA4DD6078A14C51AB2A9C76339593", "choice.choice_945C8CC27708412A99A8134E86C1ED", "choice.choice_5C6836C4F7384F5BB0A6CC3E625D16", "choice.choice_BEDAFD76FA6E40B1A6EDC1F9C29EF6" ] }, "content.p_34346638AA604217A0DAC021A21373", { "dl.dl_F01F4AA2DC5648DBB18753953A16F4": [ { "dlentry.dlentry_C83EA397BBC24BADB67D8342FDB187": [ "content.dt_6C99AB4B71AF46A395E2FFAA371FE1", "content.dd_6CCD83005F74455D8BF57AD145EFA0" ] }, { "dlentry.dlentry_EFDA182B8DB24BE5B60B83D849FEA2": [ "content.dt_4663AF91A1DC4D8CA6367E5353A627", "content.dd_7F17C0118FA74CF6B0862CC8DD9D6E" ] }, { "dlentry.dlentry_69240B369E1141B280A2DDDD8AF2B5": [ "content.dt_B399DE876DE641B5AFE497EC8F2CD4", "content.dd_FB06CA722E10430FAC26A66D4D3B76" ] } ] } ] }, "installing_pm-16.10-en.json": { "title": "title_9EE621E41CD1429DB881447DED67B135", "title_9EE621E41CD1429DB881447DED67B135": "Installing the product", "shortdesc": "shortdesc_9D594DC997154D78AC28C0005406A3D3", "shortdesc_9D594DC997154D78AC28C0005406A3D3": "This section explains the steps required to install Policy Manager. ", "content.p_D906A38BDD2D4728B819D6C59F63C3": "Here you will find instructions for installing the main product components; Policy Manager Server and Policy Manager Console.", "desc": [ "content.p_D906A38BDD2D4728B819D6C59F63C3" ] }, "concept_sysreq_overview-16.10-en.json": { "title": "title_C9C64B3FA7A8423F8D7F440B00018B23", "title_C9C64B3FA7A8423F8D7F440B00018B23": "System requirements", "shortdesc": "shortdesc_3880C725984F49F9A2BCB6F615FECB6E", "shortdesc_3880C725984F49F9A2BCB6F615FECB6E": "This section provides the system requirements for both Policy Manager Server and Policy Manager Console.", "desc": [] }, "concept_sysreq_fspms-16.10-en.json": { "title": "title_24A13A2A7870463085F1388A555CE492", "title_24A13A2A7870463085F1388A555CE492": "Policy Manager Server ", "shortdesc": "shortdesc_1308888697A448A893373432A5F58931", "shortdesc_1308888697A448A893373432A5F58931": "To install Policy Manager Server, your system must meet the minimum requirements given here. ", "content.p_BBE13EF0EBC5475D9C384EF34E979A": "", "cell.entry_4FF43B88D3E04184A10546D21B8624": "Operating system:", "subchoice.choice_445F366140F1497A8524873B7AE458": "Windows Server 2016; Essentials, Standard or Datacenter editions", "subchoice.choice_26848E9294EC4E0787228943692052": "Windows Server 2019; Essentials, Standard or Datacenter editions (Server Core is not supported)", "subchoice.choice_6D21017BFD804533AE2726282399DB": "Microsoft Windows Server 2022; Essentials, Standard, or Datacenter editions (Server Core is not supported)", "subchoice.choice_sysreq_fspms_000001_601FF1EB": "Microsoft Windows Server 2025 (Server Core is not supported)", "choice.choice_D44F8461D4104823B6B419D4DAB6A7": "Microsoft Windows:", "subchoice.choice_E5928270EB3E453DA1530BF1730491": "AlmaLinux 8, 9", "subchoice.choice_0CB71DEAFC4841ABADBB7900CE114D": "Debian 11, 12", "subchoice.choice_04521D285209406DA87F218B7BB6FB": "openSUSE Leap 15", "subchoice.choice_84C40C6691DF41029599C392FF8AF7": "Oracle Linux 8,9", "subchoice.choice_9C06559AE74E4357B3E17B49532916": "Red Hat Enterprise Linux 8, 9", "subchoice.choice_2E622545E1E447B2A391A4C648911C": "SUSE Linux Enterprise Server 12, 15", "subchoice.choice_B28EAD788FBC4031BE5FD8267748CE": "SUSE Linux Enterprise Desktop 12, 15", "subchoice.choice_C2C08118E17B4E54A39DE997FC4ABA": "Ubuntu 18.04, 20.04, 22.04, 24.04", "subchoice.choice_sysreq_fspms_000002_69B3A997": "Rocky Linux 8,9", "choice.choice_2C5A62B5793A4547AF6CE1C9BD0278": "Linux (only 64-bit versions of all distributions listed are supported):", "cell.entry_FAFC152EDB664168837D97DBAD4DB6": "", "cell.entry_54089AA0013E4FFB8EC50A5E3713A3": "Processor:", "cell.entry_AC67BA4A78444F1486ADD0B3FB136A": "2 CPU cores", "cell.entry_FE5157A4670C467186E1AB54847B11": "Memory:", "cell.entry_F41661BB9A6C4640B1D75FB7A49F25": "4 GB RAM", "cell.entry_FFD351C91272437D817A2B2EFAC365": "Disk space:", "cell.entry_EF66D72FBDEC4DC9AF70559FACE694": "Minimum of 10 GB of free disk space. For managing Premium clients, an additional 20 GB of space is required for serving software updates

Note: On Linux platforms, if the /tmp folder is mounted as a separate file system, it should have at least 1 GB of free hard disk space.", "cell.entry_C4978E1352924D4AB7D7B329B93F25": "Network:", "cell.entry_41BB0BD1D47B4CEE9B8A2F0ACA68C8": "100 Mbit network.", "cell.entry_59BE5AF7ABDF4A61B1E46B7768B106": "Browser:", "choice.choice_A76B8161014E434A95DF397E3126EF": "Google Chrome version 109 and newer", "choice.choice_43799B7E8E2440E7A0442FC9539FE4": "Microsoft Edge version 109 and newer", "choice.choice_C667C5FC136649F399D895C762B62B": "Mozilla Firefox version 115 and newer", "cell.entry_7FE6151B02E84C0E982ED919909AC5": "", "desc": [ { "table.table_5E3C8E24B153470EA7DD593B65CE78": [ { "row.row_4E54FCE2B42745CB912FD8DD7CA95D": [ "cell.entry_4FF43B88D3E04184A10546D21B8624", "cell.entry_FAFC152EDB664168837D97DBAD4DB6", { "choices.ul_DAC2B67B4B36492884D5942F73C0A9": [ "choice.choice_D44F8461D4104823B6B419D4DAB6A7", { "subchoices.ul_51205266866A4B769727A6A1CD8E37": [ "subchoice.choice_445F366140F1497A8524873B7AE458", "subchoice.choice_26848E9294EC4E0787228943692052", "subchoice.choice_6D21017BFD804533AE2726282399DB", "subchoice.choice_sysreq_fspms_000001_601FF1EB" ] }, "choice.choice_2C5A62B5793A4547AF6CE1C9BD0278", { "subchoices.ul_BFEDBE43E9574B3B9BBDE4FD8BE393": [ "subchoice.choice_E5928270EB3E453DA1530BF1730491", "subchoice.choice_0CB71DEAFC4841ABADBB7900CE114D", "subchoice.choice_04521D285209406DA87F218B7BB6FB", "subchoice.choice_84C40C6691DF41029599C392FF8AF7", "subchoice.choice_9C06559AE74E4357B3E17B49532916", "subchoice.choice_2E622545E1E447B2A391A4C648911C", "subchoice.choice_B28EAD788FBC4031BE5FD8267748CE", "subchoice.choice_C2C08118E17B4E54A39DE997FC4ABA", "subchoice.choice_sysreq_fspms_000002_69B3A997" ] } ] } ] }, { "row.row_57C46B518D8E48409BFB8F26A861C1": [ "cell.entry_54089AA0013E4FFB8EC50A5E3713A3", "cell.entry_AC67BA4A78444F1486ADD0B3FB136A" ] }, { "row.row_94CAA994ED6642B88732EC5569E889": [ "cell.entry_FE5157A4670C467186E1AB54847B11", "cell.entry_F41661BB9A6C4640B1D75FB7A49F25" ] }, { "row.row_F729081F97734A9BA8961EE64B5FD9": [ "cell.entry_FFD351C91272437D817A2B2EFAC365", "cell.entry_EF66D72FBDEC4DC9AF70559FACE694" ] }, { "row.row_0B3DA7ED42DD4369BFA5AA1136A22D": [ "cell.entry_C4978E1352924D4AB7D7B329B93F25", "cell.entry_41BB0BD1D47B4CEE9B8A2F0ACA68C8" ] }, { "row.row_0E92A63B7DBA4DE0BA70E06BF8D11D": [ "cell.entry_59BE5AF7ABDF4A61B1E46B7768B106", "cell.entry_7FE6151B02E84C0E982ED919909AC5", { "choices.ul_BD9D6E62A2A047EF82354CD1A99E56": [ "choice.choice_A76B8161014E434A95DF397E3126EF", "choice.choice_43799B7E8E2440E7A0442FC9539FE4", "choice.choice_C667C5FC136649F399D895C762B62B" ] } ] } ] } ] }, "concept_sysreq_fspmc-16.10-en.json": { "title": "title_01E0797568564DF696C94976B59802AB", "title_01E0797568564DF696C94976B59802AB": "Policy Manager Console ", "shortdesc": "shortdesc_D55B5DF2704C454F8EE35A0DF87F7564", "shortdesc_D55B5DF2704C454F8EE35A0DF87F7564": "To install Policy Manager Console, your system must meet the minimum requirements given here. ", "content.p_03EF925637DB4524A0D504379B2B78": "", "cell.entry_9C5984D17A214AE09D9FACA5F2A5AA": "Operating system:", "subchoice.choice_sysreq_fspmc_000001_37101F78": "Windows 11 (64-bit)", "subchoice.choice_0EF47A792C1B4711B393702E3050CC": "Windows 10 (64-bit)", "subchoice.choice_E11B120D45454E56B58076DC6C73E7": "Windows Server 2016; Essentials, Standard or Datacenter editions", "subchoice.choice_26848E9294EC4E0787228943692052": "Windows Server 2019; Essentials, Standard or Datacenter editions", "subchoice.choice_sysreq_fspmc_000002_E3BEA406": "Windows Server 2022; Essentials, Standard or Datacenter editions", "subchoice.choice_sysreq_fspmc_000004_9DAA2265": "Windows Server 2025; Essentials, Standard or Datacenter editions Note: Server Core installation option is not supported.", "choice.choice_565159E51C7C48AF83739D41582224": "Microsoft Windows:", "subchoice.choice_E5928270EB3E453DA1530BF1730491": "AlmaLinux 8. 9", "subchoice.choice_01ADB26AAB8A4FDD9469E1309F1D0B": "Debian 11, 12", "subchoice.choice_7D02714F895F46D782CE043132FA69": "openSUSE Leap 15", "subchoice.choice_80D6FD34E5094D0DB2DD7EA43853DF": "Oracle Linux 8, 9", "subchoice.choice_468FDCCC93DC475998BCF0641048D7": "Red Hat Enterprise Linux 8, 9", "subchoice.choice_E48AB09B39A04F4192CB2AFB7D947A": "SUSE Linux Enterprise Server 12, 15", "subchoice.choice_9A54B060053C445681CB62FA303594": "SUSE Linux Enterprise Desktop 12, 15", "subchoice.choice_01CB7D82420B4E39A9B904634CC2EF": "Ubuntu 18.4, 20.04, 22.04, 24.04", "subchoice.choice_sysreq_fspmc_000006_3CDC1AFE": "Rocky Linux 8, 9", "choice.choice_19035F05FB0D4B9B96E1B9CF130C2A": "Linux (only 64-bit versions of all distributions listed are supported):", "content.p_sysreq_fspmc_00000A_DAFA1EE7": "Note: On Linux platforms, you must have X Windows System installed to run desktop applications.", "cell.entry_36FE68C233574F81888514092CC3E1": "", "cell.entry_E00D6F758A8549E6B54BAB06AB60B9": "Processor:", "cell.entry_BB10CFCCF75B4CB8A48E41B9449753": "A single CPU core. Note: If you run Policy Manager Console at the same host with Policy Manager Server, in addition to the two CPU cores, you need an additional one for Policy Manager Console", "cell.entry_F6DE81FA669A406886AD8FD6766287": "Memory:", "cell.entry_CB0576060BFB48628DD7D8460F93D1": "2 GB RAM.", "cell.entry_922255F9E1F849BD824137E6FD7BB2": "Disk space:", "cell.entry_F8AA69499A4D434BB26D7ADFDDEBEF": "300 MB of free disk space.", "cell.entry_AB8BB25ABACF40229179AAD8B87777": "Display:", "cell.entry_41B45D7377E64DD0A9889FCC78B14A": "Minimum 16-bit display with resolution of 1024x768 (32-bit color display with 1280x1024 or higher resolution recommended).", "cell.entry_74D8705A29204BDB8F2876715A9BAF": "Network:", "cell.entry_76AEE21D5A53494DA659192EEF901E": "100 Mbit network.", "desc": [ { "table.table_7B9539634F1542A2B8F6674A843F62": [ { "row.row_F17142DDBD004FF88BE37DBF44F776": [ "cell.entry_9C5984D17A214AE09D9FACA5F2A5AA", "cell.entry_36FE68C233574F81888514092CC3E1", { "choices.ul_A8BD643035EC4A14A2A1FFF8A7DC5E": [ "choice.choice_565159E51C7C48AF83739D41582224", { "subchoices.ul_1797296646DD4953BAD3A075BDBD59": [ "subchoice.choice_sysreq_fspmc_000001_37101F78", "subchoice.choice_0EF47A792C1B4711B393702E3050CC", "subchoice.choice_E11B120D45454E56B58076DC6C73E7", "subchoice.choice_26848E9294EC4E0787228943692052", "subchoice.choice_sysreq_fspmc_000002_E3BEA406", "subchoice.choice_sysreq_fspmc_000004_9DAA2265" ] }, "choice.choice_19035F05FB0D4B9B96E1B9CF130C2A", { "subchoices.ul_0FB8BE211B4B4827AB009458F7C623": [ "subchoice.choice_E5928270EB3E453DA1530BF1730491", "subchoice.choice_01ADB26AAB8A4FDD9469E1309F1D0B", "subchoice.choice_7D02714F895F46D782CE043132FA69", "subchoice.choice_80D6FD34E5094D0DB2DD7EA43853DF", "subchoice.choice_468FDCCC93DC475998BCF0641048D7", "subchoice.choice_E48AB09B39A04F4192CB2AFB7D947A", "subchoice.choice_9A54B060053C445681CB62FA303594", "subchoice.choice_01CB7D82420B4E39A9B904634CC2EF", "subchoice.choice_sysreq_fspmc_000006_3CDC1AFE" ] } ] }, "content.p_sysreq_fspmc_00000A_DAFA1EE7" ] }, { "row.row_CC49387B90B042589D5DC2DE2C47BA": [ "cell.entry_E00D6F758A8549E6B54BAB06AB60B9", "cell.entry_BB10CFCCF75B4CB8A48E41B9449753" ] }, { "row.row_38B73A44EBA64F7185A1E9B6D6920B": [ "cell.entry_F6DE81FA669A406886AD8FD6766287", "cell.entry_CB0576060BFB48628DD7D8460F93D1" ] }, { "row.row_B0461AC343F747B09A137AA558D754": [ "cell.entry_922255F9E1F849BD824137E6FD7BB2", "cell.entry_F8AA69499A4D434BB26D7ADFDDEBEF" ] }, { "row.row_EDCCEE78084A4C6985E05CA0D1F1AE": [ "cell.entry_AB8BB25ABACF40229179AAD8B87777", "cell.entry_41B45D7377E64DD0A9889FCC78B14A" ] }, { "row.row_4793BECA95944302AD170611B6482F": [ "cell.entry_74D8705A29204BDB8F2876715A9BAF", "cell.entry_76AEE21D5A53494DA659192EEF901E" ] } ] } ] }, "concept_installing_windows-16.10-en.json": { "title": "title_BD08644E891D4E8CB84D274182347D07", "title_BD08644E891D4E8CB84D274182347D07": "Installing the product on Windows", "shortdesc": "shortdesc_DB0D63DA8D0240469487925F9CEEB65D", "shortdesc_DB0D63DA8D0240469487925F9CEEB65D": "This section describes how to install the product on Windows computers. ", "desc": [] }, "concept_installation_steps-16.10-en.json": { "title": "title_BC5D4E6D3F374FFF81D3369CDE2A7356", "title_BC5D4E6D3F374FFF81D3369CDE2A7356": "Installation steps", "shortdesc": "shortdesc_0BAD08BD010343B8870F3EA90FB02B71", "shortdesc_0BAD08BD010343B8870F3EA90FB02B71": "Follow these steps in the order given here to install Policy Manager Server and Policy Manager Console on the same machine.", "desc": [] }, "task_begin_installing_cd-16.10-en.json": { "title": "title_1B0850D47FCA4CC89DDB1C6AF4B5E1C1", "title_1B0850D47FCA4CC89DDB1C6AF4B5E1C1": "Download and run the installation package", "shortdesc": "shortdesc_C7FDA207EFB945AAB75CB5EB1B9076B8", "shortdesc_C7FDA207EFB945AAB75CB5EB1B9076B8": "The first stage in installing Policy Manager is to download and run the installation package. ", "content.p_B2443FBE8186473180054FA9589E38": "To begin installing the product:", "step.step_E98E601F493D432F8247731C19B497": "Download the installation package from the Policy Manager support page.", "content.note_q3w_1xb_ybc": "Note: For available MSI parameters, see Supported MSI parameters.", "content.p_5443A42AFB2C492BAADB12645D6956": "The MSI installs program files and starts the postconfiguration wizard to complete the installation.", "step.step_C66D103F7073403688F8AA90738716": "Double-click the msi file to begin installation.", "step.step_EF3EBBB20A4B407095CD4B203E0656": "Read the license terms and select Next if you agree to continue.", "step.step_0A13CA2E2BDE42C4884F6CD6925BF7": "Select the installation language from the drop-down menu and click Next to continue.", "content.p_200EB755A5B64706963FE39BD387C5": "Use this password to log in to Policy Manager Console with the user name admin.", "step.step_5AF999AB641A49AFB41AD8FD66085E": "Enter and confirm a password for your admin user account, then click Next.", "subchoice.choice_1FC3BADA123848FE80CFD2EE13377D": "The Host module is used for communication with the hosts. Non-sensitive data, such as updates to the virus definitions database, is transferred over HTTP, whereas any sensitive data is transferred using the secured HTTPS protocol. The default HTTP port is 80, and the default HTTPS port is 443.", "content.note_46DA9CBAAD2C4A18A6DA6248766619": "Note: If you want to change the default port for communication, you will also need to include the new port number in the Connections URL when logging in to Policy Manager Console.", "content.p_419563269CE145EFBFF5B073124FDF": "By default, access to the Administration module is restricted to the local machine. If you want to use Policy Manager Console on a different computer, clear the Restrict access to the local machine checkbox.", "subchoice.choice_B4C89F0D592D4962A57839DD7A91CB": "The Administration module is used for communication with Policy Manager Console. The default HTTPS port is 8080.", "subchoice.choice_991BAC8802744F41A7F41DD06557A7": "The Web Reporting module is used for communication with Web Reporting. Select whether it should be enabled. Web Reporting uses a local socket connection to the Administration module to fetch server data. The default HTTPS port is 8081.", "content.note_013B326F0E0E474C98BE9897B1FAE0": "Note: Make sure that your firewall rules allow access to the ports used by Policy Manager Console and the hosts so that they can fetch policies and database updates.", "step.step_E30EB7BEB533467B809BDC6C970EED": "Select the Policy Manager Server modules to enable:", "step.step_42F2048751474127A7D5BE80219AF6": "Click Finish to complete the configuration.", "content.p_8EE086F189D249709CC21850335C43": "If you have already installed Policy Manager Server and want to use Policy Manager Console on a different computer:", "step.step_F9E4E79064064073827B0E7BFD022F": "Set the HKEY_LOCAL_MACHINE\\SOFTWARE\\WithSecure\\Policy Manager\\Policy Manager Server\\RestrictLocalhost registry key value to 0.", "step.step_4E727BA732454D5ABFD50E0A202F2E": "Restart the Policy Manager Server service.", "content.p_1779AE886BF9483B9C1EB93FDC053F": "If the Policy Manager host does not have a direct internet connection, specify the HTTP proxy configuration:", "step.step_A7FD02993D4E45D19F7DAD9543E17A": "Edit the HTTP proxy configuration file as follows: C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\data\\fspms.proxy.config ", "content.note_qvd_gz2_xyb": "Note: Policy Manager only supports basic authentication for HTTP proxies.", "content.p_7A0D9D0729A749DF9364EF5F3162C4": "Use percent encoding for any reserved URI characters in the user name or password. For example, if the password is ab%cd, you need to enter it as follows: http_proxy=http://user:ab%25cd@proxy.example.com:8080/", "step.step_EE02F12AD13540AFB5FD285E0A8578": "Add the proxy as a new line, using the following format: http_proxy=[http://][user[:password]@]<address>[:port]", "step.step_5D3A74585BE041F49A0DFF7A8C9BD8": "Restart the Policy Manager Server service.", "desc": [ "content.p_B2443FBE8186473180054FA9589E38", { "steps.steps_A0A684BBD7C44CBD8CEC31A57CA106": [ "step.step_E98E601F493D432F8247731C19B497", "step.step_C66D103F7073403688F8AA90738716", "content.note_q3w_1xb_ybc", "content.p_5443A42AFB2C492BAADB12645D6956", "step.step_EF3EBBB20A4B407095CD4B203E0656", "step.step_0A13CA2E2BDE42C4884F6CD6925BF7", "step.step_5AF999AB641A49AFB41AD8FD66085E", "content.p_200EB755A5B64706963FE39BD387C5", "step.step_E30EB7BEB533467B809BDC6C970EED", { "subchoices.choices_13288A37E2804970A49CB13F79024C": [ "subchoice.choice_1FC3BADA123848FE80CFD2EE13377D", "subchoice.choice_B4C89F0D592D4962A57839DD7A91CB", "content.note_46DA9CBAAD2C4A18A6DA6248766619", "content.p_419563269CE145EFBFF5B073124FDF", "subchoice.choice_991BAC8802744F41A7F41DD06557A7" ] }, "content.note_013B326F0E0E474C98BE9897B1FAE0", "step.step_42F2048751474127A7D5BE80219AF6" ] }, "content.p_8EE086F189D249709CC21850335C43", { "steps.ol_A5160768E53C4C7997595282989738": [ "step.step_F9E4E79064064073827B0E7BFD022F", "step.step_4E727BA732454D5ABFD50E0A202F2E" ] }, "content.p_1779AE886BF9483B9C1EB93FDC053F", { "steps.ol_iq3_wy2_xyb": [ "step.step_A7FD02993D4E45D19F7DAD9543E17A", "step.step_EE02F12AD13540AFB5FD285E0A8578", "content.note_qvd_gz2_xyb", "content.p_7A0D9D0729A749DF9364EF5F3162C4", "step.step_5D3A74585BE041F49A0DFF7A8C9BD8" ] } ], "related": [ "supported_msi_parameters_0-16.10-en" ] }, "supported_msi_parameters_0-16.10-en.json": { "title": "title_supported_msi_parameters_0C06A", "title_supported_msi_parameters_0C06A": "Supported MSI parameters", "shortdesc": "shortdesc_supported_msi_parameters_0C18C", "shortdesc_supported_msi_parameters_0C18C": "When installing the product, you can use the following MSI properties.", "content.p_supported_msi_parameters_08FD7": "", "cell.entry_9EDD360F2CC44E3FBF4C45D35250F1": "MSI parameter", "cell.entry_05476D5EF0E54554A2600BD7208064": "Explanation", "cell.entry_B29E489B75324BB2BA17E11A963F57": "CONSOLE_DATADIR", "cell.entry_7D82CA7C18544865B996061762A03F": "By default, Policy Manager installation uses C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Console\\ as the Policy Manager Console data directory. If you wish to use an alternative location, use ‘CONSOLE_DATADIR’ MSI argument to override it, for example, by running an MSI file from the command line and passing the arguments to it: msiexec /i policy-manager.msi CONSOLE_DATADIR=D:\\WithSecure\\PMCData", "cell.entry_177EC8C1BC194D95BD6C9DEF679D52": "DATADIR", "cell.entry_B9045C31E41C44E29411624A85FFD5": "By default, Policy Manager installation uses C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\ as the Policy Manager Server data directory. If you wish to use an alternative location, use ‘DATADIR’ MSI argument to override it, for example, by running an MSI file from the command line and passing the arguments to it: msiexec /i policy-manager.msi DATADIR=D:\\WithSecure\\PMData", "cell.entry_supported_msi_parameters_01343": "NOSERVER", "cell.entry_supported_msi_parameters_0889E": "By default, Policy Manager MSI always installs both Policy Manager Console and Policy Manager Server. If Server is not required and you are installing Console to connect to a remote Server, use 'NOSERVER' MSI argument overridden to ‘true’, for example, by running an MSI file from the command line and passing the arguments to it: msiexec /i policy-manager.msi NOSERVER=true", "cell.entry_supported_msi_parameters_06F51": "PROXY_SERVER", "cell.entry_supported_msi_parameters_0C3EF": "If the Policy Manager or Policy Manager Proxy host does not have a direct internet connection, specify the HTTP proxy configuration as 'PROXY_SERVER' MSI argument, for example, by running an MSI file from the command line and passing the arguments to it: msiexec /i policy-manager.msi PROXY_SERVER=http://proxy.example.com:8080 Use percent encoding for any reserved URI characters in the user name or password. For example, if the password is ab%cd, you need to enter it as follows: http://user:ab%25cd@proxy.example.com:8080", "cell.entry_supported_msi_parameters_0CBB1": "TARGETDIR", "cell.entry_supported_msi_parameters_02364": "If you wish to override a destination directory for the installation, use 'TARGETDIR' MSI argument to override it, for example, by running an MSI file from the command line and passing the arguments to it: msiexec /i policy-manager.msi TARGETDIR=C:\\CustomDirectory", "desc": [ { "table.table_8A7E008A966440B394E2EC651AEB13": [ { "thead.thead_F7186C67D3074B0F8DC0DE613FF53A": [ "cell.entry_9EDD360F2CC44E3FBF4C45D35250F1", "cell.entry_05476D5EF0E54554A2600BD7208064" ] }, { "row.row_7A1A6ED08E9649EAA11848508E5116": [ "cell.entry_B29E489B75324BB2BA17E11A963F57", "cell.entry_7D82CA7C18544865B996061762A03F" ] }, { "row.row_020BAAA6A5FD468CAB05167888D438": [ "cell.entry_177EC8C1BC194D95BD6C9DEF679D52", "cell.entry_B9045C31E41C44E29411624A85FFD5" ] }, { "row.row_supported_msi_parameters_010E2": [ "cell.entry_supported_msi_parameters_01343", "cell.entry_supported_msi_parameters_0889E" ] }, { "row.row_supported_msi_parameters_05AD3": [ "cell.entry_supported_msi_parameters_06F51", "cell.entry_supported_msi_parameters_0C3EF" ] }, { "row.row_supported_msi_parameters_08229": [ "cell.entry_supported_msi_parameters_0CBB1", "cell.entry_supported_msi_parameters_02364" ] } ] } ] }, "task_run_fspmc-16.10-en.json": { "title": "title_03EE49E053594CF6A640851A3C2EB572", "title_03EE49E053594CF6A640851A3C2EB572": "Run Policy Manager Console", "shortdesc": "shortdesc_61F57644310745F5B011BE5EE3FE1A91", "shortdesc_61F57644310745F5B011BE5EE3FE1A91": "The last stage in setting up the product is to run Policy Manager Console for the first time. ", "content.p_AB94BBC552734B0A843F033AF9383D": "To continue:", "content.p_1672CABA6307485C8C8C7FD8D7C26D": "Depending on your operating system, you can run Policy Manager Console from the Start menu.", "content.p_88C9F787814A4F82ACC97DFEAC3ABA": "When Policy Manager Console is run for the first time, you will be asked to register the product using your customer number. You can find your customer number in the license certificate provided with the product. If you do not register the product, you can use it normally for a 30-day evaluation period. When the evaluation period expires, you will not be able to connect to the server.", "step.step_2AB9A736258A4F848CB186BD91863B": "Run Policy Manager Console.", "step.step_659E1D24CB00416093ED1C87CF556A": "Click Continue to complete the setup process.", "content.p_32A45B91161946D2967CC7489789CE": "When setting up Policy Manager Proxies, you need the admin.pub key file for installation. You can get this key from the Policy Manager Server welcome page. In the latest version of Client Security, the installation packages are prepared in Policy Manager and include the key.", "desc": [ "content.p_AB94BBC552734B0A843F033AF9383D", { "steps.steps_0800DC0186244CFE851765AB91FBC5": [ "step.step_2AB9A736258A4F848CB186BD91863B", "content.p_1672CABA6307485C8C8C7FD8D7C26D", "content.p_88C9F787814A4F82ACC97DFEAC3ABA", "step.step_659E1D24CB00416093ED1C87CF556A" ] }, "content.p_32A45B91161946D2967CC7489789CE" ] }, "task_changing_browser_path-16.10-en.json": { "title": "title_FAD94697A2514BC1B74C84AF58DA7384", "title_FAD94697A2514BC1B74C84AF58DA7384": "Changing the web browser path", "shortdesc": "shortdesc_8BBF74B1D60C400D958DDEFCD135860B", "shortdesc_8BBF74B1D60C400D958DDEFCD135860B": "Policy Manager Console acquires the file path to the default web browser during setup.", "content.p_B3D32287E9D144A0A83F2028417058": "If you want to change the web browser path:", "step.step_B27A02C7803C4B13835CC57AB3BCD7": "Select Tools > Preferences from the menu.", "step.step_F624E883800243E58656D4788568B0": "Select the Locations tab and enter the new file path.", "desc": [ "content.p_B3D32287E9D144A0A83F2028417058", { "steps.steps_2E64F7AC2362484E875C1D31ECEED1": [ "step.step_B27A02C7803C4B13835CC57AB3BCD7", "step.step_F624E883800243E58656D4788568B0" ] } ] }, "upgrading_pm_on_win_server-16.10-en.json": { "title": "title_upgrading_pm_on_win_serv_0782B", "title_upgrading_pm_on_win_serv_0782B": "Upgrading the product on a Windows Server", "shortdesc": "shortdesc_upgrading_pm_on_win_serv_0DD90", "shortdesc_upgrading_pm_on_win_serv_0DD90": "Follow these instructions to upgrade your WithSecure Policy Manager to a newer version on a Windows Server.", "content.p_upgrading_pm_on_win_serv_0C858": "", "content.note_y1l_w5k_d2c": "Important: Before you start upgrading the product, create a full backup of the WithSecure Policy Manager data (for example, H2 database and preferences). For more information on creating a full backup, refer to the Policy Manager Administrator's Guide.", "step.step_upgrading_pm_on_win_serv_07E20": "Go to the Policy Manager support page and select Download (msi) to download the installation package.", "content.note_xvz_xg4_22c": "Note: For available MSI parameters, see Supported MSI parameters.", "step.step_upgrading_pm_on_win_serv_0B302": "Double-click the .msi file to start the installation.", "content.note_qcx_wh4_22c": "Note: If you are upgrading from version 15.x or older, the Policy Manager Server data is migrated to a new location: C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\data\\. If the migration is successful and you do not need to install an older Policy Manager version, you can manually remove the old files from C:\\Program Files (x86)\\F-Secure\\Management Server 5\\. These files are not used by Policy Manager version 16 and newer and are only needed for possible downgrading.", "step.step_upgrading_pm_on_win_serv_05B6A": "In the Database maintenance window that opens, select Start maintenance and wait for all steps to complete.", "step.step_upgrading_pm_on_win_serv_0DBC8": "Select Close to complete the upgrade.", "content.p_vlq_g34_22c": "All the installed components are now upgraded while retaining the existing configuration.", "desc": [ "content.note_y1l_w5k_d2c", { "steps.steps_upgrading_pm_on_win_serv_00E1E": [ "step.step_upgrading_pm_on_win_serv_07E20", "step.step_upgrading_pm_on_win_serv_0B302", "content.note_xvz_xg4_22c", "step.step_upgrading_pm_on_win_serv_05B6A", "content.note_qcx_wh4_22c", "step.step_upgrading_pm_on_win_serv_0DBC8" ] }, "content.p_vlq_g34_22c" ] }, "task_uninstall_fspm-16.10-en.json": { "title": "title_D26515D04B5B479E9B6BADF307E13127", "title_D26515D04B5B479E9B6BADF307E13127": "Uninstalling the product", "shortdesc": "shortdesc_A939702E170848B89CB4EAA6B7741CE8", "shortdesc_A939702E170848B89CB4EAA6B7741CE8": "Follow these steps to uninstall Policy Manager components.", "content.p_F4CDF3FDC1B5495E8A5113F94723BE": "To uninstall any Policy Manager components:", "step.step_BF0C56FDFB8744C3A304565355FACC": "Open Windows Settings from the Start menu and go to Apps.", "step.step_A23520C684B24123BF5D3C0A631EF7": "Find WithSecure Policy Manager in the Apps and features list.", "step.step_BDA16AEEB3C94F848AB2AEDB905223": "Click Uninstall to begin uninstallation.", "step.step_8AB048D2A1E24F69922E98E61DDD0B": "When the uninstallation is complete, exit Windows Settings.", "content.p_9CBAB5C11B734B47BEE1052D6938D5": "Rebooting is necessary to clean up the files remaining on your computer after the uninstallation, and before the subsequent installations of the same WithSecure products.", "step.step_A12C5BB84CBE4DFAAAF92FA9DF905F": "We recommend that you reboot your computer after the uninstallation.", "desc": [ "content.p_F4CDF3FDC1B5495E8A5113F94723BE", { "steps.steps_A0BFD81972B648ED8D0CFA198BC290": [ "step.step_BF0C56FDFB8744C3A304565355FACC", "step.step_A23520C684B24123BF5D3C0A631EF7", "step.step_BDA16AEEB3C94F848AB2AEDB905223", "step.step_8AB048D2A1E24F69922E98E61DDD0B", "step.step_A12C5BB84CBE4DFAAAF92FA9DF905F", "content.p_9CBAB5C11B734B47BEE1052D6938D5" ] } ] }, "concept_installing_linux-16.10-en.json": { "title": "title_9623D96078114C5593698D4045E55A63", "title_9623D96078114C5593698D4045E55A63": "Installing the product on Linux", "shortdesc": "shortdesc_238B6F7661C24FBB8B1BAE7B4D442F79", "shortdesc_238B6F7661C24FBB8B1BAE7B4D442F79": "This section describes how to install the product on Linux computers. ", "desc": [] }, "installing_pm_linux-16.10-en.json": { "title": "title_A4AA75889A474C8DA098149FD9C5D27E", "title_A4AA75889A474C8DA098149FD9C5D27E": "Installation steps", "shortdesc": "shortdesc_5C6395E06A724288833A7DEC76A34FA7", "shortdesc_5C6395E06A724288833A7DEC76A34FA7": "You can install Policy Manager Server and Policy Manager Console either on the same computer or on separate ones. ", "content.p_C7AC56599787414082E4B543C1CC62": "", "content.note_754CF5884D854467B8F86CDEECA537": "Note: For more details on the installation process and on upgrading from a previous version of Policy Manager, see the release notes.", "content.title_D6C37681A0EB4BE49C973D9AA2F69D48": "Installation notes", "content.p_B8BDBB3D7C2C402C9CD07B914FFFD8": "Red Hat and Suse distributions:", "choice.choice_27BC65413F674DC0BF9209EFEF8F89": "Policy Manager Server requires 64-bit versions of the libstdc++ library. Make sure that the libstdc++ package is installed before you install Policy Manager Server.", "choice.choice_installation_00000A_A346177C": "On SuSE Linux Enterprise Server/Desktop 15 and openSUSE Leap 15, insserv-compat need to be installed before installing Policy Manager.", "content.p_20A528943297494ABB9F7D2476C44C": "Debian and Ubuntu distributions:", "choice.choice_installation_00000D_7CD136D7": "64-bit version of the libstdc++ library must be installed prior to installing Policy Manager Server. Install the libstdc++6 package before installing Policy Manager Server. If installation was not completed because the compatibility library was not found, install the library and then use the apt-get install -f command to complete installing the product.", "desc": [ "content.note_754CF5884D854467B8F86CDEECA537", "content.title_D6C37681A0EB4BE49C973D9AA2F69D48", "content.p_B8BDBB3D7C2C402C9CD07B914FFFD8", { "choices.ul_8E2D7D5F055E4EFDB8EBA5DE225E6E": [ "choice.choice_27BC65413F674DC0BF9209EFEF8F89", "choice.choice_installation_00000A_A346177C" ] }, "content.p_20A528943297494ABB9F7D2476C44C", { "choices.ul_abg_4zn_wgc": [ "choice.choice_installation_00000D_7CD136D7" ] } ] }, "task_installing_fsaua-16.10-en.json": { "title": "title_9FC2E199EC3D4986A75F79554F6CDCAC", "title_9FC2E199EC3D4986A75F79554F6CDCAC": "Install Policy Manager Server", "shortdesc": "shortdesc_5A8DBE556E784149A858BD15EA2FEC7A", "shortdesc_5A8DBE556E784149A858BD15EA2FEC7A": "The first step is to install WithSecure Policy Manager Server. ", "step.step_906DDB1F13DA4ACAB81BD7DCAE0F52": "Log in as root.", "step.step_603F9519C68D4C0DAE37672B4BE86A": "Open a terminal.", "cell.choptionhd_3199742A4CE54CF4B3BA2399360894": "Distribution type", "cell.chdeschd_81F2743F4AF74332BFBC4499FD995C": "Command", "cell.choption_BDF53848B621492FB563298EE76B39": "Ubuntu and Debian-based distributions", "cell.chdesc_E732558DC5594B1DBDF387DFB67D4F": "dpkg -i wspms_<version_number>.<build number>_amd64.deb", "cell.choption_A61C1D5D110A4D7582C951FF2E660D": "RPM-based distributions", "cell.chdesc_3DFD2D34B7CE4E7E849B670C0783B5": "rpm -i wspms-<version_number>.<build number>-1.x86_64.rpm", "step.step_D7872267EC6B4AB082D26849CD7E13": "To install, enter the following command:", "content.p_A693E7F9062C48C49D9F20512DA4E5": "Press Enter to choose the default setting (shown in square brackets).", "step.step_ADF384D71D5044B88534C06E179682": "To configure, type /opt/f-secure/fspms/bin/fspms-config and answer the questions.", "subchoice.choice_D62D63808C5D497F8281F075A0A3F9": "systemctl status fspms", "content.p_CD92BD72E09047A6A8057DD9E0F059": "", "subchoice.choice_F4AB460E64B94B36918080279DA8B7": "http://localhost - Policy Manager Server status", "subchoice.choice_38FC9A5B5DD548CCA91FC98B854557": "https://localhost:8081 - Web Reporting status", "content.p_B27B14288FF041AD94434D91F4F9E8": "Alternatively, you can open your browser and go to the following URLs:", "step.step_FDB4C81BABE84ADD8FB5B89912D5FD": "Log in as a normal user and enter the following command to check the status of the components:", "subsubchoice.choice_BE5E10FCE64D4EF4A7584D654254EB": "/var/opt/f-secure/fspms/data/fspms.proxy.config", "content.p_21FC398CEA254CF5BC5069C51BE4C9": "", "substep.substep_6DD059E429624C87A205E6C43F4CFF": "Edit the HTTP proxy configuration file:", "content.p_9DD8F8F3CE994290AB931B31A6FF0B": "http_proxy=[http://][user[:password]@]<address>[:port].", "content.note_D2483F8439074C8A9498EE09F7FBD4": "Note: Policy Manager only supports basic authentication for HTTP proxies.", "content.p_1AEDB71060B84EF7ADC918C58B469B": "Use percent encoding for any reserved URI characters in the user name or password. For example, if the password is ab%cd, you need to enter it as follows: http_proxy=http://user:ab%25cd@proxy.example.com:8080/.", "substep.substep_464490C7F40A4EFEB0A4E01CB2D55C": "Add the proxy as a new line, using the following format:", "substep.substep_372557A6C0684D848CE25D485913B5": "Restart the Policy Manager Server service.", "content.note_AA15E4AB2D9347C49BC2AFB85C71E0": "Note: Policy Manager supports a single HTTP proxy configuration and there is no fallback to a direct internet connection when an HTTP proxy is defined.", "step.step_installing_fsaua_000004_6976D1": "Specify the HTTP proxy configuration if the Policy Manager host does not have a direct internet connection.", "content.p_CD15BB54112242EDA6A3FA1C0F9BA5": "Once the configuration script is finished, Policy Manager Server is running and will start automatically whenever the computer is restarted.", "desc": [ { "steps.steps_B230D59BB069431B955FAA74071F1A": [ "step.step_906DDB1F13DA4ACAB81BD7DCAE0F52", "step.step_603F9519C68D4C0DAE37672B4BE86A", "step.step_D7872267EC6B4AB082D26849CD7E13", { "table.table_53556B88E72E419F91120543C0EB35": [ { "thead.chhead_C8575AC7086641EC87EC6D4F8F575C": [ "cell.choptionhd_3199742A4CE54CF4B3BA2399360894", "cell.chdeschd_81F2743F4AF74332BFBC4499FD995C" ] }, { "row.chrow_E7C0E67A0D7E4347A0A4DFD4FFAE1F": [ "cell.choption_BDF53848B621492FB563298EE76B39", "cell.chdesc_E732558DC5594B1DBDF387DFB67D4F" ] }, { "row.chrow_736979ECAEC84E9B9D183AACABCB0C": [ "cell.choption_A61C1D5D110A4D7582C951FF2E660D", "cell.chdesc_3DFD2D34B7CE4E7E849B670C0783B5" ] } ] }, "step.step_ADF384D71D5044B88534C06E179682", "content.p_A693E7F9062C48C49D9F20512DA4E5", "step.step_FDB4C81BABE84ADD8FB5B89912D5FD", "content.p_CD92BD72E09047A6A8057DD9E0F059", { "subchoices.ul_7CA5FE342BEE4DD69D8B686BDEB8C7": [ "subchoice.choice_D62D63808C5D497F8281F075A0A3F9" ] }, "content.p_B27B14288FF041AD94434D91F4F9E8", { "subchoices.ul_EC8B345A51904A53A4F59B78CC1C2A": [ "subchoice.choice_F4AB460E64B94B36918080279DA8B7", "subchoice.choice_38FC9A5B5DD548CCA91FC98B854557" ] }, "step.step_installing_fsaua_000004_6976D1", { "substeps.substepsalpha_specifyhttpproxy": [ "substep.substep_6DD059E429624C87A205E6C43F4CFF", "content.p_21FC398CEA254CF5BC5069C51BE4C9", { "subsubchoices.ul_4739B149D9C34405984C3F40A7DE23": [ "subsubchoice.choice_BE5E10FCE64D4EF4A7584D654254EB" ] }, "substep.substep_464490C7F40A4EFEB0A4E01CB2D55C", "content.p_9DD8F8F3CE994290AB931B31A6FF0B", "content.note_D2483F8439074C8A9498EE09F7FBD4", "content.p_1AEDB71060B84EF7ADC918C58B469B", "substep.substep_372557A6C0684D848CE25D485913B5" ] }, "content.note_AA15E4AB2D9347C49BC2AFB85C71E0" ] }, "content.p_CD15BB54112242EDA6A3FA1C0F9BA5" ] }, "task_installing_fspmc-16.10-en.json": { "title": "title_6A9607E4A1174F469A276D41F5E4BBA4", "title_6A9607E4A1174F469A276D41F5E4BBA4": "Install Policy Manager Console", "shortdesc": "shortdesc_ED54752D15E24D74ABF7293D2E336CCE", "shortdesc_ED54752D15E24D74ABF7293D2E336CCE": "Next, you need to install Policy Manager Console. ", "content.p_D77968FDE7FF4A7FA6E12CA556CDBE": "If you are installing the product on an Ubuntu distribution, you should log in as a normal user that has been added to /etc/sudoers.", "step.step_E4F10BFBBAFE4D5A8CE8146036C108": "Log in as root.", "step.step_40DDE83C83A04ED9A1FA1030C1C160": "Open a terminal.", "cell.choptionhd_B5981F76F66E480391B42F8DD13F40": "Distribution type", "cell.chdeschd_D2B8C84000164B6CA994F29916379B": "Command", "cell.choption_9CB84657DA9441C284EF3762FADFA1": "Ubuntu and Debian-based distributions", "cell.chdesc_148EA3A6066E4C64A1310668F17C2B": "dpkg -i wspmc_<version_number>.&lt;build number&gt;_amd64.deb&lt;/build&gt;</version_number>", "cell.choption_C9DB47DF76E7493DBF9D14ED23E34C": "RPM-based distributions", "cell.chdesc_A6C95DB94FAF4150A3968D36BC1507": "rpm -i wspmc-<version_number>.&lt;build number&gt;-1.x86_64.rpm&lt;/build&gt;</version_number>", "content.p_A10E035636D44C3AA5F2F673AAB516": "Policy Manager Console is installed to /opt/f-secure/fspmc/. A new user group called fspmc is created automatically.", "step.step_C23877EF7A604250BA66CADC9024E4": "To install type:", "content.p_3EC6C7C967C147A7BB9576A1DBF8E6": "This needs to be done before they can run Policy Manager Console:", "content.p_87B424FCECA545BDA95959786DCB3E": "groups <user id>", "content.p_1BF3ADC705554AC2A64E3292BE1BDE": "For example, if the user is Tom:", "content.p_756DE0472F714DD4A9710120A291BA": "groups Tom", "substep.substep_266F980FF25145FCBED1DDB651F6C7": "Check which groups the user belongs to:", "content.p_EFF0D03EDA784134B1E796DE699CEC": "/usr/sbin/usermod -aG fspmc <user id>", "substep.substep_D8C38D28F2354793ACD86EA1D9468F": "Add this user to the fspmc group:", "step.step_B812B126624F4C6A87B84B8B2156B0": "Add users to the fspmc user group.", "content.p_472ABDD9903E4F8B923F49C2C4D481": "You can also start Policy Manager Console from the command line by entering sg fspmc -c /opt/f-secure/fspmc/fspmc.", "step.step_1480D5CC548049F0BEE6BBCCE80C23": "Select Policy Manager Console from the WithSecure submenu in the Programs menu.", "content.p_42E30C97C7FA4B4ABA8F156CF52EBA": "The first time Policy Manager Console is started, you will be prompted to answer a few questions to complete the configuration. These questions are the same as for the Windows version.", "desc": [ { "steps.steps_B48E2C9044594C15976375C125999F": [ "step.step_E4F10BFBBAFE4D5A8CE8146036C108", "content.p_D77968FDE7FF4A7FA6E12CA556CDBE", "step.step_40DDE83C83A04ED9A1FA1030C1C160", "step.step_C23877EF7A604250BA66CADC9024E4", { "table.table_334BC48B49D84594B8AD2F84355603": [ { "thead.chhead_9467BB4CC4184270B1DB27C04C256B": [ "cell.choptionhd_B5981F76F66E480391B42F8DD13F40", "cell.chdeschd_D2B8C84000164B6CA994F29916379B" ] }, { "row.chrow_D9A88DF43E7146F6ABD11E90DE6D86": [ "cell.choption_9CB84657DA9441C284EF3762FADFA1", "cell.chdesc_148EA3A6066E4C64A1310668F17C2B" ] }, { "row.chrow_0D92E0820DF841AE869ED648CCDC47": [ "cell.choption_C9DB47DF76E7493DBF9D14ED23E34C", "cell.chdesc_A6C95DB94FAF4150A3968D36BC1507" ] } ] }, "content.p_A10E035636D44C3AA5F2F673AAB516", "step.step_B812B126624F4C6A87B84B8B2156B0", "content.p_3EC6C7C967C147A7BB9576A1DBF8E6", { "substeps.substepsalpha_4E5D9CE0D2F24BC4849A243079FFA7": [ "substep.substep_266F980FF25145FCBED1DDB651F6C7", "content.p_87B424FCECA545BDA95959786DCB3E", "content.p_1BF3ADC705554AC2A64E3292BE1BDE", "content.p_756DE0472F714DD4A9710120A291BA", "substep.substep_D8C38D28F2354793ACD86EA1D9468F", "content.p_EFF0D03EDA784134B1E796DE699CEC" ] }, "step.step_1480D5CC548049F0BEE6BBCCE80C23", "content.p_472ABDD9903E4F8B923F49C2C4D481" ] }, "content.p_42E30C97C7FA4B4ABA8F156CF52EBA" ] }, "task_upgrading_fspm-16.10-en.json": { "title": "title_848376FF726F4915875260784AC81070", "title_848376FF726F4915875260784AC81070": "Upgrading the product on a Linux server", "shortdesc": "shortdesc_17665C0462644B8688669A0005F49F57", "shortdesc_17665C0462644B8688669A0005F49F57": "Follow these instructions to upgrade your WithSecure Policy Manager to a newer version on a Linux server.", "content.p_DABD09AB9BEA468C8754B93DBA7E39": "Before you start upgrading the product, create a full backup of the WithSecure Policy Manager data (for example, H2 database and preferences). For more information, see Backing up and restoring Policy Manager data.", "content.p_4330AC3EA12C47B497BC92E70CABB1": "", "content.note_16846443F0894C408B37AE708B7C7F": "Note: You should uninstall Automatic Update Agent if you do not need it for any other WithSecure products on the same machine.", "content.p_39D0845D508746C9BB3DDCFB13AB05": "", "content.note_956ECB7008724E33B2EFE3E55B9FDF": "Note: Policy Manager Server requires Linux capabilities. Make sure this package is installed before installing Policy Manager Server. For SUSE Linux Enterprise Server 11 and SUSE Linux Enterprise Desktop 11, you might need to explicitly enable Linux File System Capabilities by adding file_caps=1 as a kernel boot option (see SUSE Linux Enterprise Server 11 release notes for more details: SUSE Linux Enterprise Server 11 SP4 release notes).", "cell.choptionhd_01DA4D8793ED4E43B3F13EF3C2C025": "Distribution type", "cell.chdeschd_BD9ED90142B0444CB6A27D19072636": "Command", "cell.choption_720B6BFAA1D2499D9CA4D62096F732": "Ubuntu and Debian-based distributions", "cell.chdesc_036759984C784E00A447B32779CC7F": "# dpkg -i wspms_<version_number>.&lt;build number&gt;_amd64.deb&lt;/build&gt;</version_number>", "cell.choption_062E483B93B34919A316BA71C2E89E": "RPM-based distributions", "cell.chdesc_EEB272A18851467E8620F59C1936C6": "# rpm -U wspms-<version_number>.&lt;build number&gt;-1.x86_64.rpm&lt;/build&gt;</version_number>", "step.step_FFC39B67EB5844B6A736D943026CBA": "Upgrade Policy Manager Server:", "cell.choptionhd_CD11BC7A900D4641BBBA67A6888929": "Distribution type", "cell.chdeschd_C3221BFDB2FB4E5D8CE45F453C1D59": "Command", "cell.choption_ECBEC700156B44F3A86C8BE7F14BB5": "Ubuntu and Debian-based distributions", "cell.chdesc_E964B8DB497740D3917CE455F6302C": "# dpkg -i wspmc_<version_number>.&lt;build number&gt;_amd64.deb&lt;/build&gt;</version_number>", "cell.choption_660E44563A6F42F88CD0B501589948": "PM-based distributions", "cell.chdesc_A6059B069EDC4D0CBEB0BF69035A0B": "# rpm -U wspmc-<version_number>.&lt;build number&gt;-1.x86_64.rpm&lt;/build&gt;</version_number>", "step.step_C3CD5F610FDD4A368C059397493E9E": "Upgrade Policy Manager Console:", "content.p_A67012A12B80472B8E478351B2A752": "/opt/f-secure/fspms/bin/fspms-db-maintenance-tool", "step.step_40C5D424BF4E44DABEA7E178C54721": "Run the database maintenance tool before starting Policy Manager Server:", "desc": [ "content.p_DABD09AB9BEA468C8754B93DBA7E39", "content.note_16846443F0894C408B37AE708B7C7F", "content.note_956ECB7008724E33B2EFE3E55B9FDF", { "steps.steps_23C7468377A94D98B9D6282AA9590D": [ "step.step_FFC39B67EB5844B6A736D943026CBA", { "table.table_E9B69F6147D44698B1AAADA8FAE4A6": [ { "thead.chhead_67202F324FC84F738DCAF20CE30581": [ "cell.choptionhd_01DA4D8793ED4E43B3F13EF3C2C025", "cell.chdeschd_BD9ED90142B0444CB6A27D19072636" ] }, { "row.chrow_50455CF1945240C39D4658FAACCDFF": [ "cell.choption_720B6BFAA1D2499D9CA4D62096F732", "cell.chdesc_036759984C784E00A447B32779CC7F" ] }, { "row.chrow_B4833C54FD204023BA3E8DBCC1931A": [ "cell.choption_062E483B93B34919A316BA71C2E89E", "cell.chdesc_EEB272A18851467E8620F59C1936C6" ] } ] }, "step.step_C3CD5F610FDD4A368C059397493E9E", { "table.table_9E10FE3AAE0C40C0AB8004F61E216C": [ { "thead.chhead_971D7319CEC043E1B2A649EF84ABB8": [ "cell.choptionhd_CD11BC7A900D4641BBBA67A6888929", "cell.chdeschd_C3221BFDB2FB4E5D8CE45F453C1D59" ] }, { "row.chrow_0D2DFCAF2EC84B2090009641F42235": [ "cell.choption_ECBEC700156B44F3A86C8BE7F14BB5", "cell.chdesc_E964B8DB497740D3917CE455F6302C" ] }, { "row.chrow_B11F517CD4274B28AF46CC9D5E4000": [ "cell.choption_660E44563A6F42F88CD0B501589948", "cell.chdesc_A6059B069EDC4D0CBEB0BF69035A0B" ] } ] }, "step.step_40C5D424BF4E44DABEA7E178C54721", "content.p_A67012A12B80472B8E478351B2A752" ] } ], "related": [ "concept_backup_restore_fspmc_data-16.10-en" ] }, "task_uninstalling_fsaua-16.10-en.json": { "title": "title_8F6E8E039CC943CD8BBBE041008E9544", "title_8F6E8E039CC943CD8BBBE041008E9544": "Uninstalling the product", "shortdesc": "shortdesc_4ED348CFB6B044E980C8F914AC675BBE", "shortdesc_4ED348CFB6B044E980C8F914AC675BBE": "To uninstall Policy Manager on Linux, you must uninstall the components in a set order. ", "content.p_9643B0F555BD40428370EB8D0653A2": "You must uninstall the three components in this order:", "step.step_44582AEB622245B397CF9272939BE7": "Policy Manager Server", "step.step_BF5C32ECCEE04CD38D09980F350542": "Policy Manager Console", "content.p_9871AEF52ECF4513A91779303A752D": "If the product is installed on an Ubuntu distribution, you should log in as a normal user that has been added to /etc/sudoers.", "step.step_5822C536FE7742C2998CB240A4FEE4": "Log in as root.", "step.step_26C41B6CA9FA4BC7BD9BF9084C9AF7": "Open a terminal.", "cell.choptionhd_4975CF53FD3F4980812A093C87EF22": "Distribution type", "cell.chdeschd_742F19B1FF144C51864693DC5F1EBC": "Command", "cell.choption_004A6F1BC6CB456696C265F135B3AE": "Ubuntu and Debian-based distributions", "step.step_9BFA348D9F384FFC83B64254ADBD0F": "dpkg -r f-secure-policy-manager-server", "step.step_E5D48B51FDC74D208DAFA48BF13D60": "dpkg -r f-secure-policy-manager-console", "cell.chdesc_28545957D78A443B91247C9CCEDA02": "", "cell.choption_33D479DB97754686A4AEE636A034E7": "RPM-based distributions", "step.step_244DE503A83E47A1BF7CCAC3D739CB": "rpm -e f-secure-policy-manager-server", "step.step_B39AC39C524C4A69B90E41B5684798": "rpm -e f-secure-policy-manager-console", "cell.chdesc_48774F93573F49439BC4679F29A707": "", "content.note_1ACA2B6637F248F1B14271AC5D3C46": "Note: To prevent accidentally deleting irreproducible data created by Policy Manager components, for example log files, MIB files, the domain tree, policies, configuration files and preferences, the uninstallation process will not remove the directories listed below. Do not delete keys that may be needed in the future. If you want to completely remove the product, log in as root and enter the following commands:
  1. rm -rf /var/opt/f-secure/fspms
  2. rm -rf /etc/opt/f-secure/fspms
  3. rm -rf /opt/f-secure/fspmc
", "step.step_7C36A1CEB7DE4C5D89FC73B2DA90E0": "Enter the following commands in the given order:", "desc": [ "content.p_9643B0F555BD40428370EB8D0653A2", { "steps.ol_B762D88247FA46C9A566BB1B59DDCD": [ "step.step_44582AEB622245B397CF9272939BE7", "step.step_BF5C32ECCEE04CD38D09980F350542" ] }, { "steps.steps_A611637EDC6B4C289C91A3ADD43E18": [ "step.step_5822C536FE7742C2998CB240A4FEE4", "content.p_9871AEF52ECF4513A91779303A752D", "step.step_26C41B6CA9FA4BC7BD9BF9084C9AF7", "step.step_7C36A1CEB7DE4C5D89FC73B2DA90E0", { "table.table_26D0D9A95AE544F8B6A2D6BA404751": [ { "thead.chhead_0E0465A9ECC44DA9BFEAF8546EA62A": [ "cell.choptionhd_4975CF53FD3F4980812A093C87EF22", "cell.chdeschd_742F19B1FF144C51864693DC5F1EBC" ] }, { "row.chrow_C2AFCC3F3FE648ED915410D1CBBD84": [ "cell.choption_004A6F1BC6CB456696C265F135B3AE", "cell.chdesc_28545957D78A443B91247C9CCEDA02", { "steps.ol_42429B94FF8D4EAD9ADA5FD08357D1": [ "step.step_9BFA348D9F384FFC83B64254ADBD0F", "step.step_E5D48B51FDC74D208DAFA48BF13D60" ] } ] }, { "row.chrow_1ED2D810E9024B4A8AD8496627A6A6": [ "cell.choption_33D479DB97754686A4AEE636A034E7", "cell.chdesc_48774F93573F49439BC4679F29A707", { "steps.ol_05827AADBE5A4C689A33F356988DA2": [ "step.step_244DE503A83E47A1BF7CCAC3D739CB", "step.step_B39AC39C524C4A69B90E41B5684798" ] } ] } ] }, "content.note_1ACA2B6637F248F1B14271AC5D3C46" ] } ] }, "concept_using_fspmc-16.10-en.json": { "title": "title_60D83FF02FC8459298EC753FB4615933", "title_60D83FF02FC8459298EC753FB4615933": "Using Policy Manager Console", "shortdesc": "shortdesc_5370D9DDEBA8442ABFAC6C8CC6833C02", "shortdesc_5370D9DDEBA8442ABFAC6C8CC6833C02": "This section contains information about the Policy Manager Console component and how it is used.", "content.p_3F2325497D9946B49FBE21994F31C5": "Policy Manager Console is a remote management console for the most commonly used WithSecure security products, designed to provide a common platform for all of the security management functions required in a corporate network.", "desc": [ "content.p_3F2325497D9946B49FBE21994F31C5" ] }, "concept_fspmc_overview-16.10-en.json": { "title": "title_1725B43376C04AD1B5B0B3D5984AC062", "title_1725B43376C04AD1B5B0B3D5984AC062": "Overview", "shortdesc": "shortdesc_0EAA96EEAD3A4E83BBAB34CE4FF36D55", "shortdesc_0EAA96EEAD3A4E83BBAB34CE4FF36D55": "This section provides some general information about Policy Manager Console. ", "content.p_4D695BAB697E46D1976C44035BB6A0": "The conceptual world of Policy Manager Console consists of hosts that can be grouped within policy domains. Policies are host-oriented. Even in multi-user environments, all users of a specific host share common settings.", "content.p_4CAAB6D75C7F414A9339ED934D630C": "An administrator can create different security policies for each host, or create a single policy for many hosts. The policy can be distributed over a network to workstations and servers.", "content.p_76914B1F2EA644F3BD14333F2449AF": "With Policy Manager Console, an administrator user can:", "choice.choice_F04E806E05C4436485EDD1E82D3024": "Set the attribute values of managed products.", "choice.choice_BD9C0F17CF9D4239A0DDB14B7A23B9": "Determine rights for users to view or modify attribute values that were remotely set by the administrator.", "choice.choice_671EB3220A2D42D994B89621BC9AA2": "Group the managed hosts under policy domains sharing common attribute values.", "choice.choice_301AA2E7D34D40F98D1A47FCBC6F17": "Manage host and domain hierarchies easily.", "choice.choice_BBD04D6529674332BDDF2E7E574B7C": "Generate policy definitions, which include attribute values and restrictions.", "choice.choice_F3D3531C69C44B4F83CF60EAC53998": "Display status.", "choice.choice_A5778170398C490D88B90CADD9FCF9": "Handle alerts.", "choice.choice_49724D409861482DB99B876842F94E": "Handle WithSecure anti-virus scanning reports.", "choice.choice_5C0235C2D25C43FEABDB5BB083FF3E": "Handle remote installations.", "choice.choice_A131760364A3460F9B7B65E47BE4AD": "View reports in HTML format, or export reports to various formats.", "content.p_95F0C9BE103C4D33A1A8E95994A0B6": "Policy Manager Console generates the policy definition, and displays status and alerts. Each managed host has a module enforcing the policy on the host.", "content.p_B8D4F969DB794574A62EE42CF69869": "Read-only users can:", "choice.choice_CB2AF83D3D1B430391373957961FC3": "View policies, statistics, operation status, version numbers of installed products, alerts and reports.", "choice.choice_2E6509C75B104B39BD0712F69F238F": "Modify Policy Manager Console properties, because its installation is user-based and modifications cannot affect other users.", "content.p_7DEAA574E8DE427CBE26269870412F": "The user cannot do any of the following in read-only mode:", "choice.choice_610505A5029A44329D5C75E3E647C3": "Modify the domain structure or the properties of domains and hosts.", "choice.choice_2BE7470C56CC4B95B35EC9B37B60F9": "Modify product settings.", "choice.choice_81EC981AB22542B6A1D7BC504A4968": "Perform operations.", "choice.choice_AD0364D081A548BEAC432E37190F95": "Install products.", "choice.choice_A5ABF71C4ECF4F1EA4313D9A1B8EC6": "Save policy data.", "choice.choice_69FB0334D03B40B69CE9A09D8AEE54": "Distribute policies.", "choice.choice_78350A9C15EC41FEA9A860F414FC95": "Delete alerts or reports.", "desc": [ "content.p_4D695BAB697E46D1976C44035BB6A0", "content.p_4CAAB6D75C7F414A9339ED934D630C", "content.p_76914B1F2EA644F3BD14333F2449AF", { "choices.ul_92CD1496EC3D454DB0E58B7F356689": [ "choice.choice_F04E806E05C4436485EDD1E82D3024", "choice.choice_BD9C0F17CF9D4239A0DDB14B7A23B9", "choice.choice_671EB3220A2D42D994B89621BC9AA2", "choice.choice_301AA2E7D34D40F98D1A47FCBC6F17", "choice.choice_BBD04D6529674332BDDF2E7E574B7C", "choice.choice_F3D3531C69C44B4F83CF60EAC53998", "choice.choice_A5778170398C490D88B90CADD9FCF9", "choice.choice_49724D409861482DB99B876842F94E", "choice.choice_5C0235C2D25C43FEABDB5BB083FF3E", "choice.choice_A131760364A3460F9B7B65E47BE4AD" ] }, "content.p_95F0C9BE103C4D33A1A8E95994A0B6", "content.p_B8D4F969DB794574A62EE42CF69869", { "choices.ul_8EF1E1B0F50B4DC3B65280A85B3FB7": [ "choice.choice_CB2AF83D3D1B430391373957961FC3", "choice.choice_2E6509C75B104B39BD0712F69F238F" ] }, "content.p_7DEAA574E8DE427CBE26269870412F", { "choices.ul_933B42485CB948C59794F90CD63851": [ "choice.choice_610505A5029A44329D5C75E3E647C3", "choice.choice_2BE7470C56CC4B95B35EC9B37B60F9", "choice.choice_81EC981AB22542B6A1D7BC504A4968", "choice.choice_AD0364D081A548BEAC432E37190F95", "choice.choice_A5ABF71C4ECF4F1EA4313D9A1B8EC6", "choice.choice_69FB0334D03B40B69CE9A09D8AEE54", "choice.choice_78350A9C15EC41FEA9A860F414FC95" ] } ] }, "concept_fspmc_basics-16.10-en.json": { "title": "title_DE281229FD4B44FFB488F9AAA82D35EF", "title_DE281229FD4B44FFB488F9AAA82D35EF": "Basic information and tasks", "shortdesc": "shortdesc_16D05A3F035B4CFE9F06B07FA2351FF4", "shortdesc_16D05A3F035B4CFE9F06B07FA2351FF4": "The following sections describe the Policy Manager Console logon procedure, menu commands and basic tasks.", "desc": [] }, "concept_logging_in-16.10-en.json": { "title": "title_0536518B5BF94523BB84836723E7BF74", "title_0536518B5BF94523BB84836723E7BF74": "Logging in", "shortdesc": "shortdesc_00DA2A1BC9EE4BD2AFAB904247186E3D", "shortdesc_00DA2A1BC9EE4BD2AFAB904247186E3D": "When you start Policy Manager Console, the Login dialog box will open. ", "content.note_7F7DF0CE9F0441CB926EEE3319FD1B": "Tip: You can click Options to expand the dialog box to include more options.", "content.p_6197AF7FBA0046EDA0D622BC88E499": "The Login dialog box can be used to select defined connections. Each connection has individual preferences, which makes it easier to manage many servers with a single Policy Manager Console instance.", "content.p_7D927BFE076448F4BBA0E7E9B35CAA": "It is also possible to have multiple connections to a single server. After selecting the connection, enter your Policy Manager Console user name and password. The user name and password are specific for your Policy Manager user account, and are not linked to your network or network administrator password. The password for the admin user is defined when installing the program, and other users (either with admin or read-only access) are created through Policy Manager Console.", "content.p_762CF1D4627A47C3ABC5145B0DA5E5": "The setup wizard creates the initial connection, which appears by default in the Connections: field. To add more connections, click Add or to edit an existing connection, click Edit (these options are available when the dialog box is expanded).", "content.p_2B015796F4EB445AA46FA9E20D469F": "Policy Manager Server generates an instance-specific, self-signed certificate when it is installed. When connecting to the server, Policy Manager Console tries to validate the server certificate and shows a warning if the validation is unsuccessful. Once the certificate's fingerprint is confirmed by an administrator, it is saved to the Administrator.properties configuration.", "desc": [ "content.note_7F7DF0CE9F0441CB926EEE3319FD1B", "content.p_6197AF7FBA0046EDA0D622BC88E499", "content.p_7D927BFE076448F4BBA0E7E9B35CAA", "content.p_762CF1D4627A47C3ABC5145B0DA5E5", "content.p_2B015796F4EB445AA46FA9E20D469F" ] }, "concept_connection_properties-16.10-en.json": { "title": "title_6251FE10743444F0AA53176500CA0B40", "title_6251FE10743444F0AA53176500CA0B40": "Connection properties", "shortdesc": "shortdesc_1807B03563374F29A652EA71FD515667", "shortdesc_1807B03563374F29A652EA71FD515667": "The connection properties are defined when adding a new connection or editing an existing one. ", "content.p_45F24E139AF144799237C65F2478D8": "The link to the data repository is defined as the HTTPS URL of Policy Manager Server.", "content.p_DA9069B031CC43EEBDB69C3A722735": "Display as specifies what the connection will be called in the Login dialog box. If Name is left empty, the URL is displayed.", "desc": [ "content.p_45F24E139AF144799237C65F2478D8", "content.p_DA9069B031CC43EEBDB69C3A722735" ] }, "task_changing_password-16.10-en.json": { "title": "title_4FBE5EE831E9435C80D1C552AF323CB3", "title_4FBE5EE831E9435C80D1C552AF323CB3": "Changing your password", "shortdesc": "shortdesc_CC618123C0B5495ABE4F6C79618FE2B9", "shortdesc_CC618123C0B5495ABE4F6C79618FE2B9": "You can change the password for your user account when you are logged in to Policy Manager.", "step.step_38B597A60CCF473B8F43BED03F3C05": "Select Tools > Change password from the menu.", "content.p_577E0083C04246F0A3BE8AA7E0E2F1": "Your password is now changed.", "step.step_BD2E0CC415CD4820ADA159445D0D2F": "Enter your new password in both fields, then click OK.", "desc": [ { "steps.steps_D545CDA5846A4978AAD73A1B742BE3": [ "step.step_38B597A60CCF473B8F43BED03F3C05", "step.step_BD2E0CC415CD4820ADA159445D0D2F", "content.p_577E0083C04246F0A3BE8AA7E0E2F1" ] } ] }, "concept_dashboard-16.10-en.json": { "title": "title_AC3C8F8B489B47E084DC09798B05F7B3", "title_AC3C8F8B489B47E084DC09798B05F7B3": "Dashboard", "shortdesc": "shortdesc_695600D334BC415CB9F7E0010958523E", "shortdesc_695600D334BC415CB9F7E0010958523E": "The dashboard in Policy Manager Console gives you an overview of the current status of the managed network. ", "content.p_36F9F11B4E3545539FCDB201FE0552": "In addition to showing you relevant, real-time information on the status of Policy Manager, the managed network, and network activity, the dashboard also provides direct links to more details and quick paths to resolve potential issues.", "content.p_43CBA97C50C348FD839782BA2B7DF4": "The dashboard shows you the following information:", "choice.choice_41EA392A5C524894BEAB7367932996": "Server CPU status.", "choice.choice_E3B34DB9A7EA412C8C88E88728257B": "Number of pending and unmanaged hosts. Click either of these to see details.", "choice.choice_80D71D63B9014A7893510BD976970D": "Status of administrator features: email notifications, scheduled reporting, alert forwarding, Active Directory, and Policy Manager Proxy. Click any of these to go to the relevant pages or to see more details.", "choice.choice_750E4E3221F745629E2DF080548F60": "Status of updates and disk space, amount of downloaded and distributed data.", "choice.choice_D105F05443CB46AF8BD1A169FCEB01": "Server events. These include virus definition updates, user activity, and warnings. Click the download icon to export the log as a CSV file.", "choice.choice_3D7BAAFFE6CB466DB8F419344936E1": "Host issues. This list shows you the current status of the main issues that affect the managed hosts. Click any of the issues to see a detailed list of the affected hosts and the proposed solution for each case.", "content.p_EFEFCB5EC3674FAFB1C1CC2FF37B93": "You can click Summary to switch to a different view of the network status.", "desc": [ "content.p_36F9F11B4E3545539FCDB201FE0552", "content.p_43CBA97C50C348FD839782BA2B7DF4", { "choices.ul_C0EFAAE34EAB4B709CAAB4ABAAACA3": [ "choice.choice_41EA392A5C524894BEAB7367932996", "choice.choice_E3B34DB9A7EA412C8C88E88728257B", "choice.choice_80D71D63B9014A7893510BD976970D", "choice.choice_750E4E3221F745629E2DF080548F60", "choice.choice_D105F05443CB46AF8BD1A169FCEB01", "choice.choice_3D7BAAFFE6CB466DB8F419344936E1" ] }, "content.p_EFEFCB5EC3674FAFB1C1CC2FF37B93" ] }, "task_adding_users-16.10-en.json": { "title": "title_4FBE5EE831E9435C80D1C552AF323CB3", "title_4FBE5EE831E9435C80D1C552AF323CB3": "Adding new users", "shortdesc": "shortdesc_CC618123C0B5495ABE4F6C79618FE2B9", "shortdesc_CC618123C0B5495ABE4F6C79618FE2B9": "You can add or remove users with either admin or read-only access to Policy Manager. ", "content.p_077D9C5F923D40F9AA1F2F36A06EFA": "As of Policy Manager version 13.00, you can import individual users or user groups from Active Directory in addition to creating users locally.", "content.p_C240C907B9AC4FF1BE6E2E45EAD474": "", "content.note_5C89515DC8EB489B957B997CADB12A": "Note: As of version 13.00, Policy Manager uses LDAPS (secure LDAP) by default to connect to the Domain Controller (DC) for Active Directory. On Windows, Policy Manager uses the Windows trust store to handle authentication to the DC seamlessly. On Linux, you must import the company certificate in Policy Manager Server's Java runtime trust store to authenticate the DC. For more information, see Importing the company certificate for Active Directory authentication on Linux. Alternatively, you can use plain LDAP to connect to the DC.", "content.p_296D7F5D8FB84606AE1B95509A32C0": "The Users view shows you name of the user as well as their access level and when they were last logged in to Policy Manager. The icons represent the type of user (local, imported from Active Directory, user group).", "content.p_831ACDD2158B4645B7BD856F2F16E9": "You can give the user access to either a specific sub-domain only or Root access to all domains.", "content.p_C391BD4DEBE7420A9592F8BAD65D8D": "The Users dialog box appears, with all current users listed.", "step.step_38B597A60CCF473B8F43BED03F3C05": "Select Tools > Users from the menu.", "substep.substep_DDEB36394D8A4FB59AE5A5A42F88A1": "Click Create local user.", "substep.substep_314C5E21AA4E48B7BD2F01F1414B99": "Enter the user name and password for the new user and select the domain access.", "substep.substep_646E55C0E8A34ED89056D21D731193": "Select Read-only access if you want to limit the user's access.", "substep.substep_B56A0CC5D4824DBE971B0F019B1954": "Click OK.", "step.step_5A44B81F1AB1471B809B7A97C5559C": "To create a single user locally:", "substep.substep_ADDEE9365307461F8C1A58CC811594": "Click Import from Active Directory.", "substep.substep_753BACFE64AD4893B5E512E4451303": "Enter the credentials for your Active Directory server, then click Next.", "content.p_63DBB21E2CBE411889D84C5BDD5E3E": "You can use the search field to find specific accounts.", "substep.substep_6F4454FA0C6C42839D67306FA223D9": "Select the user or group to import.", "substep.substep_611B00ABDB4F4BB48CEC4AE0D3B4EB": "Click Next.", "substep.substep_998CC60B4B854AC28818B46F6D73AA": "Select the domain access for the imported user or group.", "substep.substep_17CF819982E84CA590DE96C2B1F605": "Select Read-only access if you want to limit the user's access.", "substep.substep_58482F0042A7400297D587A610FB3A": "Click Done.", "step.step_46C1AE7A81604F69B97926A8C1CC1F": "To import users from Active Directory:", "content.p_158676A7728C4D9FBE8AFEB8AC3C81": "The new user or group is shown on the Users list, and can now access Policy Manager.", "content.p_1B407461E9294D2492761075E8FA30": "For imported groups, you can click See members to view details of the individual users who belong to the group.", "content.p_C7B842A8D50745FAB82C04EDE78E7E": "", "content.note_68F79B0BC52B46AFA0084E6E09F395": "Note: Any user with full admin access will be able to delete any other user, but there must be at least one user with full, root-level admin access. Users with sub-domain access can only delete other users within the scope of their sub-domain. If a user account is deleted while that user is logged in, they will be logged out and prompted to log in the next time a connection to Policy Manager is required.", "content.note_AA2282E912434805AACE8AAFCC3F4A": "Note: The following operations are only available to users with full, root-level access: ", "desc": [ "content.p_077D9C5F923D40F9AA1F2F36A06EFA", "content.note_5C89515DC8EB489B957B997CADB12A", "content.p_296D7F5D8FB84606AE1B95509A32C0", "content.p_831ACDD2158B4645B7BD856F2F16E9", { "steps.steps_D545CDA5846A4978AAD73A1B742BE3": [ "step.step_38B597A60CCF473B8F43BED03F3C05", "content.p_C391BD4DEBE7420A9592F8BAD65D8D", "step.step_5A44B81F1AB1471B809B7A97C5559C", { "substeps.substepsalpha_B91BA7A1D68A43B684B0E94A9C8F2D": [ "substep.substep_DDEB36394D8A4FB59AE5A5A42F88A1", "substep.substep_314C5E21AA4E48B7BD2F01F1414B99", "substep.substep_646E55C0E8A34ED89056D21D731193", "substep.substep_B56A0CC5D4824DBE971B0F019B1954" ] }, "step.step_46C1AE7A81604F69B97926A8C1CC1F", { "substeps.substepsalpha_B4C84AB19D364CAAA5E3FB1297E6B3": [ "substep.substep_ADDEE9365307461F8C1A58CC811594", "substep.substep_753BACFE64AD4893B5E512E4451303", "substep.substep_6F4454FA0C6C42839D67306FA223D9", "content.p_63DBB21E2CBE411889D84C5BDD5E3E", "substep.substep_611B00ABDB4F4BB48CEC4AE0D3B4EB", "substep.substep_998CC60B4B854AC28818B46F6D73AA", "substep.substep_17CF819982E84CA590DE96C2B1F605", "substep.substep_58482F0042A7400297D587A610FB3A" ] } ] }, "content.p_158676A7728C4D9FBE8AFEB8AC3C81", "content.p_1B407461E9294D2492761075E8FA30", "content.note_68F79B0BC52B46AFA0084E6E09F395", "content.note_AA2282E912434805AACE8AAFCC3F4A" ], "related": [ "task_importing_company_certificate-16.10-en" ] }, "concept_policy_domain_pane-16.10-en.json": { "title": "title_FB2ACB30F1584E5098804B3517003425", "title_FB2ACB30F1584E5098804B3517003425": "Policy domain tree", "shortdesc": "shortdesc_8DD4622957984CBBA0F20E08C11F2F67", "shortdesc_8DD4622957984CBBA0F20E08C11F2F67": "You can perform actions for policy domains and hosts on the Domain tree. ", "content.p_C6573658E8944B19BC07FFE0CF98A5": "On the Domain tree, you can do the following:", "content.note_13B34E8372104A0EA1B49D74F2B460": "Note: A new policy domain can be created only when a parent domain is selected.", "choice.choice_38C27831E8814A969DA5DF8D2BA72A": "Add a new policy domain by clicking the following icon on the toolbar:
", "choice.choice_BE3058DE36484FC9BA95B67ED6C1F9": "Add a new host by clicking the following icon:
", "choice.choice_311FEC71924647BFBEA661826DB557": "Find a host.", "choice.choice_6C7B7F6D13B440A4873CF60ADE2707": "View the properties of a domain or host. All hosts and domains should be given unambiguous names.", "choice.choice_CFB762DB8BB548A79EDBA8D3A5B12C": "Import new hosts.", "choice.choice_B0B56014C1B44856A928F448A4CE3C": "Autodiscover hosts from a Windows domain.", "choice.choice_8E475C16AE4E49D3B811906E74B848": "Delete domains.", "choice.choice_067F938892ED49CA8E4834CDE7551F": "Move hosts or domains, using cut and paste operations.", "choice.choice_5D2BB379FFDA4127B733C885B22197": "Export a policy file.", "content.p_A8D2BBB076614BD8864350345E2688": "After selecting a domain or host, you can access the above options from the Edit menu.", "content.p_77EAAF7C9C694EE9959A27E71DD0B1": "The domains referred to in the commands are not Windows NT or DNS domains. Policy domains are groups of hosts or subdomains that have a similar security policy.", "desc": [ "content.p_C6573658E8944B19BC07FFE0CF98A5", { "choices.ul_34B66580625A427F9339ECD03D8A11": [ "choice.choice_38C27831E8814A969DA5DF8D2BA72A", "content.note_13B34E8372104A0EA1B49D74F2B460", "choice.choice_BE3058DE36484FC9BA95B67ED6C1F9", "choice.choice_311FEC71924647BFBEA661826DB557", "choice.choice_6C7B7F6D13B440A4873CF60ADE2707", "choice.choice_CFB762DB8BB548A79EDBA8D3A5B12C", "choice.choice_B0B56014C1B44856A928F448A4CE3C", "choice.choice_8E475C16AE4E49D3B811906E74B848", "choice.choice_067F938892ED49CA8E4834CDE7551F", "choice.choice_5D2BB379FFDA4127B733C885B22197" ] }, "content.p_A8D2BBB076614BD8864350345E2688", "content.p_77EAAF7C9C694EE9959A27E71DD0B1" ] }, "concept_messages_pane-16.10-en.json": { "title": "title_0A3835468F654A7B861F325AF81505C9", "title_0A3835468F654A7B861F325AF81505C9": "Messages pane", "shortdesc": "shortdesc_D8687892F2174622BE9C3B7BB45C531E", "shortdesc_D8687892F2174622BE9C3B7BB45C531E": "Policy Manager Console logs messages in the Messages pane about different events.", "content.p_1729034AB6614861B9B844A782619B": "Unlike the Alerts and Scanning reports tabs, Messages pane events are generated only by Policy Manager Console.", "content.p_B57F8F0DC13E4B7683089F563AC66D": "There are three categories of messages: Information, Warnings, and Errors. Each Messages view tab can contain messages of all three severities. You can delete a category in the displayed context menu by right-clicking on a tab. By right-clicking on an individual message, a context menu is displayed with Cut, Copy, and Delete operations.", "content.p_B2DDA647C3834D6B938C855AB07111": "By default, messages are logged into both files in the message subdirectory of the local Policy Manager Console installation directory. Logs of the messages are kept both in English and the language you have set for Policy Manager Console. A separate log file is created for each message category (tab names in the Messages pane). You can use the Preferences > Locations page to specify the directory for the log file.", "desc": [ "content.p_1729034AB6614861B9B844A782619B", "content.p_B57F8F0DC13E4B7683089F563AC66D", "content.p_B2DDA647C3834D6B938C855AB07111" ] }, "concept_product_upgrade_notifications-16.10-en.json": { "title": "title_8EA58DD9962D434889BC7EB476359DCF", "title_8EA58DD9962D434889BC7EB476359DCF": "Product upgrade notifications", "shortdesc": "shortdesc_52F9E68FC9654E0B93BA235751DE3C30", "shortdesc_52F9E68FC9654E0B93BA235751DE3C30": "When you start Policy Manager Console, it notifies you of new available versions or used versions that are reaching their end of support, for either Policy Manager itself or any of your managed applications. ", "content.p_2602A334A9E24AB48F7E633BD9424B": "", "content.note_7A225251E5F24D8D98C41EF6D9BE22": "Note: You can also manually check if there are any upgrades available by selecting Help > Check for product upgrades from the menu.", "content.p_591C69C736A3446398915A5434B506": "Available upgrades are shown on the Product upgrades tab of the Messages pane, listing the available new versions of your software along with the corresponding links for you to download the new versions. The upgrade messages apply only to applications that are relevant for your managed environment.", "content.p_A2CE225A3EFF48BBAD8E8A6F58AD28": "Policy Manager also sends a server alert email to the defined recipients for each new available upgrade.", "content.p_DBD7A21EC44B4AF990D7E57E05203E": "When you install a Policy Manager upgrade or import the installation package for a managed application, the corresponding message automatically disappears from the Product upgrades list.", "content.p_9CFA9B260EEB426A80757725F8D887": "You can mark the proposed upgrade as ignored to skip it.", "desc": [ "content.note_7A225251E5F24D8D98C41EF6D9BE22", "content.p_591C69C736A3446398915A5434B506", "content.p_A2CE225A3EFF48BBAD8E8A6F58AD28", "content.p_DBD7A21EC44B4AF990D7E57E05203E", "content.p_9CFA9B260EEB426A80757725F8D887" ] }, "concept_managing_domains_hosts-16.10-en.json": { "title": "title_3ECC76114A2E4D7AA2AE92D22BCAE4FD", "title_3ECC76114A2E4D7AA2AE92D22BCAE4FD": "Managing domains and hosts", "shortdesc": "shortdesc_CB677756EDE9493A949551D07191415E", "shortdesc_CB677756EDE9493A949551D07191415E": "If you want to use different security policies for different types of hosts (laptops, desktops, servers), for users in different parts of the organization or users with different levels of computer knowledge, it is a good idea to plan the domain structure based on these criteria.", "content.p_E016A0B3CBC04870BFE58AF63CCA71": "This makes it easier for you to manage the hosts later on. If you have designed the policy domain structure beforehand, you can import the hosts directly to that structure. If you want to get started quickly, you can also import all hosts to the root domain first, and create the domain structure later, when the need for that arises. The hosts can then be cut and pasted to the new domains.", "content.p_76A6CCFB214B4E949D136BE15D7467": "All domains and hosts must have a unique name in this structure.", "content.p_5074C661651C4EBEA6BD13E50AEDD0": "Another possibility is to create the different country offices as subdomains.", "desc": [ "content.p_E016A0B3CBC04870BFE58AF63CCA71", "content.p_76A6CCFB214B4E949D136BE15D7467", "content.p_5074C661651C4EBEA6BD13E50AEDD0" ] }, "task_adding_policy_domains-16.10-en.json": { "title": "title_4AEE3E9C680B4ADE98E592F14D712378", "title_4AEE3E9C680B4ADE98E592F14D712378": "Adding policy domains", "shortdesc": "shortdesc_E8C38DF45C3A44E7A698462FF8F4D093", "shortdesc_E8C38DF45C3A44E7A698462FF8F4D093": "This topic describes how to add new policy domains. ", "content.p_C66DF24F969742A089E7C75EBD77DA": "To add a new policy domain:", "content.p_43D85231CBDE4921B539F6EAF67026": "The new policy domain will be a subdomain of the selected parent domain.", "step.step_24AE2552F92F4E42AFCC066146F3F8": "Click the following icon on the toolbar:
", "content.p_7CC5E74129E9431B81091BAD59444A": "An icon for the domain will be created.", "step.step_75975F812B0B4DCBBF6478EBAAE583": "Enter a name for the policy domain.", "desc": [ "content.p_C66DF24F969742A089E7C75EBD77DA", { "steps.steps_027B215D408E4F33A9585F49E54C25": [ "step.step_24AE2552F92F4E42AFCC066146F3F8", "content.p_43D85231CBDE4921B539F6EAF67026", "step.step_75975F812B0B4DCBBF6478EBAAE583", "content.p_7CC5E74129E9431B81091BAD59444A" ] } ] }, "concept_adding_hosts-16.10-en.json": { "title": "title_B8075647068B437D84B35DEAFE278DB0", "title_B8075647068B437D84B35DEAFE278DB0": "Adding hosts", "shortdesc": "shortdesc_5010AF101AB94CCE97C0B620E0CCB6E5", "shortdesc_5010AF101AB94CCE97C0B620E0CCB6E5": "This section describes different ways of adding hosts to a policy domain. ", "content.p_B9D225218E1E414F81928F3A3F6D87": "The main methods of adding hosts to your policy domain, depending on your operating system, are as follows:", "choice.choice_C8A07D85D9E644E3B79B6735C7CE4F": "Import hosts from an Active Directory.", "choice.choice_1F009DCFA8844E9294F0A0175FFE89": "Import hosts directly from your Windows domain.", "choice.choice_F91FABEA3E1142BDA2FF25D91CC8D9": "Use host import rules to automatically import newly connected hosts that already have WithSecure security software installed.", "choice.choice_0EFCA1B99E6B4892A715ED1366B529": "Create hosts manually by using the New host command.", "desc": [ "content.p_B9D225218E1E414F81928F3A3F6D87", { "choices.ul_D31935F197324CB3B6DF83859611A8": [ "choice.choice_C8A07D85D9E644E3B79B6735C7CE4F", "choice.choice_1F009DCFA8844E9294F0A0175FFE89", "choice.choice_F91FABEA3E1142BDA2FF25D91CC8D9", "choice.choice_0EFCA1B99E6B4892A715ED1366B529" ] } ] }, "concept_importing_ad_structure-16.10-en.json": { "title": "title_4731C4ED2BB44ED3A2798BDC10CE71C4", "title_4731C4ED2BB44ED3A2798BDC10CE71C4": "Importing hosts from an Active Directory", "shortdesc": "shortdesc_B4C7FD910FF642628E177300A5E4D223", "shortdesc_B4C7FD910FF642628E177300A5E4D223": "You can import a policy domain structure and hosts to Policy Manager from an Active Directory structure. ", "content.p_D0628205C5374F5CA4A9AAE30A071F": "There are three ways that you can connect your Active Directory to Policy Manager:", "choice.choice_7F2852754733427B896EB452B9CAE3": "Create a synchronization rule: Use this approach if you want to fully replicate your Active Directory tree in Policy Manager. Any changes in Active Directory are automatically replicated in your domain tree, for example if you add, remove, or move an organization unit.", "choice.choice_BC3107BB56AE4E5ABD059ADCE50785": "Create a notification rule: Use this option if you do not want synchronize your Active Directory and Policy Manager domain trees automatically, but still want to monitor the network for unprotected hosts. Any unprotected hosts are added to the list of unmanaged hosts, where you can then add them to the domain tree.", "choice.choice_47180D999F594DF382757C4462EB30": "Import structure manually: If you only want to import the Active Directory tree, but do not want to synchronize or monitor the tree for any future changes, you can use this option.", "content.p_59B9B866CB6C48039C08F0FFEB8F28": "In addition to these options, you can use the Active Directory distinguished name as the import criteria when creating host import rules.", "desc": [ "content.p_D0628205C5374F5CA4A9AAE30A071F", { "choices.ul_B7F70048F02943C388191ABCDCA02F": [ "choice.choice_7F2852754733427B896EB452B9CAE3", "choice.choice_BC3107BB56AE4E5ABD059ADCE50785", "choice.choice_47180D999F594DF382757C4462EB30" ] }, "content.p_59B9B866CB6C48039C08F0FFEB8F28" ] }, "task_importing_company_certificate-16.10-en.json": { "title": "title_33FAE787A1104F41BC97B41CC22EEDF0", "title_33FAE787A1104F41BC97B41CC22EEDF0": "Importing the company certificate for Active Directory authentication on Linux", "shortdesc": "shortdesc_CFF1AF1BB3AA43C4A1192BA946A2BDE9", "shortdesc_CFF1AF1BB3AA43C4A1192BA946A2BDE9": "To use the default LDAPS (secure LDAP) connection to the Domain Controller (DC) for Active Directory, you must import the company certificate in Policy Manager Server's Java runtime trust store to authenticate the DC. ", "content.p_D970DD23137644A99F761C03C8F619": "", "content.note_2F917B64F4FC459AAA31CA024195AA": "Note: Whenever you install a new version of Policy Manager, the certificate file is overwritten. This means that you need to repeat the steps given here after each upgrade.", "content.p_42077601957449A6A7A34F7FB20B37": "To import and apply the certificate:", "content.p_9494E93918A542DB9678A297C8D538": "You can use one of the following methods:", "subchoice.choice_3877C2B348674ACD8D5178CB812DF2": "Go to the root of the C drive and look for an automatically generated AD certificate file, which has a .crt extension.", "subchoice.choice_C25A1D89790B47718F9EEAD8FCE06C": "Run certutil -ca.cert server.crt. This saves the CA certificate as server.crt.", "subchoice.choice_94F8D47761D0413380F986B24F3F06": "Follow the steps given online in Exporting the LDAPS Certificate, but do not export the private key in step 10, and select DER encoded binary X.509 (.CER) as the export file format in step 11.", "step.step_ADB472108CEB4A23A63708CDD6B201": "Fetch your Active Directory certificate.", "step.step_DBC4E6CBA87B4477BB7474CE13FC8C": "Copy the certificate file to the Policy Manager host, for example to /home/user/Downloads/server.crt.", "content.p_AD2989144D7948008DF71997F45A82": "cd /opt/f-secure/fspms/jre/", "step.step_91EE6D083B544C5D9E0EE4F6D33F70": "Run the following command to go to Policy Manager's JRE directory:", "content.p_42740B094096427BBAFCCF0C6867C5": "./bin/keytool -importcert -keystore ./lib/security/cacerts -file /home/user/Downloads/server.crt", "content.p_B06ACAA527EC458CA52639F7E83ACE": "keytool prompts you to enter a password. Use the default keystore password, changeit.", "step.step_83FE42E406C24385AE2BB2B34BA4F0": "Run keytool to apply the certificate:", "step.step_13C33D6C8B00480B94F1A15CF0DDBF": "Enter yes when asked if you trust this certificate, and press Enter.", "content.p_4355148E301340AAA7D956F474ADCC": "systemctl restart fspms", "step.step_B56BFDF088F74E3DB18D069E2892A7": "Restart the Policy Manager service:", "desc": [ "content.note_2F917B64F4FC459AAA31CA024195AA", "content.p_42077601957449A6A7A34F7FB20B37", { "steps.steps_191A07E053864305B946EC9E3EA7EE": [ "step.step_ADB472108CEB4A23A63708CDD6B201", "content.p_9494E93918A542DB9678A297C8D538", { "subchoices.choices_D288434A5B7C439B816555F7FA5037": [ "subchoice.choice_3877C2B348674ACD8D5178CB812DF2", "subchoice.choice_C25A1D89790B47718F9EEAD8FCE06C", "subchoice.choice_94F8D47761D0413380F986B24F3F06" ] }, "step.step_DBC4E6CBA87B4477BB7474CE13FC8C", "step.step_91EE6D083B544C5D9E0EE4F6D33F70", "content.p_AD2989144D7948008DF71997F45A82", "step.step_83FE42E406C24385AE2BB2B34BA4F0", "content.p_42740B094096427BBAFCCF0C6867C5", "content.p_B06ACAA527EC458CA52639F7E83ACE", "step.step_13C33D6C8B00480B94F1A15CF0DDBF", "step.step_B56BFDF088F74E3DB18D069E2892A7", "content.p_4355148E301340AAA7D956F474ADCC" ] } ] }, "task_importing_ad_sync_rule-16.10-en.json": { "title": "title_9CF411CFF4F246308AACFF82CD91334F", "title_9CF411CFF4F246308AACFF82CD91334F": "Creating an Active Directory synchronization rule", "shortdesc": "shortdesc_34E8AEA6042B4ECF9533C948EC63FF74", "shortdesc_34E8AEA6042B4ECF9533C948EC63FF74": "Synchronization rules define a link between an Active Directory subtree and your policy domain tree, after which any changes in Active Directory are automatically synchronized and any new hosts are detected in Policy Manager. ", "content.p_0AF2D348630D40FFB6C5FA1CEF75D5": "", "content.note_F8BBB7DFDD4F4ABD9A3FA793C055D2": "Note: Subtrees that are marked for synchronization in the Policy Manager domain tree are read-only and you cannot make any changes to them from the console.", "step.step_08FA3CDF9421431B8A00782620CC3B": "On the Active Directory tab, click Create synchronization rule.", "step.step_ABABA94BCFB64E5DA3D915D5446BDE": "Enter the server address for your Active Directory server and a user name and password that provide at least read access, then click Next.", "step.step_DCD6B52057A24EAB9D1F22176DE790": "Select the Active Directory container that you want to import, then click Next.", "content.note_2B0A30EA832245889835C99D715447": "Important: If you select root as the target policy domain, the entire policy tree becomes read-only. We recommend that you create or use a separate subtree for the Active Directory structure.", "step.step_5662BBFB4DE04599A9C7A97760AE44": "Select the target policy domain for importing the structure, then click Next.", "content.p_5BBDABFBD0FA451187063CC7B42D7D": "The Active Directory structure is added to your policy domain tree and synchronized. Any new detected hosts that already have WithSecure software installed are automatically imported to the appropriate location in the domain tree, and any other new hosts are added to the list of unmanaged hosts.", "step.step_82CD9A65018A476DA33EFC817061C0": "Click Done to run the synchronization rule.", "desc": [ "content.note_F8BBB7DFDD4F4ABD9A3FA793C055D2", { "steps.steps_05C1527DF93E48BA8257334CA47045": [ "step.step_08FA3CDF9421431B8A00782620CC3B", "step.step_ABABA94BCFB64E5DA3D915D5446BDE", "step.step_DCD6B52057A24EAB9D1F22176DE790", "step.step_5662BBFB4DE04599A9C7A97760AE44", "content.note_2B0A30EA832245889835C99D715447", "step.step_82CD9A65018A476DA33EFC817061C0", "content.p_5BBDABFBD0FA451187063CC7B42D7D" ] } ] }, "task_importing_ad_notification_rule-16.10-en.json": { "title": "title_FAAF5A3BA8AF4696846C01AEE7205236", "title_FAAF5A3BA8AF4696846C01AEE7205236": "Creating an Active Directory notification rule", "shortdesc": "shortdesc_6D8A1E1ED9D943FF81534F5455911D04", "shortdesc_6D8A1E1ED9D943FF81534F5455911D04": "You can use a notification rule to handle importing hosts from Active Directory to Policy Manager, for example if you want to maintain separate structures, but still want to monitor your network environment for any unprotected hosts. ", "step.step_F6F78E11065645B9BFBFA15A71EFFB": "On the Active Directory tab, click Create notification rule.", "step.step_30D83F08798745D6B2B688EBBCD473": "Enter the server address for your Active Directory server and a user name and password that provide at least read access, then click Next.", "step.step_EE39499F0CF647809DE0B29CAB1A0D": "Select the Active Directory container that you want to import, then click Next.", "content.p_90541D1502404782A575699D9B44AE": "The Active Directory is checked, and any new detected hosts are added to the list of unmanaged hosts.", "step.step_91E42B9BEA764569BAE2F00F688E93": "Click Done to run the notification rule.", "desc": [ { "steps.steps_DAC5AFC39BC241CE9D156CB7A9DFBB": [ "step.step_F6F78E11065645B9BFBFA15A71EFFB", "step.step_30D83F08798745D6B2B688EBBCD473", "step.step_EE39499F0CF647809DE0B29CAB1A0D", "step.step_91E42B9BEA764569BAE2F00F688E93", "content.p_90541D1502404782A575699D9B44AE" ] } ] }, "task_importing_ad_manually-16.10-en.json": { "title": "title_A609DA52B92A4A9499BC515C341B4DE5", "title_A609DA52B92A4A9499BC515C341B4DE5": "Manually importing from Active Directory", "shortdesc": "shortdesc_ABDE55C301814C79A429268B18CF9866", "shortdesc_ABDE55C301814C79A429268B18CF9866": "When you import from Active Directory manually, the structure is imported to the selected domain, but Policy Manager does not poll the Active Directory for new hosts. ", "step.step_8259EE573B9F455EAD0B1230CA7198": "On the Active Directory tab, click Import structure manually.", "step.step_5CB47BFC1C034BB097528E98F526DD": "Enter the server address for your Active Directory server and a user name and password that provide at least read access, then click Next.", "step.step_E7E015A5072940C0B585B4CD50564B": "Select the Active Directory container that you want to import, then click Next.", "content.note_2B0A30EA832245889835C99D715447": "Important: If you select root as the target policy domain, the entire policy tree becomes read-only. We recommend that you create or use a separate subtree for the Active Directory structure.", "step.step_14315107BE5A48C186A7C8CA02C83A": "Select the target policy domain for importing the structure, then click Next.", "step.step_C2A67BBC958642DC9DD1543B9B0E92": "Once the structure is imported, click Close.", "content.p_DA35763971934AAFA2BBF7FCEE0606": "", "content.note_CCBC6A947DF04F8C952961C19E9B03": "Note: You can create host import rules to import hosts connecting later, using the Active Directory distinguished name as the import criteria.", "desc": [ { "steps.steps_C375F1E4FC87460D815B48EB876C62": [ "step.step_8259EE573B9F455EAD0B1230CA7198", "step.step_5CB47BFC1C034BB097528E98F526DD", "step.step_E7E015A5072940C0B585B4CD50564B", "step.step_14315107BE5A48C186A7C8CA02C83A", "content.note_2B0A30EA832245889835C99D715447", "step.step_C2A67BBC958642DC9DD1543B9B0E92" ] }, "content.note_CCBC6A947DF04F8C952961C19E9B03" ] }, "task_handling_unmanaged_hosts-16.10-en.json": { "title": "title_B879C6778F9F450CAE01DEFF6DADB212", "title_B879C6778F9F450CAE01DEFF6DADB212": "Handling unmanaged hosts", "shortdesc": "shortdesc_7472C8FB15ED4B02BD28681F1A3E308F", "shortdesc_7472C8FB15ED4B02BD28681F1A3E308F": "When you have created an Active Directory synchronization or notification rule, any new hosts added to the linked Active Directory appear in Policy Manager as unmanaged hosts. ", "content.p_676591DC2A5E480EA47DB988410828": "The current number of unmanaged hosts detected is shown above the domain tree in Policy Manager. If you have set up email notifications for server alerts, you also receive alerts indicating the total number of unmanaged hosts.", "content.p_912F4A3E4DD54427B6A1C7AC5BE25C": "To process unmanaged hosts:", "content.p_F121C48FB72E484BB763662AA32935": "The Unmanaged hosts dialog shows you a list of all the currently detected, unmanaged hosts from the linked Active Directory structure.", "step.step_E2459EFE2C0349C29BE778B43FA33D": "On the Hosts outside the domain tree pane, click Unmanaged.", "content.p_DACB1740461B440AB8B4D2CC650D03": "For example, if any hosts have a valid reason for not having antivirus software installed, you can ignore them so that they do not show up in later alerts.", "content.note_14F2B5FE72994C009A24932CCB809B": "Tip: Use Hide ignored hosts to toggle the visibility of the ignored hosts.", "step.step_2D2C2B1583C445318AAEDFB4300850": "Select any hosts that you want to ignore, then click Ignore hosts.", "content.p_F85A095A52F946BFB092EFF3D6AC91": "The selected hosts are added to the policy domain tree and you can start installing the necessary security software.", "step.step_CFD8CF747BA2400EA6EE532B7A1A8D": "Select the hosts that you want to add to the Policy Manager domain tree, then click Start installation.", "desc": [ "content.p_676591DC2A5E480EA47DB988410828", "content.p_912F4A3E4DD54427B6A1C7AC5BE25C", { "steps.steps_AAABC4838FBF45D3B37D63093814B8": [ "step.step_E2459EFE2C0349C29BE778B43FA33D", "content.p_F121C48FB72E484BB763662AA32935", "step.step_2D2C2B1583C445318AAEDFB4300850", "content.p_DACB1740461B440AB8B4D2CC650D03", "content.note_14F2B5FE72994C009A24932CCB809B", "step.step_CFD8CF747BA2400EA6EE532B7A1A8D", "content.p_F85A095A52F946BFB092EFF3D6AC91" ] } ] }, "task_adding_hosts_windows-16.10-en.json": { "title": "title_871F6A125CEC4F17A3CC1FAC12BC15B5", "title_871F6A125CEC4F17A3CC1FAC12BC15B5": "Adding hosts in Windows domains", "shortdesc": "shortdesc_7A25B4FF96164CE2BFD8568ADB69825A", "shortdesc_7A25B4FF96164CE2BFD8568ADB69825A": "In a Windows domain, the most convenient method of adding hosts to your policy domain is by importing them through Intelligent Installation.", "content.p_BEC9F4543D954805B15EAB887C49B2": "Note that this also installs Management Agent on the imported hosts. To import hosts from a windows domain:", "step.step_6112CD3E7BA5411B80C7506974340C": "Select the target domain.", "content.p_4DCC25049D9844C193E5E79B4BE245": "After the Autodiscover operation is completed, the new host is automatically added to the Policy domain tree.", "step.step_860E24DE118B499DB84AD3DB207CCE": "Select Edit > Autodiscover Windows hosts from the menu.", "desc": [ "content.p_BEC9F4543D954805B15EAB887C49B2", { "steps.steps_D9285B900E83410187C256D7B28810": [ "step.step_6112CD3E7BA5411B80C7506974340C", "step.step_860E24DE118B499DB84AD3DB207CCE", "content.p_4DCC25049D9844C193E5E79B4BE245" ] } ], "related": [ "software_distribution-16.10-en" ] }, "task_import_autoreg_hosts-16.10-en.json": { "title": "title_164651FF50C14B38B820B3D5E698A53A", "title_164651FF50C14B38B820B3D5E698A53A": "Importing new hosts", "shortdesc": "shortdesc_256B1EA43E2C4FAC8BA878DB605B4D9E", "shortdesc_256B1EA43E2C4FAC8BA878DB605B4D9E": "Another option for adding hosts in Policy Manager Console is to import new hosts. ", "content.p_E5E498CDD9F94E46985AAC8E079010": "You can do this only after the client software has been installed on the hosts and after the hosts have sent a connection request to Policy Manager.", "content.p_FEBCBEC5549B4A6CB9AD6EE99A2428": "To import new hosts:", "content.p_698596D072984C2E8191077ED86AF5": "Alternatively:", "subchoice.choice_D5D2482685244E22A3639C14A729F3": "Select Edit > Import new hosts from the menu.", "subchoice.choice_E2128BFDEC2D45FBB62749094DC81F": "Select Import new hosts from the Installation view.", "content.p_D972BEF991BC4F279230852ACCF737": "When the operation is completed, the host is added to the domain tree. The new hosts can be imported to different domains based on different criteria, such as the hosts’ IP or DNS address. The New hosts view offers a tabular view to the data which the host sends in the autoregistration message. This includes any custom properties that were included in the remote installation package during installation.", "step.step_7899DE73D836408ABAF48ED6D715C1": "Click the following icon on the toolbar:
", "subchoice.choice_E0C84BEB584C491397BE48EA87ABD2": "You can sort messages according to the values of any column by clicking the corresponding table header.", "subchoice.choice_8A7290C18AB645E0A1D36F113E4B89": "You can change the column ordering by dragging and dropping the columns to the suitable locations, and column widths can be freely adjusted.", "subchoice.choice_D7FDC8EFCCD842D39EFB01447BFC15": "You can use the table context menu (click the right mouse button on the table header bar) to specify which properties are visible in the table.", "step.step_FACA98A1FD894FDD95609DB938F9FB": "You can perform the following actions on the New hosts view:", "desc": [ "content.p_E5E498CDD9F94E46985AAC8E079010", "content.p_FEBCBEC5549B4A6CB9AD6EE99A2428", { "steps.steps_6463FF1507F54195BFC456AC1A2D1E": [ "step.step_7899DE73D836408ABAF48ED6D715C1", "content.p_698596D072984C2E8191077ED86AF5", { "subchoices.choices_FEA0969116FA49ECA2C37A7560E7DC": [ "subchoice.choice_D5D2482685244E22A3639C14A729F3", "subchoice.choice_E2128BFDEC2D45FBB62749094DC81F" ] }, "content.p_D972BEF991BC4F279230852ACCF737", "step.step_FACA98A1FD894FDD95609DB938F9FB", { "subchoices.choices_7D5DFA711E62452497703CF02B7C7F": [ "subchoice.choice_E0C84BEB584C491397BE48EA87ABD2", "subchoice.choice_8A7290C18AB645E0A1D36F113E4B89", "subchoice.choice_D7FDC8EFCCD842D39EFB01447BFC15" ] } ] } ], "related": [ "task_login_script_windows-16.10-en" ] }, "task_using_autoreg_import_rules-16.10-en.json": { "title": "title_FDA474C1AB2F4B8EB13E9519ECC56B60", "title_FDA474C1AB2F4B8EB13E9519ECC56B60": "Using import rules", "shortdesc": "shortdesc_4F9FE8BC83D94E25AA4D1969FCE6E9FE", "shortdesc_4F9FE8BC83D94E25AA4D1969FCE6E9FE": "You can define the import rules for new hosts on the Import rules tab in the Import new hosts window. ", "content.p_A007C23FE8D147AD8D6D660A356DB4": "Import rules can be applied automatically to new hosts that connect to the server. This means that there is no need to run the import rules manually when new hosts connect to Policy Manager Server; the new hosts are added to the domain structure according to the existing import rules.", "content.p_00CE5A5E73514FBD9C190A73AFF89B": "You can use the following as import criteria in the rules:", "subchoice.choice_A4FCECBB84C144CB870BF5B3F25CD7": "These support * (asterisk) as a wildcard. The * character can replace any number of characters. For example: host_test* or *.example.com. You can also use multiple wildcards, for example ab*4*.", "subchoice.choice_9B718FB327904CE0A21D04B1EFAB5A": "Matching is not case-sensitive, so upper-case and lower-case characters are treated as the same character.", "choice.choice_3B334826C3034682907D9AF30F85A8": "WINS name, DNS name, custom properties", "subchoice.choice_1A286F3371E149C6AF269351128649": "This supports exact IP address matching (for example: 192.1.2.3) and IP sub-domain matching (for example: 10.15.0.0/16).", "choice.choice_A6FF79E50D63415987C3416231F391": "IP address", "content.p_3F297E344E9947A2B35B2B12BF4CCA": "Only the values in the currently visible columns are used as matching criteria when importing hosts to the policy domain. The values in the currently hidden columns are ignored.", "step.step_F2306B1992C7419A9D9A40862017BB": "You can hide and display columns in the table by using the right-click menu that opens when you right-click any column heading in the Import rules window.", "content.p_FB70EF206458481DB85EBE1E9CCD3E": "One example of how to use the custom properties is to create separate installation packages for different organizational units, which should be grouped under unit-specific policy domains. In this case you could use the unit name as the custom property, and then create import rules that use the unit names as the import criteria. Note that custom property names that are hidden are remembered only until Policy Manager Console is closed. To add a new custom property:", "content.p_29F92E578A1F46628CC8AD86133670": "The New custom property dialog opens.", "substep.substep_E050EC8EEF984B918F73357BC9DF6F": "Right-click a column heading and select Add new custom property.", "content.p_FB4874FCAA1644AF93056CED230EDE": "The new custom property now appears in the table, and you can create new import rules in which it is used as import criteria.", "substep.substep_2E90BE22A8E94954AC57F6D37532E3": "Enter a name for the custom property, for example the unit name, then click OK.", "step.step_1502D4C12F8347F29553DE2B39AF86": "You can add new custom properties to be used as criteria when importing hosts.", "content.p_19343DD93EB344D7BBE3E0ACF5CC87": "The Select target policy domain for rule dialog opens displaying the existing domains and sub-domains.", "substep.substep_E5CACBB6948842689E2A7BBF5B8DAC": "Click Add on the Import rules tab.", "substep.substep_E0EFD147A0CC4854B41F651D50A6D3": "Select the domain for which you want to create the rule and click OK.", "substep.substep_8DA296B1784C4E25BBC123FAAE837A": "Select the new row that was created and click the cell where you want to add a value.", "content.p_FD16B8734693490F83A1FF10320C66": "The import criteria is defined.", "substep.substep_45645924278D4876A014D056841179": "Enter the value in the cell.", "substep.substep_5350C0DE8CA645FEA958E501C09AE4": "Select Apply rules automatically when new hosts connect to the server if you want the rules to be applied automatically for any new connected hosts.", "subchoice.choice_7ACD8898F5004695B59266B379EC96": "When new hosts are imported, the rules are verified in top-down order, and the first matching rule is applied. You can change the order of the rules by clicking Move down or Move up.", "subchoice.choice_E01DF9320EA741D0B6D6BA7AEC7631": "If you want to create several rules for a domain, you can use the Clone option. Start by creating one rule for the domain. Then select the row and click Clone. Now you can edit the criteria on the new duplicated row.", "step.step_D6F7050FDB49432CADE36CC5A3BBD6": "Create a new import rule:", "content.p_41E5228B988B47EEBC76FD15DFEE81": "The import rules you have defined will be validated before importing starts.", "content.p_0C42D2D54BAE463FA7760E222C6FAE": "After the hosts have been imported, you will see a summary dialog displaying the number of successfully imported hosts and the number of unsuccessful import operations. Note that an empty set of conditions is always treated as matching.", "step.step_760C7BBEF9E94E7FA94F6C811CDB17": "When you want to start the import operation, select the New hosts tab and click Import.", "desc": [ "content.p_A007C23FE8D147AD8D6D660A356DB4", "content.p_00CE5A5E73514FBD9C190A73AFF89B", { "choices.ul_4AA1844807DC4398B447BDB3E586CB": [ "choice.choice_3B334826C3034682907D9AF30F85A8", { "subchoices.ul_33ACB2D965D44EBFA942D01D14B9AE": [ "subchoice.choice_A4FCECBB84C144CB870BF5B3F25CD7", "subchoice.choice_9B718FB327904CE0A21D04B1EFAB5A" ] }, "choice.choice_A6FF79E50D63415987C3416231F391", { "subchoices.ul_5415D4CF5A5745E3801749E807E282": [ "subchoice.choice_1A286F3371E149C6AF269351128649" ] } ] }, { "steps.steps_5C54B72C55F74FAB8882C0173254E3": [ "step.step_F2306B1992C7419A9D9A40862017BB", "content.p_3F297E344E9947A2B35B2B12BF4CCA", "step.step_1502D4C12F8347F29553DE2B39AF86", "content.p_FB70EF206458481DB85EBE1E9CCD3E", { "substeps.substepsalpha_1C2E608B4BC24A899E45C0F7FFC24D": [ "substep.substep_E050EC8EEF984B918F73357BC9DF6F", "content.p_29F92E578A1F46628CC8AD86133670", "substep.substep_2E90BE22A8E94954AC57F6D37532E3", "content.p_FB4874FCAA1644AF93056CED230EDE" ] }, "step.step_D6F7050FDB49432CADE36CC5A3BBD6", { "substeps.substepsalpha_2A838FB9A1CB40E08BC5A25644EC13": [ "substep.substep_E5CACBB6948842689E2A7BBF5B8DAC", "content.p_19343DD93EB344D7BBE3E0ACF5CC87", "substep.substep_E0EFD147A0CC4854B41F651D50A6D3", "substep.substep_8DA296B1784C4E25BBC123FAAE837A", "substep.substep_45645924278D4876A014D056841179", "content.p_FD16B8734693490F83A1FF10320C66", "substep.substep_5350C0DE8CA645FEA958E501C09AE4" ] }, { "subchoices.choices_0F761B888C2E496590ABE746117B7C": [ "subchoice.choice_7ACD8898F5004695B59266B379EC96", "subchoice.choice_E01DF9320EA741D0B6D6BA7AEC7631" ] }, "step.step_760C7BBEF9E94E7FA94F6C811CDB17", "content.p_41E5228B988B47EEBC76FD15DFEE81", "content.p_0C42D2D54BAE463FA7760E222C6FAE" ] } ] }, "task_creating_hosts_manually-16.10-en.json": { "title": "title_81061E1859154ED080DC5BB21F6B9598", "title_81061E1859154ED080DC5BB21F6B9598": "Creating hosts manually", "shortdesc": "shortdesc_5315C922417E45DC9D43F096DD5F5BC3", "shortdesc_5315C922417E45DC9D43F096DD5F5BC3": "This topic describes how to create hosts manually. ", "content.p_D18AD41FD28148D1B55547855F4A87": "To create a host manually:", "step.step_7EE7066295714FEF943C18823E2454": "Select the target domain.", "content.p_B50DCA3F8B1744118C12A842032DC1": "Alternatively:", "subchoice.choice_C154169A53F24B8E89459C376E23F9": "Click the following icon on the toolbar:
", "subchoice.choice_85D216FEB1714D7DA74C20216D0858": "Press Insert.", "step.step_5C0705233CB94159BD7CB1991DA6B9": "Select Edit > New host from the menu.", "subchoice.choice_99DE7490E3144555B9ECE097E9AFCD": "Learning and testing – you can try out a subset of Policy Manager Console features without actually installing any software in addition to Policy Manager Console.", "subchoice.choice_93A71D5AB226484980C9B17C80B222": "Defining policy in advance – you can define and generate a policy for a host before the software is installed on the host.", "subchoice.choice_F39A2A0574D74AB586255B65CA7B19": "Special cases – you can generate policies for hosts that will never access the server directly (that is, when it is not possible to import the host). For example, it is possible to generate base policy files for a computer that does not access the WithSecure Policy Manager Server. The base policy file must be transferred either manually or by using another external transport mechanism.", "content.p_ED7092631C434335A22178BFE639ED": "This operation is useful in the following cases:", "content.note_B6E19A7A09D14019B8EEBBE4D0124F": "Note: Hosts without Management Agent installed cannot be administered through Policy Manager Console because they have no means of fetching policies. Also, no status information will be available. Any changes made to the domain structure are implemented even though you exit Policy Manager Console without saving changes to the current policy data.", "step.step_AC59DFFB096647D2B919082A359BB5": "Enter an identifier for the new host and click OK.", "desc": [ "content.p_D18AD41FD28148D1B55547855F4A87", { "steps.steps_459B01E11DBF44CDA2783719D50A87": [ "step.step_7EE7066295714FEF943C18823E2454", "step.step_5C0705233CB94159BD7CB1991DA6B9", "content.p_B50DCA3F8B1744118C12A842032DC1", { "subchoices.choices_B08552E58AC542E78C24526E17E181": [ "subchoice.choice_C154169A53F24B8E89459C376E23F9", "subchoice.choice_85D216FEB1714D7DA74C20216D0858" ] }, "step.step_AC59DFFB096647D2B919082A359BB5", "content.p_ED7092631C434335A22178BFE639ED", { "subchoices.ul_C1956EC9CF1C4DA59DCE7BAFA79D9B": [ "subchoice.choice_99DE7490E3144555B9ECE097E9AFCD", "subchoice.choice_93A71D5AB226484980C9B17C80B222", "subchoice.choice_F39A2A0574D74AB586255B65CA7B19" ] }, "content.note_B6E19A7A09D14019B8EEBBE4D0124F" ] } ], "related": [ "task_exporting_policy_file-16.10-en" ] }, "task_handling_disconnected_hosts-16.10-en.json": { "title": "title_4FBE5EE831E9435C80D1C552AF323CB3", "title_4FBE5EE831E9435C80D1C552AF323CB3": "Handling disconnected hosts automatically", "shortdesc": "shortdesc_CC618123C0B5495ABE4F6C79618FE2B9", "shortdesc_CC618123C0B5495ABE4F6C79618FE2B9": "You can specify when hosts are considered disconnected, and also when disconnected hosts should be removed from the policy domain.", "step.step_38B597A60CCF473B8F43BED03F3C05": "Select Tools > Server configuration from the menu.", "step.step_580D6CF3ACB74F098968B5025E912E": "Select Hosts.", "step.step_C6DD3988914A42AC8C138EFE8D03A4": "Enter the number of days, after which the host status will be set to Disconnected in Consider hosts disconnected after.", "step.step_BB4C50AC8FC94A9B923094F5048A2D": "Enter the number of days, after which disconnected hosts will be removed from the policy domain in Remove disconnected hosts after.", "step.step_AC4821C63F814389A421C675A4A1D6": "Click OK to close the dialog box.", "desc": [ { "steps.steps_D545CDA5846A4978AAD73A1B742BE3": [ "step.step_38B597A60CCF473B8F43BED03F3C05", "step.step_580D6CF3ACB74F098968B5025E912E", "step.step_C6DD3988914A42AC8C138EFE8D03A4", "step.step_BB4C50AC8FC94A9B923094F5048A2D", "step.step_AC4821C63F814389A421C675A4A1D6" ] } ] }, "concept_managing_policies-16.10-en.json": { "title": "title_1273507F525743DE8409CAB960970FCE", "title_1273507F525743DE8409CAB960970FCE": "Managing policies", "shortdesc": "shortdesc_9A9089CA0A62430D8CE916A921F79C4A", "shortdesc_9A9089CA0A62430D8CE916A921F79C4A": "This section describes how to configure and distribute policies.", "content.p_338A576A30D6423EABF1DB97BBFA5F": "Several users can be logged in and make changes to the policies at the same time. Any changes made by users are automatically saved to their own personal workspace, so there is no need to save the changes manually. Changes made by any user will only be visible to other users and take effect when the user distributes the policy changes.", "content.note_B8D65FF494474D30AA3B528FCF35E1": "Note: There is no conflict resolution for policy changes made by different users; the last distributed changes will override any previous changes to the policy variables.", "content.p_B162A7CDED3542269D605595DBDEE5": "When policy changes are distributed, the policy files are generated automatically for each host on request. This means that there is no need to redistribute the policy when you change the domain structure, for example by adding new hosts, or after you upgrade the managed software on existing hosts.", "desc": [ "content.p_338A576A30D6423EABF1DB97BBFA5F", "content.note_B8D65FF494474D30AA3B528FCF35E1", "content.p_B162A7CDED3542269D605595DBDEE5" ] }, "task_configuring_settings-16.10-en.json": { "title": "title_106BF6958DB1447CA374F81B1559D416", "title_106BF6958DB1447CA374F81B1559D416": "Configuring settings", "shortdesc": "shortdesc_5976F02C5D9C4BBE958496D4CEEB110D", "shortdesc_5976F02C5D9C4BBE958496D4CEEB110D": "A policy variable may have a pre-defined default value. The default values behave as if they were inherited from above the root domain. That is, they appear to be inherited values even if the top (root) domain is selected. Default values can be overridden just like any other value. ", "content.p_9DF587D2351247EF82BDC6B02BB3CE": "Values on the selected policy domain level are color-coded as follows:", "choice.choice_661526D464034F49A349489CABF4BF": "Black – changed values on the selected policy domain or host level.", "choice.choice_167BC4E8960A4C29903C13EBF547F7": "Gray – inherited values.", "choice.choice_90D2DD85126345C5A1E897A02F9F02": "Red – invalid values.", "choice.choice_5E3A7742195D4D95BC8B825888B5B3": "Dimmed red – inherited invalid values.", "content.p_7B94CE83D4684ACD8D745506F355A8": "To configure the policy settings:", "step.step_8CEB236D683C43B2BE211D01E42547": "Go to the Settings page and select the branch for the platform that you want to configure.", "step.step_7E81A503E83D4F13BD1DEA370B53CD": "Click the following icon to distribute the policy:
", "content.p_9CF366B1DB24445E84FC70A0DA46E1": "You can click the listed items to view the corresponding page in the settings.", "content.p_9ABF931BC8824C7B939FE09FAB542C": "If you want to revert the changes, click Clear all settings.", "step.step_CC31376372FA4E66A1DF3E73D99B78": "Review the listed changes to the policy settings, then click Distribute.", "content.p_A3F425C17EFB472EBCC63DFBF269F7": "", "content.note_89024AC26C7F4D0A8114AAC2159D7A": "Tip: You can also distribute the policies by selecting File > Distribute from the menu or by pressing CTRL + D.", "content.p_8CE2B201B19E4F27A497ABF143BA44": "Once you distribute the changes, the updated policies are saved to the database, where WithSecure software on the hosts will automatically check for updates.", "content.note_8D6620AD4B3C465AB951706881816A": "Note: No changes will take effect before you have distributed the policy and the host has fetched it. This also applies to operations, because they are implemented using the policy-based mechanism.", "desc": [ "content.p_9DF587D2351247EF82BDC6B02BB3CE", { "choices.ul_0BF7BB1D43C348E99B30669EFE0FFD": [ "choice.choice_661526D464034F49A349489CABF4BF", "choice.choice_167BC4E8960A4C29903C13EBF547F7", "choice.choice_90D2DD85126345C5A1E897A02F9F02", "choice.choice_5E3A7742195D4D95BC8B825888B5B3" ] }, "content.p_7B94CE83D4684ACD8D745506F355A8", { "steps.steps_5CEFD6FFD7D045AAB8113DABFDD5BC": [ "step.step_8CEB236D683C43B2BE211D01E42547", "step.step_7E81A503E83D4F13BD1DEA370B53CD", "step.step_CC31376372FA4E66A1DF3E73D99B78", "content.p_9CF366B1DB24445E84FC70A0DA46E1", "content.p_9ABF931BC8824C7B939FE09FAB542C" ] }, "content.note_89024AC26C7F4D0A8114AAC2159D7A", "content.p_8CE2B201B19E4F27A497ABF143BA44", "content.note_8D6620AD4B3C465AB951706881816A" ] }, "task_checking_modified_settings-16.10-en.json": { "title": "title_10E47416C9BA4DF7B2A5C8A014DDEC5A", "title_10E47416C9BA4DF7B2A5C8A014DDEC5A": "Checking modified settings", "shortdesc": "shortdesc_54B5DECAD53247329A5F8391B6A4B639", "shortdesc_54B5DECAD53247329A5F8391B6A4B639": "Domains and hosts that include modified settings are highlighted on the Domain tree. ", "content.p_1E894971885F4CA494078A306484EE": "The Domain tree shows a yellow line next to domains and hosts that include changes. This allows you to check what settings have changed for the specific domain or host and cancel the changes if necessary.", "content.p_E48B9487EBE6472D8A1DB20BFE93C0": "The modified domains are highlighted by default. You can change the settings from the menu, under Tools > Preferences.", "content.p_82D57C1E43A640E6AC427CBC3888CF": "To see the changes for a domain or host:", "step.step_F87394B8206D46E189C7ABE7462DB9": "Right-click a highlighted domain or host in the Domain tree.", "content.p_464B869C1E404287B8D8CA342DF7A1": "The Modified settings view shows you all the changes for the selected domain or host, sorted by the Settings pages.", "step.step_6A8C4C44CAEB47619BEED9DF0DABDA": "Select Show modified settings in the context menu.", "step.step_E06C00F68BAA406BAA35B8E42CD72A": "Click any of the listed changes to change focus to the corresponding page and field.", "step.step_57518122FBBB4AA28FA87C0CE4CC68": "If you want to cancel all the listed changes, click Clear all settings.", "step.step_016A68E783CD4E5A99E89FEE437B4E": "Click Close.", "desc": [ "content.p_1E894971885F4CA494078A306484EE", "content.p_E48B9487EBE6472D8A1DB20BFE93C0", "content.p_82D57C1E43A640E6AC427CBC3888CF", { "steps.steps_624368441DB340789042E4D1DDF277": [ "step.step_F87394B8206D46E189C7ABE7462DB9", "step.step_6A8C4C44CAEB47619BEED9DF0DABDA", "content.p_464B869C1E404287B8D8CA342DF7A1", "step.step_E06C00F68BAA406BAA35B8E42CD72A", "step.step_57518122FBBB4AA28FA87C0CE4CC68", "step.step_016A68E783CD4E5A99E89FEE437B4E" ] } ] }, "task_adding_notes-16.10-en.json": { "title": "title_5B043CE333064EF485359755F51D2D58", "title_5B043CE333064EF485359755F51D2D58": "Adding notes to settings", "shortdesc": "shortdesc_CA8808D4814E4F5CBA6C48BDBE37A0BD", "shortdesc_CA8808D4814E4F5CBA6C48BDBE37A0BD": "As of version 12.20, you can add notes to the policy settings in Policy Manager Console, for example to record the reasons for changing a setting. ", "content.p_D4E44091D81A48C1A530426440F4D5": "Notes are inherited within the policy domain; any inherited notes are shown with a gray icon. You can add further comments for a specific host or subdomain to inherited notes.", "cell.entry_CD026DBB31394E53B775C20B42463D": "Icon", "cell.entry_1BCD29DFB8994358A044DCB770797E": "Description", "cell.entry_08B86175CB1249DA9E2425C3F5AFDA": "", "cell.entry_8B7ED09B0D8442569C4365DCB4A13E": "No notes available for this setting. Click to add a note.", "cell.entry_1837F9D8837E4466B5891FE429B4BB": "", "cell.entry_74C53A96647A45D3BBF160DB356738": "A note has been added for this setting. Click to view or edit the note.", "cell.entry_42A5D563E7CF41D890F5A3A6442999": "", "cell.entry_CA7818E00D0B4104B6FF9FEC8E085E": "A note for this setting has been inherited. Click to view or edit the note.", "cell.entry_3C104630D8924C85A2D4EF0C8F1585": "", "cell.entry_2C5F9B2BB55D4465903EB209350333": "Click this icon in the note editor to delete the note.", "content.p_722E67F6064342D391F6E4677DAE03": "Notes are also shown in the Domain policy values dialog and in inheritance reports.", "content.p_C31E6120E4434481BCF0A386A420B6": "To add a note:", "content.p_5FD52368C5744CAA8303BCD78F8861": "The note editor appears.", "step.step_AC747B15858E427A8E8C4ECE7ADC07": "Click the note icon next to the setting to which you want to add a note.", "step.step_42605CFE04B448D287660A69D2062C": "Enter the text that you want to add.", "content.p_B1C267C08E994340AF0E44B849101F": "The time and user name for the last change to the note are recorded, and the icon changes to indicate that there is a note for the setting.", "content.note_235AD87B6F28486ABA735A1F7A6EFC": "Note: Even though the note is automatically saved, it is not visible to other administrators until you distribute the policy.", "step.step_A46711ABCCA94DA4A3E8004098BE5A": "Click anywhere outside the note editor to save your comment and close the editor.", "content.note_95FF253103FA4CD3B4EB09D3075DB6": "Note: The time of the last change to a note is updated when the policy is distributed.", "step.step_83C53838EB5549CB8DFAD126DF336B": "Click the following icon to distribute the policy:
", "content.p_D23041B90E444DFEA688C5AF707752": "To delete any note, click the note icon, then click the trash icon in the note editor and confirm that you want to delete the note.", "content.note_D0048651A2D34601AA57669E51985A": "Note: You cannot delete inherited notes (shown with a gray icon). You can only delete notes on the domain level where they have been added.", "desc": [ "content.p_D4E44091D81A48C1A530426440F4D5", { "table.table_A682FDA027AA4AFE836685E5F03392": [ { "thead.thead_B879FBAFEA3A44C8A4EB0635016365": [ "cell.entry_CD026DBB31394E53B775C20B42463D", "cell.entry_1BCD29DFB8994358A044DCB770797E" ] }, { "row.row_adding_notes_00000B_57D58375": [ "cell.entry_08B86175CB1249DA9E2425C3F5AFDA", "cell.entry_8B7ED09B0D8442569C4365DCB4A13E" ] }, { "row.row_adding_notes_00000C_E7981294": [ "cell.entry_1837F9D8837E4466B5891FE429B4BB", "cell.entry_74C53A96647A45D3BBF160DB356738" ] }, { "row.row_adding_notes_00000D_E8855C5A": [ "cell.entry_42A5D563E7CF41D890F5A3A6442999", "cell.entry_CA7818E00D0B4104B6FF9FEC8E085E" ] }, { "row.row_adding_notes_00000E_AB282F35": [ "cell.entry_3C104630D8924C85A2D4EF0C8F1585", "cell.entry_2C5F9B2BB55D4465903EB209350333" ] } ] }, "content.p_722E67F6064342D391F6E4677DAE03", "content.p_C31E6120E4434481BCF0A386A420B6", { "steps.steps_3535085BDDAA49D49E4EF8E5ECE8E4": [ "step.step_AC747B15858E427A8E8C4ECE7ADC07", "content.p_5FD52368C5744CAA8303BCD78F8861", "step.step_42605CFE04B448D287660A69D2062C", "step.step_A46711ABCCA94DA4A3E8004098BE5A", "content.p_B1C267C08E994340AF0E44B849101F", "content.note_235AD87B6F28486ABA735A1F7A6EFC", "step.step_83C53838EB5549CB8DFAD126DF336B", "content.note_95FF253103FA4CD3B4EB09D3075DB6" ] }, "content.p_D23041B90E444DFEA688C5AF707752", "content.note_D0048651A2D34601AA57669E51985A" ] }, "task_discarding_changes-16.10-en.json": { "title": "title_4FBE5EE831E9435C80D1C552AF323CB3", "title_4FBE5EE831E9435C80D1C552AF323CB3": "Discarding undistributed changes to settings", "shortdesc": "shortdesc_CC618123C0B5495ABE4F6C79618FE2B9", "shortdesc_CC618123C0B5495ABE4F6C79618FE2B9": "You can undo any changes to settings that have not yet been applied.", "content.p_29EF42AF92764C96B14B2DC5DA103C": "The settings will revert to what they were when the policy was last distributed. If the changes have already been distributed, you need to manually revert the changes and redistribute the policy.", "step.step_7432772F476A49C3AE43C2FC189ED3": "Select File > Discard policy changes from the menu.", "desc": [ { "steps.steps_D545CDA5846A4978AAD73A1B742BE3": [ "step.step_7432772F476A49C3AE43C2FC189ED3", "content.p_29EF42AF92764C96B14B2DC5DA103C" ] } ] }, "concept_restrictions-16.10-en.json": { "title": "title_B0B07E83FFDC4603BB2F9E49622E8B87", "title_B0B07E83FFDC4603BB2F9E49622E8B87": "Restrictions", "shortdesc": "shortdesc_96FF3168979843649B62A9F8E783BEF7", "shortdesc_96FF3168979843649B62A9F8E783BEF7": "Using restrictions, an administrator can restrict access to any policy variable from the user.", "content.p_3BBA76B3F05F4CDFAAA7A8C9CC796B": "Policy variables that are set to Disallow user changes always forces the setting: the policy variable overrides any local host value, and the end user cannot change the value as long as the Disallow user changes restriction is set.", "desc": [ "content.p_3BBA76B3F05F4CDFAAA7A8C9CC796B" ] }, "task_using_password_protected_uninstallation-16.10-en.json": { "title": "title_14F7965E22814E86A21E5E60F5366F6C", "title_14F7965E22814E86A21E5E60F5366F6C": "Using password-protected uninstallation", "shortdesc": "shortdesc_5C236A4EF3814D90956D744F959CDD71", "shortdesc_5C236A4EF3814D90956D744F959CDD71": "As of version 12.20, you can set an uninstallation password for managed hosts to prevent the unauthorized or accidental uninstallation of client software on the hosts. ", "content.p_E07B4AA899974E75A19FA1581B9806": "", "content.note_48CE1922B4E7489C9E52C0FE43FB49": "Note: Check the release notes for your client software to see if the version supports password-protected uninstallation.", "content.p_176F0B58C88C4C31A6C528FA8356EE": "When password-protected uninstallation is in use, uninstalling client software managed by Policy Manager on a host requires the user to enter the uninstallation password. Without the correct password, uninstallation is canceled.", "content.note_B8041D0D33C1425BB1275944A2E395": "Note: Password-protected uninstallation also applies to distributed Policy Manager components that are installed on managed hosts.", "content.p_184DA378FA9645E69CE2053A813D4D": "To set up password-protected uninstallation:", "step.step_085CB6DF3E0E4A6D9A63AE26B8B883": "Select the target domain or host.", "step.step_91311B8A0EED43D4BD3B17ECC2F4A7": "Go to the Settings tab and select the Centralized management page.", "step.step_42FB66D917864A6E8C6691114F585C": "Under Uninstallation password, click Set password.", "step.step_2E6F795257734B5B9C777BAD6B6840": "In the Set uninstallation password dialog, enter and confirm the password that you want to use, then click OK.", "step.step_168F25D57FB64E55A4AA2963F7D311": "Click the following icon to distribute the policy:
", "content.p_C9977D5208FA4E8FB299DCA21050AF": "The password that you set must now be entered when uninstalling managed client software locally. If you want to stop using password-protected uninstallation, click Remove password.", "desc": [ "content.note_48CE1922B4E7489C9E52C0FE43FB49", "content.p_176F0B58C88C4C31A6C528FA8356EE", "content.note_B8041D0D33C1425BB1275944A2E395", "content.p_184DA378FA9645E69CE2053A813D4D", { "steps.steps_34983CEBA35B4814BD4857D4763C8A": [ "step.step_085CB6DF3E0E4A6D9A63AE26B8B883", "step.step_91311B8A0EED43D4BD3B17ECC2F4A7", "step.step_42FB66D917864A6E8C6691114F585C", "step.step_2E6F795257734B5B9C777BAD6B6840", "step.step_168F25D57FB64E55A4AA2963F7D311" ] }, "content.p_C9977D5208FA4E8FB299DCA21050AF" ] }, "task_copying_policy_settings-16.10-en.json": { "title": "title_8A5C0F31132D4BF49224885F0BA8770C", "title_8A5C0F31132D4BF49224885F0BA8770C": "Copying policy settings between Policy Manager instances", "shortdesc": "shortdesc_B8C4CE73397345FA9256E3A4B396E578", "shortdesc_B8C4CE73397345FA9256E3A4B396E578": "If your environment includes multiple instances of Policy Manager, you can copy the policy settings from one instance to another. ", "content.p_73737A4BDD7D49C2A5AC34729BB46E": "Copying the policy settings involves exporting all non-default settings from one Policy Manager instance to a JSON file, which you can then import to another instance. Only the settings that you have modified are included in the exported file.", "content.p_80969CBBC823423F911F484E1C726C": "To copy the policy settings:", "step.step_5F47F54297CB4AABBEA9D9D4095660": "In the Policy Manager Console domain tree, select the domain that you want to copy the settings from.", "step.step_0360845F02F4482190D5E60D492AD6": "Select Tools > Export policy settings from the menu.", "content.p_3CD4CC45EADB4C9B9D6B13A71AB2C1": "Select Include Firewall and Application control profiles and Include settings from parent domains if you also want to include those settings in the exported file.", "step.step_CD679CFC1988497AA7D97E295782F6": "Check the listed settings and click the Browse button.", "step.step_5956B02EC96C4011B3320FD3B7A60F": "Select a location and name for the exported JSON file, then click Export.", "step.step_32C59EE79075454D9A661A1AFBD651": "If necessary, copy the exported file to a location that you can access on other Policy Manager instances.", "step.step_003A27BCEFFC488CA318F3CA514A02": "In Policy Manager Console for the instance that you want to copy the settings to, select the domain that you want to copy the settings to.", "step.step_1FBF1B62E5824287BB387496845D52": "Select Tools > Import policy settings.", "step.step_9685F2D3ECB94DFEBA28108019CEB4": "Click the Browse button to select the already exported JSON file and click Import.", "content.p_4ED8783638464D80A3AD45B9009262": "The new settings are applied to the selected domain.", "step.step_A882E01DBF504466B6D3B351F401D0": "Check the listed settings and click Import.", "step.step_86FE9374C98F4EBBA8D1BDD5253051": "Click the following icon to distribute the policy:
", "desc": [ "content.p_73737A4BDD7D49C2A5AC34729BB46E", "content.p_80969CBBC823423F911F484E1C726C", { "steps.steps_F4658EC1A381446D8358C06CAD4F53": [ "step.step_5F47F54297CB4AABBEA9D9D4095660", "step.step_0360845F02F4482190D5E60D492AD6", "step.step_CD679CFC1988497AA7D97E295782F6", "content.p_3CD4CC45EADB4C9B9D6B13A71AB2C1", "step.step_5956B02EC96C4011B3320FD3B7A60F", "step.step_32C59EE79075454D9A661A1AFBD651", "step.step_003A27BCEFFC488CA318F3CA514A02", "step.step_1FBF1B62E5824287BB387496845D52", "step.step_9685F2D3ECB94DFEBA28108019CEB4", "step.step_A882E01DBF504466B6D3B351F401D0", "content.p_4ED8783638464D80A3AD45B9009262", "step.step_86FE9374C98F4EBBA8D1BDD5253051" ] } ] }, "task_exporting_policy_file-16.10-en.json": { "title": "title_04B91E4B7A8B439AB14F9595AD90F548", "title_04B91E4B7A8B439AB14F9595AD90F548": "Exporting the policy file for a host", "shortdesc": "shortdesc_8782CED6130D436C9FC7E896757C5A99", "shortdesc_8782CED6130D436C9FC7E896757C5A99": "You can export the policy file for an individual host, for example to use as a base policy file for a manually added host that does not access Policy Manager Server. ", "content.p_0CFEB180EC1F4B939BF327BD05AB94": "To export a policy file:", "step.step_8448ED919F3742FCA96A43F48A76C6": "Right-click the target host in the Domain tree.", "cell.choptionhd_exporting_policy_file_0000C189": "Option", "cell.chdeschd_exporting_policy_file_0000DC4D": "Description", "cell.choption_exporting_policy_file_00005136": "Export policy file for 13.x host", "cell.chdesc_exporting_policy_file_0000161C": "This exports the policy file in .bpf (Base Policy File) format. Select this option if you need the file for a host that uses a legacy version of the client software.", "cell.choption_exporting_policy_file_0000A85B": "Export policy file", "cell.chdesc_exporting_policy_file_0000C183": "This exports the policy file in JSON format. Select this option if you need the file for a host that uses a supported version of the client software, or if you want to export the policy for use as a template for WithSecure Elements EPP profile.", "step.step_4CA8D374604B425988D32B78976E08": "Select the export option according to the file format that you need:", "step.step_F95E715B21514C5EBE688D50088B25": "Select a location and name for the exported file, then click OK.", "desc": [ "content.p_0CFEB180EC1F4B939BF327BD05AB94", { "steps.steps_D9AFEE325D484EFBAE832917F706F9": [ "step.step_8448ED919F3742FCA96A43F48A76C6", "step.step_4CA8D374604B425988D32B78976E08", { "table.table_A1E062246D574A3CA1F786EA1EF595": [ { "thead.chhead_exporting_policy_file_0000E8EC": [ "cell.choptionhd_exporting_policy_file_0000C189", "cell.chdeschd_exporting_policy_file_0000DC4D" ] }, { "row.choice_B6BCF3D2BED64200AC5EBB94C869EF": [ "cell.choption_exporting_policy_file_00005136", "cell.chdesc_exporting_policy_file_0000161C" ] }, { "row.choice_CD45FF4E81E84EA5A72192393A3445": [ "cell.choption_exporting_policy_file_0000A85B", "cell.chdesc_exporting_policy_file_0000C183" ] } ] }, "step.step_F95E715B21514C5EBE688D50088B25" ] } ] }, "concept_policy_inheritance-16.10-en.json": { "title": "title_8911AE5994D049C9B4788AEA39F9BDA2", "title_8911AE5994D049C9B4788AEA39F9BDA2": "Policy inheritance", "shortdesc": "shortdesc_0F135146421542C89E51C72FC084CF9C", "shortdesc_0F135146421542C89E51C72FC084CF9C": "In Policy Manager Console, each policy domain automatically inherits the settings of its parent domain, allowing for easy and efficient management of large networks.", "content.p_634C96DDAFCE4D2BBE850B6429EC6C": "The inherited settings may be overridden for individual hosts or domains. When a domain's inherited settings are changed, the changes are inherited by all of the domain’s hosts and subdomains. Any overridden setting can be made inherited again by using the Clear operation. Because the setting is deleted from the currently selected policy domain or host, the setting is replaced by the setting in the parent domain.", "content.p_72C20B1E5D0040F8AA4F7D4096C3C0": "Policy inheritance simplifies the defining of a common policy. The policy can be further refined for subdomains or even individual hosts. The granularity of policy definitions can vary considerably among installations. Some administrators might want to define only a few different policies for large domains. Other administrators might attach policies directly to each host, achieving the finest granularity.", "content.p_795C20DF0DD644F7B4167BDE1DB850": "Combining these strategies achieves the best of both worlds. Some products could inherit their policies from large domains, while other products could inherit their policies from subdomains or even get host-specific policies.", "content.p_DC82625E2B0D4AF2A6DBB7581D46DF": "If policy changes are implemented at multiple levels of the policy domain hierarchy, tracking changes can become a challenging task. One convenient way is to use the Show domain values operation to see what changes have been made to one specific policy setting.", "content.p_30C4A78C1F1F43359127B19499A9E5": "If the subdomain or host values need to be reset to the current domain values, the Force value operation can be used to clean the sub-domain and host values.", "content.note_403362F9CEE44DB091AE4A9956617A": "Tip: You can also use the Reporting tool to create Inheritance reports that show where inherited settings have been overridden.", "desc": [ "content.p_634C96DDAFCE4D2BBE850B6429EC6C", "content.p_72C20B1E5D0040F8AA4F7D4096C3C0", "content.p_795C20DF0DD644F7B4167BDE1DB850", "content.p_DC82625E2B0D4AF2A6DBB7581D46DF", "content.p_30C4A78C1F1F43359127B19499A9E5", "content.note_403362F9CEE44DB091AE4A9956617A" ], "related": [ "concept_reporting_tool-16.10-en" ] }, "concept_settings_inheritance_displayed_ui-16.10-en.json": { "title": "title_4EC0B746ABD443598441A8DC12369426", "title_4EC0B746ABD443598441A8DC12369426": "How settings inheritance is displayed on the user interface", "shortdesc": "shortdesc_8162D3FD21B34FE5BF210583D9147363", "shortdesc_8162D3FD21B34FE5BF210583D9147363": "The inherited settings and settings that have been redefined on the current level are displayed in a different way on the Policy Manager user interface.", "content.p_DB7AA70ED8C4480881505FA385E690": "", "cell.entry_112E48F5BD804CC88854A01BD27ACB": "Not inherited", "cell.entry_D5EDDC2779324B58BE12EFFE9F4548": "Inherited", "cell.entry_51004B2492D849539CAB18C4A38C93": "Description", "cell.entry_6AB58F8E9E0B4438909D51024CE4C2": "", "cell.entry_5806E656AFDD4C38BDAA1E468EE356": "", "cell.entry_961F9D3B47C6498DA252CCAEBBC3C9": "A closed lock means that users cannot change the setting, because user changes have been disallowed.
If the lock symbol is blue, the setting has been redefined on the current level. If the lock symbol is grey, the setting is inherited.", "cell.entry_1C0D6BCC2E1245D2A6DC491D304211": "", "cell.entry_B42B734649414321897BB92989EE3E": "", "cell.entry_46CA7CBB392C4255A552558C88BFF9": "An open lock symbol means that users are allowed to change the setting at the current level.
If the lock symbol is blue, the setting has been redefined on the current level. If the lock symbol is grey, the setting is inherited.", "cell.entry_FD6975FA21C34243ADB80AAD5316AE": "Clear", "cell.entry_8C10BA230351449FB88883CB4A74F8": "", "cell.entry_DD528870BDD6420FBF49E77EADD3F5": "If Clear is displayed beside a setting, it means that the setting has been redefined on the current level and that it can be cleared. When the setting is cleared, the default or inherited value is restored. If nothing is displayed beside a setting, it means that the setting is inherited.", "cell.entry_8B36FB8D965B4590BF71B7E9A348BD": "Text boxes", "cell.entry_3C3C16B7D0EA4C1F892A5CD6D6E776": "Inherited values are displayed as dimmed (with grey text).
Settings that are not inherited are displayed as black text on a white background.", "cell.entry_0ED3D591B2D640369D12E873E3EF3A": "Check boxes", "cell.entry_DF2D9B4932E9411DB9B5F68A6A5DA4": "Inherited values are displayed as dimmed on a grey background.
Values that are not inherited are displayed on a white background.", "desc": [ { "table.table_8A2347561F2B46CE936B2FC05A22FC": [ { "thead.thead_11CDD0984027413DB821314B3B7F1F": [ "cell.entry_112E48F5BD804CC88854A01BD27ACB", "cell.entry_D5EDDC2779324B58BE12EFFE9F4548", "cell.entry_51004B2492D849539CAB18C4A38C93" ] }, { "row.row_1637FD8D4CE1423FA21A7AC14CCD2E": [ "cell.entry_6AB58F8E9E0B4438909D51024CE4C2", "cell.entry_5806E656AFDD4C38BDAA1E468EE356", "cell.entry_961F9D3B47C6498DA252CCAEBBC3C9" ] }, { "row.row_4B386A0A28094A6091BBC1E770C46C": [ "cell.entry_1C0D6BCC2E1245D2A6DC491D304211", "cell.entry_B42B734649414321897BB92989EE3E", "cell.entry_46CA7CBB392C4255A552558C88BFF9" ] }, { "row.row_D5543771F57941009148C92E2CDC4E": [ "cell.entry_FD6975FA21C34243ADB80AAD5316AE", "cell.entry_8C10BA230351449FB88883CB4A74F8", "cell.entry_DD528870BDD6420FBF49E77EADD3F5" ] }, { "row.row_CC6EA3BD6D034F61BD977557A180DF": [ "cell.entry_8B36FB8D965B4590BF71B7E9A348BD", "cell.entry_3C3C16B7D0EA4C1F892A5CD6D6E776" ] }, { "row.row_4D9BF3A9D2B744F988052E84B42A5D": [ "cell.entry_0ED3D591B2D640369D12E873E3EF3A", "cell.entry_DF2D9B4932E9411DB9B5F68A6A5DA4" ] } ] } ] }, "concept_locking_unlocking_all_settings-16.10-en.json": { "title": "title_EED7522290C24792AFAA5E6C4644FA8E", "title_EED7522290C24792AFAA5E6C4644FA8E": "Locking and unlocking all settings on a page at once", "shortdesc": "shortdesc_DC6E2B3953EC40D3BA7B78B57CE1034D", "shortdesc_DC6E2B3953EC40D3BA7B78B57CE1034D": "You can choose to lock or unlock all of the settings on a page.", "content.p_68FCE55887314CD2839E82ED93880D": "The following links can be used to lock and unlock all settings on a page:", "cell.entry_A14D8E4AC7F4424A8CB358E3B73F7E": "Allow user changes", "cell.entry_C16726E0CCEC46118E76C7997F1FD2": "Unlocks all the settings that have a lock symbol displayed beside them on the current page. After this the users can change these settings.", "cell.entry_476ACD7ED36746789325BF13CE4D3D": "Disallow user changes", "cell.entry_1A22AF5AD7214F43ABD894D2CB16F4": "Locks all the settings that have a lock symbol displayed beside them on the current page. After this the users cannot change these settings.", "cell.entry_873FB26958DC475B97C01D6C7EC828": "Clear all...", "cell.entry_57AA2FAFBBA94883A7A3246438D3D7": "Clears all the settings that have been redefined on the current page and restores the default or inherited values.", "desc": [ "content.p_68FCE55887314CD2839E82ED93880D", { "table.table_43827794A9D945A4B4E5757185C838": [ { "row.row_B510585330C34B88AFF12001487C48": [ "cell.entry_A14D8E4AC7F4424A8CB358E3B73F7E", "cell.entry_C16726E0CCEC46118E76C7997F1FD2" ] }, { "row.row_81813F933E36479AAD64E1A7D9AE35": [ "cell.entry_476ACD7ED36746789325BF13CE4D3D", "cell.entry_1A22AF5AD7214F43ABD894D2CB16F4" ] }, { "row.row_B597B11B22ED4BB385319A1DE955F4": [ "cell.entry_873FB26958DC475B97C01D6C7EC828", "cell.entry_57AA2FAFBBA94883A7A3246438D3D7" ] } ] } ] }, "concept_settings_inheritance_tables-16.10-en.json": { "title": "title_22E1A45E69C046EA9A7C692AE2D3B5F4", "title_22E1A45E69C046EA9A7C692AE2D3B5F4": "Settings inheritance in tables", "shortdesc": "shortdesc_85416A87F59F402CA93D63FE99DBC520", "shortdesc_85416A87F59F402CA93D63FE99DBC520": "Settings inheritance is also displayed on tables within the settings pages.", "content.p_BF419F262D9D4BB39F5EDBD4329698": "The Firewall security levels table and the Firewall services table are so-called global tables, which means that all computers in the domain have the same values. However, different subdomains and different hosts may have different security levels enabled.", "content.p_C3783B7ABDD44F85B868D232FAB31A": "In tables the default values derived from MIBs are displayed as grey. The values that have been edited on the current level are displayed as black.", "desc": [ "content.p_BF419F262D9D4BB39F5EDBD4329698", "content.p_C3783B7ABDD44F85B868D232FAB31A" ] }, "concept_index_inheritance_tables-16.10-en.json": { "title": "title_A867BDAA915A49FC904887E1E68FC71E", "title_A867BDAA915A49FC904887E1E68FC71E": "Index inheritance in tables", "shortdesc": "shortdesc_DBAEA34336BA4CAF94D104439294A9E2", "shortdesc_DBAEA34336BA4CAF94D104439294A9E2": "When you clear a row in a table using the Clear row button, the selected row is emptied; the result depends on the types of default rows defined in the parent domains and in MIB as default rows.", "choice.choice_663EEC01C2CF4BD29C1D99EC3BDD5C": "If a row exists that has the same index values as the cleared row, it will be re-inherited.", "choice.choice_B8D2F5E5CBFC45DA8F1B13CEE17EF6": "If a row that has the same index values as the cleared row does not exist, the emptied row will remain empty after the Clear row operation.", "content.p_D671EFFBC4904A649F5BE2E66E726C": "", "content.note_5B64B8DBEA974BC9B6DBB29A9E7991": "Note: The row can be inherited from a parent domain, or from a MIB (a definition of the settings and containing the default values for all settings) as a default row. The MIB can be considered a \"domain above the root domain\" in relation to leaf value or row inheritance. MIB defaults are inherited to subdomains unless overridden at a domain level. To override an inherited row, define a row with the same index column values. MIB defaults are obtained based on the product version installed on hosts. For a domain, the values from the newest product version are used.", "desc": [ { "choices.ul_CA81E7C0D4474ADAB1846866787F16": [ "choice.choice_663EEC01C2CF4BD29C1D99EC3BDD5C", "choice.choice_B8D2F5E5CBFC45DA8F1B13CEE17EF6" ] }, "content.note_5B64B8DBEA974BC9B6DBB29A9E7991" ] }, "task_managing_operations_tasks-16.10-en.json": { "title": "title_8FB05B44E15B4D10BD375A972837009A", "title_8FB05B44E15B4D10BD375A972837009A": "Managing operations and tasks", "shortdesc": "shortdesc_FAC8AA902F494C57A528C5F5DA831ED3", "shortdesc_FAC8AA902F494C57A528C5F5DA831ED3": "You can perform various product-specific operations through Policy Manager Console. ", "content.p_55E78EE634C447AEA301077A7B6A89": "To launch an operation from Policy Manager Console:", "step.step_F6A5FD6768224173B5B4895A65D32E": "Select one of the actions from the Operations tab.", "step.step_24FB986D2F4E42FB86F33FEB1E39A4": "Click Start to start the selected operation.", "content.p_F50A510F0EC74E348DD64921396D0A": "You can click Cancel at any time to undo the operation.", "step.step_F9EB511CBFC74111B63CA60CAF9036": "The operation begins on the host as soon as you have distributed the new policy and the host has fetched the policy file.", "desc": [ "content.p_55E78EE634C447AEA301077A7B6A89", { "steps.steps_1B2492940BAE4A2BA28F0AA1013997": [ "step.step_F6A5FD6768224173B5B4895A65D32E", "step.step_24FB986D2F4E42FB86F33FEB1E39A4", "step.step_F9EB511CBFC74111B63CA60CAF9036", "content.p_F50A510F0EC74E348DD64921396D0A" ] } ] }, "concept_fsdiag-16.10-en.json": { "title": "title_21278B40120F4F66A1D38AC240525401", "title_21278B40120F4F66A1D38AC240525401": "Remote collection of diagnostics reports", "shortdesc": "shortdesc_E3FBCB90500B431DB709DBE5076D408B", "shortdesc_E3FBCB90500B431DB709DBE5076D408B": "To assist in troubleshooting issues on managed hosts, you can collect diagnostics reports from the managed software remotely in Policy Manager. ", "content.p_6C055A49778644ABA9DD226C948B94": "To collect the diagnostics from a selected host, you can run the WithSecure Support Tool task on the Operations tab in Policy Manager Console. You can only run the operation for one host at a time. Once the log files are collected on the host, they are uploaded to Policy Manager Server and you can download them in Policy Manager Console.", "content.p_302FB0B739F44DBE8F74D0C2A3F26B": "", "content.note_8273E6BEBD894CC1B40B9F276E2AD9": "Note: Remote collection of diagnostics only supports WithSecure Client Security versions 12.10 and newer and Email and Server Security versions 12.00 and newer.", "desc": [ "content.p_6C055A49778644ABA9DD226C948B94", "content.note_8273E6BEBD894CC1B40B9F276E2AD9" ] }, "concept_alerts-16.10-en.json": { "title": "title_74582E10B63C47839CE386BD2153D0C7", "title_74582E10B63C47839CE386BD2153D0C7": "Alerts", "shortdesc": "shortdesc_727DE0F970964777BAF9699397D4E0B6", "shortdesc_727DE0F970964777BAF9699397D4E0B6": "This section describes how to view alerts and reports, and how to configure alert forwarding.", "desc": [] }, "task_viewing_alerts_reports-16.10-en.json": { "title": "title_E6E53C7C869049DA8B915809FE1606CA", "title_E6E53C7C869049DA8B915809FE1606CA": "Viewing alerts and reports", "shortdesc": "shortdesc_F493294114174DC4847DEEFE7B80B07D", "shortdesc_F493294114174DC4847DEEFE7B80B07D": "The hosts can send alerts and reports if there has been a problem with a program or an operation. ", "content.p_D90CC0662AA64F18AC8F3EBEC01CF0": "When an alert is received, the following button will light up:
To view the alerts:", "cell.entry_2C245FC847DD40DBA0C5C70337DCE9": "Read", "cell.entry_F690502EE35E466DB27B3C5E83F4AB": "Click the Read button to acknowledge an alert. If all the alerts are acknowledged, the Read button will be dimmed.", "cell.entry_3C150C3C94984D2C8003659F8E6010": "Severity", "cell.entry_9AB7D75C4B12431CBA1C470ECEB081": "The problem’s severity. Each severity level has its own icon:", "cell.entry_CCE112D5F3F842AB812CEFCDC5B7DB": "", "cell.entry_9896C3C1CBF6406794EB49999A9F62": "", "cell.entry_6B18D83044BA49689D6D971B5BF8F1": "Info", "cell.entry_5F1C009B35634977AF759B6444EFF3": "Normal operating information from a host.", "cell.entry_viewing_alerts_reports_00002A2": "", "cell.entry_F90B3A7CCD13478091915461204CB9": "", "cell.entry_1784640A3FB6417F82ACE4FC58984E": "Warning", "cell.entry_1C0572441E8544B2A79CF4D3CB4410": "A warning from the host.", "cell.entry_viewing_alerts_reports_000F239": "", "cell.entry_B77A2FD80C654DEDADD35F3E09C9EF": "", "cell.entry_DB903E4E588F421EADE64AEBD85CE6": "Error", "cell.entry_4584A2DD41F145739ACCB2EE239998": "Recoverable error on the host.", "cell.entry_viewing_alerts_reports_000CA7F": "", "cell.entry_05ACFF4E093D4D3F88ACA0BE98EE62": "", "cell.entry_8C6E100D451F4B62BCFBE8113C331D": "Fatal error", "cell.entry_7047F90EAFE4485194195036C789E9": "Unrecoverable error on the host.", "cell.entry_viewing_alerts_reports_0002600": "", "cell.entry_0BC07825A75740018D6CDD49DED451": "", "cell.entry_0DD367CC81874112A0A85AF2B3EDDA": "Security alert", "cell.entry_CFC464D68837435FB56DB47AE84EBE": "Security hazard on the host.", "cell.entry_1E685B555B144654BD8A99668D3CA1": "Date/Time", "cell.entry_D52D79E500094F0DB8B1C852256552": "Date and time of the alert.", "cell.entry_BCE065C5668541AF93C3230562DA72": "Description", "cell.entry_789D78D9F6774A71A705A0CE49B0C1": "Description of the problem.", "cell.entry_9CDEE527A83043D3BFEB5139B067D9": "Host/User", "cell.entry_C5761456619E4E9D8E616341FEBF71": "Name of the host/user.", "cell.entry_4828F0FC16F54A84899A03B3286F67": "Source", "cell.entry_2B77DF5BF5784D80AA99F253BC5F4B": "The WithSecure product that sent the alert.", "content.p_viewing_alerts_reports_0002F4E": "When an alert is selected from the list, more specific information about the alert will be displayed. WithSecure anti-virus scanning alerts may have an attached report, which will also be displayed.", "content.p_9DE2A77D6EE7415192C4635F807643": "The Alerts tab will open. All alerts received will be displayed in the following format:", "step.step_04D1ABC58FB54CE8BFC09925DDBED9": "Click the following button:
", "content.p_3A56CF7BBB3D457BACE80E8088548C": "The Scanning reports tab has the same structure as the Alerts tab. Alerts tables and Scanning reports tables can be sorted by clicking on the column heading.", "step.step_438E14CF85124C048B23FB247FFBC7": "To view reports, click on the Scanning reports tab, or select Product view > Messages from the menu.", "content.p_0CFC8AB5795840BD83C6A1D51C7B55": "", "content.note_8622D80D15254EC993FB7478719344": "Tip: You can hide older alerts and reports by clicking Configure default filter on the Alerts or Scanning reports tab.", "desc": [ "content.p_D90CC0662AA64F18AC8F3EBEC01CF0", { "steps.steps_6E6BDFC22CE847CE8EC18C4739BCCA": [ "step.step_04D1ABC58FB54CE8BFC09925DDBED9", "content.p_9DE2A77D6EE7415192C4635F807643", { "table.table_3B5AF14A9E554A6CBBFF49F39D1889": [ { "row.row_E91DCA0E65FF48B79F4A11A6033FAD": [ "cell.entry_2C245FC847DD40DBA0C5C70337DCE9", "cell.entry_F690502EE35E466DB27B3C5E83F4AB" ] }, { "row.row_2E32363DC47F40D2A52643702248CF": [ "cell.entry_3C150C3C94984D2C8003659F8E6010", "cell.entry_9AB7D75C4B12431CBA1C470ECEB081" ] }, { "row.row_425FAF7D64B74791849D84A98A1350": [ "cell.entry_CCE112D5F3F842AB812CEFCDC5B7DB", "cell.entry_9896C3C1CBF6406794EB49999A9F62", "cell.entry_6B18D83044BA49689D6D971B5BF8F1", "cell.entry_5F1C009B35634977AF759B6444EFF3" ] }, { "row.row_A0166B99C8454A2A845EAB291BDE7E": [ "cell.entry_viewing_alerts_reports_00002A2", "cell.entry_F90B3A7CCD13478091915461204CB9", "cell.entry_1784640A3FB6417F82ACE4FC58984E", "cell.entry_1C0572441E8544B2A79CF4D3CB4410" ] }, { "row.row_16A60EEC7AFF422C8189A5CF200AF2": [ "cell.entry_viewing_alerts_reports_000F239", "cell.entry_B77A2FD80C654DEDADD35F3E09C9EF", "cell.entry_DB903E4E588F421EADE64AEBD85CE6", "cell.entry_4584A2DD41F145739ACCB2EE239998" ] }, { "row.row_33C493FD55C24F9B978A16D7B7A0C6": [ "cell.entry_viewing_alerts_reports_000CA7F", "cell.entry_05ACFF4E093D4D3F88ACA0BE98EE62", "cell.entry_8C6E100D451F4B62BCFBE8113C331D", "cell.entry_7047F90EAFE4485194195036C789E9" ] }, { "row.row_1ADDDDA7C8F24924A7CF37D4A6191C": [ "cell.entry_viewing_alerts_reports_0002600", "cell.entry_0BC07825A75740018D6CDD49DED451", "cell.entry_0DD367CC81874112A0A85AF2B3EDDA", "cell.entry_CFC464D68837435FB56DB47AE84EBE" ] }, { "row.row_C1D80D55794146698B2F8C1D8BD004": [ "cell.entry_1E685B555B144654BD8A99668D3CA1", "cell.entry_D52D79E500094F0DB8B1C852256552" ] }, { "row.row_384B83A01A6D4ACC9912B8D02A197B": [ "cell.entry_BCE065C5668541AF93C3230562DA72", "cell.entry_789D78D9F6774A71A705A0CE49B0C1" ] }, { "row.row_73BA03DF56B9446FA066A0DE95A8D8": [ "cell.entry_9CDEE527A83043D3BFEB5139B067D9", "cell.entry_C5761456619E4E9D8E616341FEBF71" ] }, { "row.row_367B89F97C6A4E00AD29BE9E4DA643": [ "cell.entry_4828F0FC16F54A84899A03B3286F67", "cell.entry_2B77DF5BF5784D80AA99F253BC5F4B" ] } ] }, "content.p_viewing_alerts_reports_0002F4E", "step.step_438E14CF85124C048B23FB247FFBC7", "content.p_3A56CF7BBB3D457BACE80E8088548C" ] }, "content.note_8622D80D15254EC993FB7478719344" ] }, "task_filtering_alerts_sent_by_managed_hosts-16.10-en.json": { "title": "title_4CE2FAC1D1FE441086086B67B6258615", "title_4CE2FAC1D1FE441086086B67B6258615": "Filtering alerts sent by managed hosts", "shortdesc": "shortdesc_988B8284B5B5424CB6C297F04CC79C6D", "shortdesc_988B8284B5B5424CB6C297F04CC79C6D": "Managed clients send alerts to Policy Manager. ", "content.p_AD594EF279BC41DF899DF4E4FBD801": "On Windows clients, it is possible to filter alerts that enable administrators to switch off certain alerts or groups of alerts if they are irrelevant to them.", "content.p_20BE04D2737E438593461DB6B86252": "Using the exclusion editor, you can create rules to exclude alerts. The editor uses a wizard to guide you. Each item added to the rule narrows down the scope, and you can specify these rules in any order. Once set up, the client no longer sends alerts matching the criteria specified.", "content.p_70C924B1BA8D429096B057BE8B7FAC": "To create an alert filtering rule:", "step.step_A3E2917897A84A148D49D13E6241A7": "Go to the Settings tab and select Windows > Alert sending.", "step.step_E8F16969D7D5488891D2CA3F630365": "Select Add to create a new filtering rule.", "content.p_074376551528414A9F781EA4B34AA8": "You can add multiple conditions. These are for example Source and Type.", "step.step_09BB81FCA4C54144AA13B5D0EBF2B3": "In the wizard, select Add condition to specify the conditions for the rule.", "content.p_492E12F5E639427AB6887DD36C885B": "The alert filtering rule is now set up.", "step.step_A961FBF1758748529DF7942DFA4864": "Select OK to save the rule.", "desc": [ "content.p_AD594EF279BC41DF899DF4E4FBD801", "content.p_20BE04D2737E438593461DB6B86252", "content.p_70C924B1BA8D429096B057BE8B7FAC", { "steps.steps_615670BE572946B190F42CB78BF8E1": [ "step.step_A3E2917897A84A148D49D13E6241A7", "step.step_E8F16969D7D5488891D2CA3F630365", "step.step_09BB81FCA4C54144AA13B5D0EBF2B3", "content.p_074376551528414A9F781EA4B34AA8", "step.step_A961FBF1758748529DF7942DFA4864", "content.p_492E12F5E639427AB6887DD36C885B" ] } ] }, "task_sending_alerts_email-16.10-en.json": { "title": "title_1055AB9A03A544EFADD9D4559578B470", "title_1055AB9A03A544EFADD9D4559578B470": "Sending alerts by email", "shortdesc": "shortdesc_2A2F819B02914FD689E78B4EF26F4225", "shortdesc_2A2F819B02914FD689E78B4EF26F4225": "You can set Policy Manager to send alerts for the managed environment to one or more recipients by email. ", "content.p_11F7B82B53A347B8A938D9D203FC2D": "You can send alerts both for Policy Manager Server notifications and for managed hosts. Policy Manager Server alerts are each sent as individual emails, but multiple host alerts can be included in the same email. Policy Manager checks for new alerts that are received from managed hosts every ten minutes.", "content.p_D69B9FCC8E9E45638B9B09351D2054": "To set email forwarding for alerts:", "step.step_0B658BFC066B4563A119D171D6A53A": "Select Tools > Server configuration from the menu.", "step.step_ACC2E104291744BF81322713F03805": "Click Email alerts.", "content.p_FEC0293841E24906A202BEEEC4D048": "All recipients will receive all of the alerts generated by the system.", "step.step_E642FDE50CA44C3B98623629035407": "Enter the email addresses for the recipients.", "step.step_41D2F42E03E343FDB746FAF4D7D8A2": "Select either Host and server alerts or Server alerts only as the alert type to send by email.", "content.note_1D730AF01CCB411A8F98BD14237180": "Note: If the number of alerts for the polling period exceeds the selected amount, the email shows you the most recent alerts and prompts you to check the remaining alerts in Policy Manager Console.", "step.step_D88D80A1EF32438AAC7B13F996B167": "If you include host alerts, set the minimum alert severity and how many alerts you want to see in individual emails.", "step.step_4B314AFBB57A4340A2DCF9072A182E": "Click OK.", "content.p_A2DA93BADEDF49F4BB2439ECA5C674": "The following server alerts are sent:", "choice.choice_4C027177FA2C46788150D9CDD0A07D": "Anti-virus databases are <n> days old: security alert, generated when the antivirus definition databases are more than 5 days old.", "choice.choice_AF670EDB781D40C695FA98DEB05322": "Anti-virus database version is unknown: warning, generated if the database version cannot be detected, for example if Policy Manager cannot connect to the Automatic Update Agent.", "choice.choice_B816B95B40AE4A11B1531EC0C5A0D0": "Software Updater databases are <n> days old: security alert, generated if the Software Updater databases are more than one week old.", "choice.choice_6830F2FEFC294B16B3B188107766BD": "Software Updater databases are missing: security alert, generated if there is no Software Updater database available on Policy Manager.", "choice.choice_8F7BE2C4D9614239A20398CE1A2A45": "<n> new host(s) waiting to be imported: warning, generated if there are new hosts that do not match any import rule and are waiting to be imported manually.", "choice.choice_58B57B84733A4696A4F08B139328F9": "<n> unmanaged host(s) discovered: warning, generated when new, unmanaged hosts are detected.", "choice.choice_3525B5F35A8140B8A6D3C8CB6ED80B": "Upgrade available: <product name> <product version>. To see more information and get the upgrade, go to <link to the download page>. This message is sent whenever a new upgrade is available for Policy Manager or any of your managed WithSecure applications.", "content.p_0B60229FD32E4C10AEC6F837D3C62E": "The host alerts vary according to the managed software that triggers them.", "content.p_6A3758E32A364FACB067D98B64B52D": "Logging information on the forwarded alerts is stored to the following file: C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\logs\\fspms-alert-forwarding.log.", "desc": [ "content.p_11F7B82B53A347B8A938D9D203FC2D", "content.p_D69B9FCC8E9E45638B9B09351D2054", { "steps.steps_938785D008594C1E8C643BDC082A2C": [ "step.step_0B658BFC066B4563A119D171D6A53A", "step.step_ACC2E104291744BF81322713F03805", "step.step_E642FDE50CA44C3B98623629035407", "content.p_FEC0293841E24906A202BEEEC4D048", "step.step_41D2F42E03E343FDB746FAF4D7D8A2", "step.step_D88D80A1EF32438AAC7B13F996B167", "content.note_1D730AF01CCB411A8F98BD14237180", "step.step_4B314AFBB57A4340A2DCF9072A182E" ] }, "content.p_A2DA93BADEDF49F4BB2439ECA5C674", { "choices.ul_01F9D210EB334C16A3644DA3B747AD": [ "choice.choice_4C027177FA2C46788150D9CDD0A07D", "choice.choice_AF670EDB781D40C695FA98DEB05322", "choice.choice_B816B95B40AE4A11B1531EC0C5A0D0", "choice.choice_6830F2FEFC294B16B3B188107766BD", "choice.choice_8F7BE2C4D9614239A20398CE1A2A45", "choice.choice_58B57B84733A4696A4F08B139328F9", "choice.choice_3525B5F35A8140B8A6D3C8CB6ED80B" ] }, "content.p_0B60229FD32E4C10AEC6F837D3C62E", "content.p_6A3758E32A364FACB067D98B64B52D" ] }, "task_configuring_syslog_alert_forwarding-16.10-en.json": { "title": "title_8ACC2DF60C584F678B37530997375B33", "title_8ACC2DF60C584F678B37530997375B33": "Forwarding alerts to syslog server", "shortdesc": "shortdesc_2624362A254D42F9A84E4BE40E564801", "shortdesc_2624362A254D42F9A84E4BE40E564801": "You can set Policy Manager to forward alerts to a third-party syslog server. ", "content.p_5CEE5224AD584E658B367968883A8C": "Currently, both TCP and UDP transport protocols are supported.", "content.p_E75579EE0D9A41E3A376792A3F3074": "To configure alert forwarding:", "step.step_6F0C70CF058D43CDBFF30676AB9EF4": "Select Tools > Server configuration from the menu.", "step.step_EEE8F2557240433DA9A56F3F322E2C": "Click Syslog.", "step.step_3C320C3E5D8B40B39F01B608CC4818": "Select Forward alerts to syslog server.", "content.p_D740539CAEC3457F9E38432CDA3959": "By default, alerts are forwarded to port 514 for UDP protocol, port 515 for TCP, and 587 for TCP over TLS protocols. If you want to use a different port, enter the port number after the server address, for example, example.com:8080.", "content.note_09920934F5894EEFB88F852CCEC26E": "Note: If you try to use the TCP protocol to forward alerts to the TLS port, it might not be detected as a failure.", "step.step_7DD504C73B234F19ADDC270D68E0B8": "Enter the server address.", "content.p_FE814DE3C0204C64B9C62B18C1DDB9": "Syslog (RFC 3164), Common Event Format, and Log Event Extended Format (LEEF) messages are supported.", "step.step_669C481008BB43958F3016DC43659D": "Select the message format.", "content.p_22B285C736DF4D31AC9739EFDAD417": "TCP, UDP, and TLS protocols are supported.", "content.note_DCE230ACCF57403D8F8976454A6910": "Note: The TLS client authentication is not supported.", "step.step_112D78D727C84591AED0B33EAD3DC6": "Select the transfer protocol.", "step.step_3D706A18F1A747C0A3373B0B542906": "Click OK.", "desc": [ "content.p_5CEE5224AD584E658B367968883A8C", "content.p_E75579EE0D9A41E3A376792A3F3074", { "steps.steps_97777F8786314C8D949C425BCF662B": [ "step.step_6F0C70CF058D43CDBFF30676AB9EF4", "step.step_EEE8F2557240433DA9A56F3F322E2C", "step.step_3C320C3E5D8B40B39F01B608CC4818", "step.step_7DD504C73B234F19ADDC270D68E0B8", "content.p_D740539CAEC3457F9E38432CDA3959", "content.note_09920934F5894EEFB88F852CCEC26E", "step.step_669C481008BB43958F3016DC43659D", "content.p_FE814DE3C0204C64B9C62B18C1DDB9", "step.step_112D78D727C84591AED0B33EAD3DC6", "content.p_22B285C736DF4D31AC9739EFDAD417", "content.note_DCE230ACCF57403D8F8976454A6910", "step.step_3D706A18F1A747C0A3373B0B542906" ] } ] }, "task_domain_alert_forwarding-16.10-en.json": { "title": "title_C0B64BF2A0C34974BEB9BFADBA2846B8", "title_C0B64BF2A0C34974BEB9BFADBA2846B8": "Configuring alert forwarding for a specific domain", "shortdesc": "shortdesc_AB69C9248BC94FC59F94F889F12B9140", "shortdesc_AB69C9248BC94FC59F94F889F12B9140": "In addition to the alert forwarding that applies to your whole managed network, you can also use domain-specific settings. ", "content.p_8D7B489C0FFA4D2EAC6A5AD3D198E8": "", "content.note_38408501A8C742E1B80C57359FE307": "Note: To see all configured alert forwarding, select Tools > Alert forwarding from the menu.", "step.step_C1C3C4F9E52449469B3FC1E49C214D": "Right-click the domain that you want to configure on the Domain tree.", "step.step_51E6BFEFB55F4E6B9F97084A2ED5DD": "Select Alert forwarding for domain in the context menu.", "substep.substep_34972A7B9C5A40E2AFC428F1A8E210": "Select Forward alerts via email on the Email alerts tab.", "substep.substep_B8C4D320A34045D79E166C7F9D9CF5": "Enter the recipient email addresses.", "substep.substep_12FC18E19C8441918EDBCC4E28300D": "Select the type and severity of alerts to send, as well as the language for the sent emails.", "step.step_5E9D51117AF644E996185CCF9183D3": "To send email alerts for the domain:", "substep.substep_63B5F089BD8D4B05BB9144EA2451AA": "Select Forward alerts to syslog server on the Syslog tab.", "substep.substep_74500E445BDE46F09BF3821256D603": "Enter the server address to use and select the message format and protocol.", "step.step_4BE876479FD94CC6A99B2BE93AF183": "To send alerts for the domain to a syslog server:", "step.step_2A36CA90B3AE4282B5B0113028DF0F": "If you want to use a different mail server than the default one, select Use custom mail server on the Mail server tab and enter the required details.", "step.step_78F659DA182E437FA5C3F711A946F6": "Click OK.", "desc": [ "content.note_38408501A8C742E1B80C57359FE307", { "steps.steps_27DAC14F850C4090B496A7A7C3CBDD": [ "step.step_C1C3C4F9E52449469B3FC1E49C214D", "step.step_51E6BFEFB55F4E6B9F97084A2ED5DD", "step.step_5E9D51117AF644E996185CCF9183D3", { "substeps.substepsalpha_62F6720D5B5A48F885965605EF82F5": [ "substep.substep_34972A7B9C5A40E2AFC428F1A8E210", "substep.substep_B8C4D320A34045D79E166C7F9D9CF5", "substep.substep_12FC18E19C8441918EDBCC4E28300D" ] }, "step.step_4BE876479FD94CC6A99B2BE93AF183", { "substeps.substepsalpha_881FE3E68A874E9CB65D0FA11FCAF4": [ "substep.substep_63B5F089BD8D4B05BB9144EA2451AA", "substep.substep_74500E445BDE46F09BF3821256D603" ] }, "step.step_2A36CA90B3AE4282B5B0113028DF0F", "step.step_78F659DA182E437FA5C3F711A946F6" ] } ] }, "concept_reporting_tool-16.10-en.json": { "title": "title_CCFFB6C803FB4F038F3867F6A128B7F9", "title_CCFFB6C803FB4F038F3867F6A128B7F9": "Reporting tool", "shortdesc": "shortdesc_F1C99247C91F4C3396190CFFD2E4EBBE", "shortdesc_F1C99247C91F4C3396190CFFD2E4EBBE": "The Reporting tool allows users to view and export reports of Policy Manager Console managed data.", "content.p_B1B27B1FCED14EF4B8C0BDB304F548": "The viewing and exporting functionality provides a way to examine the data of several hosts/domains at the same time.", "desc": [ "content.p_B1B27B1FCED14EF4B8C0BDB304F548" ] }, "task_viewing_exporting_reports-16.10-en.json": { "title": "title_F16E73EC27E7467FA9FBCF5D760119DE", "title_F16E73EC27E7467FA9FBCF5D760119DE": "Viewing and exporting a report", "shortdesc": "shortdesc_27337503B2CC44B49E2518D1FE5708B2", "shortdesc_27337503B2CC44B49E2518D1FE5708B2": "You can view and export reports using the Reporting tool.", "content.p_ECC6988EC8ED4C1B8BC4C4A3C120F2": "To use the Reporting tool:", "content.p_FB04414AD7AF4D1880A1123D3975E7": "Alternatively:", "subchoice.choice_184D173CA5A54C3CB8B5026A3CFD7F": "Launch the Reporting tool from the context menu in the main application area.", "content.p_1B0405DE39E04B6C91B365B03CB828": "The Reporting tool opens.", "step.step_B34E33BF0C90402F814CC1E66FB0AC": "Select Tools > Reporting... from the menu.", "subchoice.choice_AD37F831ED7C4E319D8CDBA1F354F3": "Select Recursive if you want all hosts under the selected domains to be included in the report.", "step.step_CBB8F850FB7A4BF487973208F4D8B9": "Select the domains and/or hosts you want to include in the report.", "step.step_AEC3B8F297F54277B1303631344524": "Select the report type.", "step.step_5F8CCF9D8EA14515AF44EAEAEA2BDB": "Select the products to include in the report, if necessary.", "step.step_FB9E7ED885AD4154BD8F625468BF88": "Select report type-dependent configurations for the currently selected report, if necessary.", "subchoice.choice_429179E7C856469AAD1E632E325AFF": "Click View in the bottom pane to generate the report and view it in HTML format with your default web browser. If no default web browser has been defined, a dialog box appears prompting you to define your web browser.", "subchoice.choice_12F00A60A6D7409D8051BB3E783AF7": "Click Export in the bottom pane to generate the report and save it as a file. The file path and report format are defined in the File save dialog box that appears after clicking Export.", "step.step_AA1972C2E8CA4A61B46E7F378D81C2": "View or export the report:", "desc": [ "content.p_ECC6988EC8ED4C1B8BC4C4A3C120F2", { "steps.steps_B399E4E677EC437AB6ADCA9945AA03": [ "step.step_B34E33BF0C90402F814CC1E66FB0AC", "content.p_FB04414AD7AF4D1880A1123D3975E7", { "subchoices.choices_1D50A1DDDFCC45DA9FDA9D1AD1708E": [ "subchoice.choice_184D173CA5A54C3CB8B5026A3CFD7F" ] }, "content.p_1B0405DE39E04B6C91B365B03CB828", "step.step_CBB8F850FB7A4BF487973208F4D8B9", { "subchoices.choices_EE398F296A1640FF8E250B8A79799B": [ "subchoice.choice_AD37F831ED7C4E319D8CDBA1F354F3" ] }, "step.step_AEC3B8F297F54277B1303631344524", "step.step_5F8CCF9D8EA14515AF44EAEAEA2BDB", "step.step_FB9E7ED885AD4154BD8F625468BF88", "step.step_AA1972C2E8CA4A61B46E7F378D81C2", { "subchoices.choices_F82DEE469EE04376B534C438A1E4BF": [ "subchoice.choice_429179E7C856469AAD1E632E325AFF", "subchoice.choice_12F00A60A6D7409D8051BB3E783AF7" ] } ] } ] }, "concept_using_data_mining-16.10-en.json": { "title": "title_0F0FE56FD5BF4A7D82B49A8F4F4889DF", "title_0F0FE56FD5BF4A7D82B49A8F4F4889DF": "Using data mining to get information about managed hosts", "shortdesc": "shortdesc_E0AB71A6CB6A4FAA99F59C65C73D6A8F", "shortdesc_E0AB71A6CB6A4FAA99F59C65C73D6A8F": "The Data mining feature in Policy Manager provides an advanced tool to find and browse information to help resolve issues and create queries for use in custom reports and external monitoring systems. ", "content.p_4729C60A5C684B899D3D139BC78BFD": "The data that Policy Manager collects from managed endpoints includes information about blocked malware, malicious sites, and other incidents. In addition, each host reports statistics on the endpoint protection state, platform information, missing software updates, and so on.", "content.p_8D77355914604AB6BE4816BCEE950D": "Data mining allows you to run queries that drill down through the large amount and variety of data to find what you need to resolve issues quickly. It also gives you the flexibility to dynamically group and analyze your managed hosts independent of the domain structure.", "content.p_79E92CE1386C4525B30C7083727682": "Data mining applies two levels of filtering to the data collected from hosts: data sets and properties. The four types of data set currently available are hosts, alerts, software updates, and deleted hosts. The available properties vary according to the selected data set, and only the relevant property filters are shown. You can also use the search functionality to find matches from any relevant item properties, including those that have unique values such as GUID, WINS, and IP addresses.", "content.p_3F1EA455BE2E40128DC38A16271786": "Items from one data set typically have related items in another data set, for example hosts can be linked to alerts or software updates. For example, after filtering a subset of Windows 7 hosts, you can link them to missing software updates for analysis. Alternatively, you can filter only servers and check the subset of real-time protection alerts, then go to missing software updates to verify if any similar patches are missing.", "content.p_03F36CAF495240B7891B7F34B9EDCD": "The results of your queries are available for exporting in CSV format, and you can save any queries for later use and publish them to create custom reports for Web Reporting. You can also use published queries for use in external monitoring systems via REST API.", "desc": [ "content.p_4729C60A5C684B899D3D139BC78BFD", "content.p_8D77355914604AB6BE4816BCEE950D", "content.p_79E92CE1386C4525B30C7083727682", "content.p_3F1EA455BE2E40128DC38A16271786", "content.p_03F36CAF495240B7891B7F34B9EDCD" ], "related": [ "task_reindexing_search_data-16.10-en" ] }, "task_running_queries_endpoint_data-16.10-en.json": { "title": "title_E8167D1F126C4C43B484758B386C9674", "title_E8167D1F126C4C43B484758B386C9674": "Running queries on managed endpoint data", "shortdesc": "shortdesc_F4BB747E4F4C4D0681793D026597DC56", "shortdesc_F4BB747E4F4C4D0681793D026597DC56": "You can use the data set and property filters in Data mining to create queries that find matching hosts and other information in your managed network. ", "step.step_C11320B121F74077874219993F9300": "Select Root on the Domain tree.", "step.step_B06284FE6FDC46BD94D06E5C2B7888": "Select the Data mining tab.", "content.note_3418A4ACA01E4A7E9FAD2325C30B6A": "Note: You can also click Search to match details from any data set or properties to the text that you enter.", "content.p_54FEF30A2BB2496E85A959751C25FB": "The item counter shows how many total results are found, and the property filters are updated according to the selected data set value.", "step.step_615A83B8CD994AD19F51E526C441D6": "Click Data set and select the type of data set that you want to examine.", "content.p_EFD09D25FD1F4CF196A887C9C8787B": "For properties that contain multiple values, you can click the pin icon to show that property as a widget on the page. This can be useful to see the correlation between the properties and if you want to see the filter values as part of the query results.", "content.note_F23B06A7A963499D822A7C23005B7A": "Note: The property filters show the 100 most frequent values. If a value is not listed, enter it manually.", "step.step_77815A5C61EF44769DF4E5F96C2126": "Click the properties to select the filters for your query.", "content.p_FFF74EDC97BC4D2FA66DF5207592BF": "By default, the first 10 results are shown. Click Set limit if you want to change how many results are shown.", "content.p_67C2DF9656F8405AA48A8EA72C6DD4": "The results include the data for all applicable properties. If you want to change what information is shown, click Select fields and choose the fields for each type of data set.", "step.step_76DB46F00D0946D6BF53C8A56F9E80": "Click the Found link to see the query results.", "content.p_4A9B199A22324841BD46B03284B5F5": "The selected data set is added below your initial query results.", "step.step_9F29A942F4C84138AB7E7387DFE290": "If you want to see other data sets relating to your current query, click Show related alerts, Show related hosts, or Show related software updates, depending on the current data set.", "step.step_611565AE0C194F028A160A3A3E6C2F": "To export the results of any selected data set as a CSV file, click Export data and enter a file name.", "content.p_E4686D933BBD41E7A26664375E2EBE": "To replace an existing query, select the query from the list and click OK.", "content.p_6DF4114C5E844894933C2DC7C2BDC5": "All selected properties and related data sets included in your query are saved and available under My queries.", "step.step_9E78A9A107A84FF2A8A32D81DC50D2": "Click Save query and enter a name for the new query if you want to use it again later or publish it for use in reports.", "desc": [ { "steps.steps_1A370C6E79E240F686A1B4B386AC6D": [ "step.step_C11320B121F74077874219993F9300", "step.step_B06284FE6FDC46BD94D06E5C2B7888", "step.step_615A83B8CD994AD19F51E526C441D6", "content.note_3418A4ACA01E4A7E9FAD2325C30B6A", "content.p_54FEF30A2BB2496E85A959751C25FB", "step.step_77815A5C61EF44769DF4E5F96C2126", "content.p_EFD09D25FD1F4CF196A887C9C8787B", "content.note_F23B06A7A963499D822A7C23005B7A", "step.step_76DB46F00D0946D6BF53C8A56F9E80", "content.p_FFF74EDC97BC4D2FA66DF5207592BF", "content.p_67C2DF9656F8405AA48A8EA72C6DD4", "step.step_9F29A942F4C84138AB7E7387DFE290", "content.p_4A9B199A22324841BD46B03284B5F5", "step.step_611565AE0C194F028A160A3A3E6C2F", "step.step_9E78A9A107A84FF2A8A32D81DC50D2", "content.p_E4686D933BBD41E7A26664375E2EBE", "content.p_6DF4114C5E844894933C2DC7C2BDC5" ] } ] }, "task_exporting_publishing_saved_queries-16.10-en.json": { "title": "title_F1389F6F8C364B5E9A239336F780CC50", "title_F1389F6F8C364B5E9A239336F780CC50": "Publishing saved queries for reports and external use", "shortdesc": "shortdesc_89177B6665F143F791DAE8E6AB5235E5", "shortdesc_89177B6665F143F791DAE8E6AB5235E5": "You can publish saved Data mining queries to view the results in Web Reporting and to generate API calls for use in external monitoring systems. ", "step.step_A3A46E6543A04C00A16035C40E1259": "Select Root on the Domain tree.", "step.step_47351F7C23DB47BFA6FD583C98530E": "Select the Data mining tab.", "content.p_375391CE2DC84C3BABFF99E92737A9": "This lists your currently saved queries and their status. Only published queries are available for reports and use via API.", "step.step_1E03DBF4B81C43C88C170566C2675C": "Click My queries.", "step.step_1CA28BFE32A84017BCEF72A2A79DBD": "Select the query that you want to use.", "content.p_BE7ECBDE487C4BB8873F5A6A274E68": "This opens Web Reporting in your default browser and shows you the selected custom report.", "step.step_3C9E0D68DFB54348A4965BDA83E06B": "To view the query results in Web Reporting, click Open as report.", "content.p_AAC8AE9FDD6A415CAD96E8C6DE921A": "Select the type of API call that you want:", "cell.choptionhd_exporting_publishing_sav_01F68": "Option", "cell.chdeschd_exporting_publishing_sav_0EA22": "Description", "cell.choption_exporting_publishing_sav_0CF7D": "Query output as JSON", "cell.chdesc_exporting_publishing_sav_0DE81": "Use this if you want an API call that returns the full query results in JSON format.", "cell.choption_exporting_publishing_sav_0FC2C": "Items as CSV", "cell.chdesc_exporting_publishing_sav_0DF59": "Use this if you want an API call that returns the query results for a single data set.", "cell.choption_exporting_publishing_sav_0E3EE": "values as CSV", "cell.chdesc_exporting_publishing_sav_02325": "Use this if you want an API call that returns the set of values for a single property. This is only available for properties that you have pinned in the query.", "content.p_72BFA693137948F3AB40E6D93AB7A6": "The selected API URL is copied to your clipboard.", "step.step_5BF6D2CA4EA648E7A2328738170958": "To get the URL for an API call that you can use in external systems, click Copy API URL.", "desc": [ { "steps.steps_8BD908F47C1A4B259F3FBA1C549D90": [ "step.step_A3A46E6543A04C00A16035C40E1259", "step.step_47351F7C23DB47BFA6FD583C98530E", "step.step_1E03DBF4B81C43C88C170566C2675C", "content.p_375391CE2DC84C3BABFF99E92737A9", "step.step_1CA28BFE32A84017BCEF72A2A79DBD", "step.step_3C9E0D68DFB54348A4965BDA83E06B", "content.p_BE7ECBDE487C4BB8873F5A6A274E68", "step.step_5BF6D2CA4EA648E7A2328738170958", "content.p_AAC8AE9FDD6A415CAD96E8C6DE921A", { "table.table_25A6CCA407964405A4D02D3DDDA0EE": [ { "thead.chhead_exporting_publishing_sav_0E5BE": [ "cell.choptionhd_exporting_publishing_sav_01F68", "cell.chdeschd_exporting_publishing_sav_0EA22" ] }, { "row.choice_EF4B9B56D29E49F9B8C6E88EA74202": [ "cell.choption_exporting_publishing_sav_0CF7D", "cell.chdesc_exporting_publishing_sav_0DE81" ] }, { "row.choice_4A6FB0207B564F7696DF22A2E72231": [ "cell.choption_exporting_publishing_sav_0FC2C", "cell.chdesc_exporting_publishing_sav_0DF59" ] }, { "row.choice_E535072DC5C14AD99A33F0C94EE97D": [ "cell.choption_exporting_publishing_sav_0E3EE", "cell.chdesc_exporting_publishing_sav_02325" ] } ] }, "content.p_72BFA693137948F3AB40E6D93AB7A6" ] } ] }, "task_example_using_data_mining-16.10-en.json": { "title": "title_323D5FCD3A6D4D6597A129E8DC662D48", "title_323D5FCD3A6D4D6597A129E8DC662D48": "Example of using data mining", "shortdesc": "shortdesc_595F1CE5D2854C0C88CA648AF0BB88E7", "shortdesc_595F1CE5D2854C0C88CA648AF0BB88E7": "This example shows you how to find managed hosts that match specific parameters and what alerts those hosts have generated. ", "content.p_8EFC5FA4E0E24B318857A986984641": "The example query given here shows the Windows 10 hosts that have WithSecure Client Security Premium 14.20 installed and are missing critical software updates, as well as the infection alerts that these hosts have generated.", "step.step_6DA87A5817954A8CA4C7D15651BB4D": "Select Root on the Domain tree.", "step.step_A1B3E6C127D342C2BB566363ABD1D9": "Select the Data mining tab.", "step.step_95D2805DFFA14BF6A3D35D322073F4": "Click Data set and select Hosts.", "step.step_9820C24482B34B799FD5B4B560A162": "Click Operating system and select Windows 10.", "step.step_2700AD2E537846279089BC3A04BC69": "Click Software Updater status and select Critical updates missing.", "step.step_E2F50D8A5A5D4A85ABD6AC096262ED": "Click Product and select Client Security Premium 14.20.", "step.step_42257C7C6B294C5C815FB28B466FF2": "Click the Found link to see the list of matching hosts and their details.", "step.step_ADCC5BC972C34EE7B6399D0DA4DA46": "Click Show related alerts.", "step.step_79BCB2FACA2C482AA55DB1C9CCFC85": "Click Alert type and select Infection.", "step.step_5BB5846B82E54B8AAB69EF142A9DC5": "Click the Found link to see details of the infection alerts for the matching hosts.", "desc": [ "content.p_8EFC5FA4E0E24B318857A986984641", { "steps.steps_E9FEEAABA96B4066BB45ED56AB5B18": [ "step.step_6DA87A5817954A8CA4C7D15651BB4D", "step.step_A1B3E6C127D342C2BB566363ABD1D9", "step.step_95D2805DFFA14BF6A3D35D322073F4", "step.step_9820C24482B34B799FD5B4B560A162", "step.step_2700AD2E537846279089BC3A04BC69", "step.step_E2F50D8A5A5D4A85ABD6AC096262ED", "step.step_42257C7C6B294C5C815FB28B466FF2", "step.step_ADCC5BC972C34EE7B6399D0DA4DA46", "step.step_79BCB2FACA2C482AA55DB1C9CCFC85", "step.step_5BB5846B82E54B8AAB69EF142A9DC5" ] } ] }, "concept_check_environment_protected-16.10-en.json": { "title": "title_18FE2D8AB3FD4B7C830DBD385FAF6284", "title_18FE2D8AB3FD4B7C830DBD385FAF6284": "How to check that the network environment is protected", "shortdesc": "shortdesc_E60CF8B8741C41FC9ACE39F04A306356", "shortdesc_E60CF8B8741C41FC9ACE39F04A306356": "This section contains a list things you can check to make sure that the network environment is protected.", "content.p_095F16FD11A74130B55509635B7C6A": "As part of the monitoring and system administration processes, you can regularly perform the tasks listed here to ensure that your network environment is protected.", "desc": [ "content.p_095F16FD11A74130B55509635B7C6A" ] }, "task_check_all_hosts_have_latest_policy-16.10-en.json": { "title": "title_CD68B50E861C4FF2A0071776612EBD03", "title_CD68B50E861C4FF2A0071776612EBD03": "Checking that all the hosts have the latest policy", "shortdesc": "shortdesc_1661A3FB23D2479D80846D632BCDF024", "shortdesc_1661A3FB23D2479D80846D632BCDF024": "You can ensure that all hosts have the correct settings by checking that they have the latest policy. ", "step.step_46DBBDDEDF7D431798A3127EF66C3D": "Select Root on the Domain tree.", "step.step_BA24DAA52978466B9E7AA876E1D062": "Go to the Dashboard > Summary tab and check how many hosts of the entire domain have the latest policy.", "content.p_DE1297F4493A415EADDA060C55D44E": "This takes you to the Status tab and Centralized management page.", "step.step_394122E98895477EA34F314D83367F": "If all hosts do not have the latest policy, click View hosts' latest policy update.", "content.p_E2DE5E8DFEB34023849EB9BB767354": "You can also see the possible reasons for this; for example, the host is disconnected or there has been a fatal error on the host.", "step.step_B56131B3CACB45F2A68ECCCC42D189": "On the Centralized management page, check which of the hosts do not have the latest policy.", "desc": [ { "steps.steps_FA39FA5210F747D794E20FD1528A44": [ "step.step_46DBBDDEDF7D431798A3127EF66C3D", "step.step_BA24DAA52978466B9E7AA876E1D062", "step.step_394122E98895477EA34F314D83367F", "content.p_DE1297F4493A415EADDA060C55D44E", "step.step_B56131B3CACB45F2A68ECCCC42D189", "content.p_E2DE5E8DFEB34023849EB9BB767354" ] } ] }, "task_check_hosts_have_latest_virus_definitions-16.10-en.json": { "title": "title_124B2C14F4CA4DC9AB759766E1CF915B", "title_124B2C14F4CA4DC9AB759766E1CF915B": "Checking that the hosts have the latest virus definitions", "shortdesc": "shortdesc_B5FF3F19FD7146CF9DEDD44C49ED1ABB", "shortdesc_B5FF3F19FD7146CF9DEDD44C49ED1ABB": "You should regularly check that the virus definitions are up to date on all hosts within the domain. ", "step.step_865D48C70B7146C3ADEFC3B49EC1DC": "Select Root on the Domain tree.", "step.step_819438AA4B9940F4B12A85F77C94B6": "Go to the Dashboard > Summary tab and check what is displayed in the Virus protection for endpoints section beside Virus definitions.", "subchoice.choice_1F61B94DAC8845AE88A1007A8CB9DD": "You can select the Status tab and the Overall protection page to see which hosts do not have the latest virus definitions. Then select these hosts in the Policy domains tab, go to the Operations tab and click Update virus definitions. This orders the selected hosts to fetch new virus definitions at once.", "subchoice.choice_B3BA874F8D814E4C9175D1F6A938B9": "Alternatively, click the Update virus definitions link. This takes you to the Operations tab. Once on the Operations tab, click Update virus definitions. This orders all hosts to fetch new virus definitions at once.", "step.step_4D497487744A43E0A165D78B325B06": "If the virus definitions on some hosts are outdated, there are two alternatives:", "desc": [ { "steps.steps_AEC6AF38D1054463958172EBE7AF6B": [ "step.step_865D48C70B7146C3ADEFC3B49EC1DC", "step.step_819438AA4B9940F4B12A85F77C94B6", "step.step_4D497487744A43E0A165D78B325B06", { "subchoices.choices_8E1210EC297240C887F66555F7EDA2": [ "subchoice.choice_1F61B94DAC8845AE88A1007A8CB9DD", "subchoice.choice_B3BA874F8D814E4C9175D1F6A938B9" ] } ] } ] }, "task_check_no_disconnected_hosts-16.10-en.json": { "title": "title_B325DF9F84C542D18972E4F08BCFCBDC", "title_B325DF9F84C542D18972E4F08BCFCBDC": "Checking that there are no disconnected hosts", "shortdesc": "shortdesc_2F385DC31C214B78871D4F9952ED58C5", "shortdesc_2F385DC31C214B78871D4F9952ED58C5": "You can ensure that all hosts are getting the latest updates by checking that there are no disconnected hosts. ", "step.step_AB15EB40B63A49BDBECE3C4D050C26": "Select Root on the Domain tree.", "step.step_860E4BE666C14E769630F93DB46688": "Go to the Dashboard > Summary tab and check what is displayed in the Domain section beside Disconnected hosts.", "content.p_4E8719DE98E24888AA21102ECA94EA": "This takes you to the Status tab and Centralized management page.", "step.step_965710D99D2B48C88E36AC5B29EFB6": "If there are disconnected hosts, click View disconnected hosts.", "content.note_49477BEC550B453E91AE2EB2938783": "Note: You can define the time after which a host is considered disconnected. Select Tools > Server configuration from the menu, then select the Hosts tab. You will see the currently defined time for when hosts are considered disconnected.", "step.step_C1FD8BC62E904F75AFD240672B59A2": "Check which of the hosts are disconnected and the possible reasons for this.", "desc": [ { "steps.steps_0AB454D6795B401D8D34ECBDC03E91": [ "step.step_AB15EB40B63A49BDBECE3C4D050C26", "step.step_860E4BE666C14E769630F93DB46688", "step.step_965710D99D2B48C88E36AC5B29EFB6", "content.p_4E8719DE98E24888AA21102ECA94EA", "step.step_C1FD8BC62E904F75AFD240672B59A2", "content.note_49477BEC550B453E91AE2EB2938783" ] } ] }, "task_viewing_scanning_results-16.10-en.json": { "title": "title_F3D0A462F1D04401957243DB3F4412F9", "title_F3D0A462F1D04401957243DB3F4412F9": "Viewing scanning reports", "shortdesc": "shortdesc_B06BA846F2C943F884E96B878EA115DE", "shortdesc_B06BA846F2C943F884E96B878EA115DE": "You can view the scanning reports from hosts to check if there have been any problems.", "content.p_20578D3B6D344170943ECD8F48B2E4": "If you want to see a scanning report from certain hosts, do as follows:", "step.step_124ED1B468C34F8FBE126BF7131133": "Select the hosts in the Policy domains tab.", "content.p_26BF972469EC442FBA21B267CA867B": "The scanning information from the selected hosts is displayed in the Scanning reports table.", "step.step_73060C076E814FD085CD287B05BF5B": "Go to the Scanning reports tab.", "content.p_F6F82DBC28A74713B7A7E3FFAACC45": "The associated scanning report from that host is now displayed in the report view in the lower part of the window.", "step.step_B522950FC14648BC9F98C15B2090F4": "Select a single host by clicking on a row in the table.", "desc": [ "content.p_20578D3B6D344170943ECD8F48B2E4", { "steps.steps_770360988D9746218FD51CFF8F406E": [ "step.step_124ED1B468C34F8FBE126BF7131133", "step.step_73060C076E814FD085CD287B05BF5B", "content.p_26BF972469EC442FBA21B267CA867B", "step.step_B522950FC14648BC9F98C15B2090F4", "content.p_F6F82DBC28A74713B7A7E3FFAACC45" ] } ] }, "task_viewing_alerts-16.10-en.json": { "title": "title_879B5858FA59499C8E05D8B55FFED5EA", "title_879B5858FA59499C8E05D8B55FFED5EA": "Viewing alerts", "shortdesc": "shortdesc_E179F0C1550B406FAF31AD3539E8577D", "shortdesc_E179F0C1550B406FAF31AD3539E8577D": "If there has been a problem with a program or with an operation, the hosts can send alerts and reports about it. ", "content.p_72BB8962D603454DAC7840F92405E3": "It is a good idea to check regularly that there are no new alerts, and also to acknowledge (and delete) the alerts that you have already handled.", "content.p_A702838B7F1B4A3F9AC82FDCE08AC4": "When an alert is received, the following button will light up:
To view the alerts:", "content.p_C2F6EB3FAA8C42EB8C0AB2B988876F": "Alternatively, you can click View alerts by severity on the Dashboard > Summary tab.", "cell.entry_24D8959F3F7C4CBD98C0445F7A0812": "Ack", "cell.entry_2CD101B1C0F54EE69E6372FFA10410": "Click the Ack button to acknowledge an alert. If all of the alerts are acknowledged, the Ack button will be dimmed.", "cell.entry_84CFB463A7F5406BB410E9574E5099": "Severity", "cell.entry_D2CF912E44FD44299F3C4B0981AE81": "The problem’s severity. Each severity level has its own icon:", "cell.entry_36EAB264FD5D43BDA7DEA6801C1B3D": "", "cell.entry_F05257A1CCA94AEC851A679968902D": "", "cell.entry_145E6E49B3AD4147A7FFDC14B4BA36": "Info", "cell.entry_310A39FD1FD3451D8AD99139806B87": "Normal operating information from a host.", "cell.entry_viewing_alerts_00000A_236A9535": "", "cell.entry_9CE7A8D881C543FB95244A00B7F265": "", "cell.entry_BC867A51CB794484B90819017816DC": "Warning", "cell.entry_5FEA0B281C86493EB2C5F498D58483": "A warning from the host.", "cell.entry_viewing_alerts_00000B_0E9D12F6": "", "cell.entry_A996D100BF3240C58F3FF6DE1D4CF8": "", "cell.entry_68BB89561DF243C2B1E53129133377": "Error", "cell.entry_3EFBACAA376B4035B5A87D2F008545": "Recoverable error on the host.", "cell.entry_viewing_alerts_00000C_1D1904D3": "", "cell.entry_33D32C6A43CA4785956E0B6C31BC71": "", "cell.entry_BCFF05FAF0584071BD8105A4B0EC64": "Fatal error", "cell.entry_AF6590F819C045B48DAA58A3F0614E": "Unrecoverable error on the host.", "cell.entry_viewing_alerts_00000D_7E6E28A5": "", "cell.entry_E21B5D0B5754457AABF70387594DF9": "", "cell.entry_5C95901F36FA4E71ACF21210C1C012": "Security alert", "cell.entry_23334DB30CA4445EA50B69ADB367B3": "Security hazard on the host.", "cell.entry_FB60B73E6472461C910DD4D0A89C2F": "Date/Time", "cell.entry_8F5275733234451B8B890913A1E61B": "Date and time of the alert.", "cell.entry_66CD41240CF84057A3CF08B8AD5BF2": "Description", "cell.entry_4A397163AC3B4A728E4572A081E294": "Description of the problem.", "cell.entry_DDD7BA99FF7E4FB2B8BD07320F0ADF": "Host/User", "cell.entry_63247C1185A94EE48840B7E82DB4DB": "Name of the host/user.", "cell.entry_3B3BA909066E4EBC983F6A5AB43113": "Product", "cell.entry_DD139028807949939FBDCB281031A9": "The WithSecure product that sent the alert.", "content.p_viewing_alerts_00000E_08EFD10C": "When an alert is selected from the list, the Alert view under the alerts table displays more specific information about the alert.", "content.p_D5A616A1702B4DEE8DA339DC3CE78C": "The Alerts tab will open. All alerts received will be displayed in the following format:", "step.step_A103C22BD8C5494BAF45E47AF91A7D": "Click the following button:
", "step.step_36CCCA70EBCA484998E0E298F9FBDC": "You can use the Ack button to mark the alerts that you have seen and are planning to troubleshoot.", "step.step_EEAA5FA08228427FB4E6C931F21E9A": "The alert summary displayed on the Dashboard > Summary tab is not automatically refreshed, so you can click Refresh alert summary to refresh the alert view.", "desc": [ "content.p_72BB8962D603454DAC7840F92405E3", "content.p_A702838B7F1B4A3F9AC82FDCE08AC4", { "steps.steps_3BF18F3E0D174547A337D546D05090": [ "step.step_A103C22BD8C5494BAF45E47AF91A7D", "content.p_C2F6EB3FAA8C42EB8C0AB2B988876F", "content.p_D5A616A1702B4DEE8DA339DC3CE78C", { "table.table_DE08199CE06F498997F03151DD08EB": [ { "row.row_335681452BDE417C8F3F7523561633": [ "cell.entry_24D8959F3F7C4CBD98C0445F7A0812", "cell.entry_2CD101B1C0F54EE69E6372FFA10410" ] }, { "row.row_C8DFD3774CD647B4822C82EA55AECB": [ "cell.entry_84CFB463A7F5406BB410E9574E5099", "cell.entry_D2CF912E44FD44299F3C4B0981AE81" ] }, { "row.row_B62704DFC6624AAA88BAFA2805ECCB": [ "cell.entry_36EAB264FD5D43BDA7DEA6801C1B3D", "cell.entry_F05257A1CCA94AEC851A679968902D", "cell.entry_145E6E49B3AD4147A7FFDC14B4BA36", "cell.entry_310A39FD1FD3451D8AD99139806B87" ] }, { "row.row_980EC99034BB4103A1B5597E32BAD9": [ "cell.entry_viewing_alerts_00000A_236A9535", "cell.entry_9CE7A8D881C543FB95244A00B7F265", "cell.entry_BC867A51CB794484B90819017816DC", "cell.entry_5FEA0B281C86493EB2C5F498D58483" ] }, { "row.row_8AE1D6018F7942CAB743AF106C12E7": [ "cell.entry_viewing_alerts_00000B_0E9D12F6", "cell.entry_A996D100BF3240C58F3FF6DE1D4CF8", "cell.entry_68BB89561DF243C2B1E53129133377", "cell.entry_3EFBACAA376B4035B5A87D2F008545" ] }, { "row.row_D4A412EAEAC742D69E3468F88E6394": [ "cell.entry_viewing_alerts_00000C_1D1904D3", "cell.entry_33D32C6A43CA4785956E0B6C31BC71", "cell.entry_BCFF05FAF0584071BD8105A4B0EC64", "cell.entry_AF6590F819C045B48DAA58A3F0614E" ] }, { "row.row_A6B5BD37ACCE49539972A11D310CEE": [ "cell.entry_viewing_alerts_00000D_7E6E28A5", "cell.entry_E21B5D0B5754457AABF70387594DF9", "cell.entry_5C95901F36FA4E71ACF21210C1C012", "cell.entry_23334DB30CA4445EA50B69ADB367B3" ] }, { "row.row_8949198C2C3A4AED998C251A093B1B": [ "cell.entry_FB60B73E6472461C910DD4D0A89C2F", "cell.entry_8F5275733234451B8B890913A1E61B" ] }, { "row.row_3261151FDA304EF4A93D75A07FE581": [ "cell.entry_66CD41240CF84057A3CF08B8AD5BF2", "cell.entry_4A397163AC3B4A728E4572A081E294" ] }, { "row.row_A9FFB346549446A7AD44014481824E": [ "cell.entry_DDD7BA99FF7E4FB2B8BD07320F0ADF", "cell.entry_63247C1185A94EE48840B7E82DB4DB" ] }, { "row.row_012E15828DE84750B774D974C4837F": [ "cell.entry_3B3BA909066E4EBC983F6A5AB43113", "cell.entry_DD139028807949939FBDCB281031A9" ] } ] }, "content.p_viewing_alerts_00000E_08EFD10C", "step.step_36CCCA70EBCA484998E0E298F9FBDC", "step.step_EEAA5FA08228427FB4E6C931F21E9A" ] } ] }, "concept_creating_weekly_infection_report-16.10-en.json": { "title": "title_28915250C8CF4ADCBA19E55A61A8F188", "title_28915250C8CF4ADCBA19E55A61A8F188": "Creating a weekly infection report", "shortdesc": "shortdesc_4693AFF2EF0749A69059428A18C5D50B", "shortdesc_4693AFF2EF0749A69059428A18C5D50B": "You can use the Web Reporting tool to create a weekly infection report, as well as other reports to be generated at regular intervals.", "content.p_3D59AE20223F4EBAB729F2A20B7D5A": "Web Reporting is a web-based tool with which you can generate a wide range of graphical reports from Client Security alerts and status information.", "desc": [ "content.p_3D59AE20223F4EBAB729F2A20B7D5A" ] }, "task_monitoring_possible_network_attack-16.10-en.json": { "title": "title_D1F8411C88214D26B184EC2396EF3C1C", "title_D1F8411C88214D26B184EC2396EF3C1C": "Monitoring a possible network attack", "shortdesc": "shortdesc_F56D93A70FA94B239A1075368FAFD15E", "shortdesc_F56D93A70FA94B239A1075368FAFD15E": "If you suspect that there is a network attack going on in the local network, you can monitor it by following these steps. ", "step.step_BB8479D451444FDAB345619EF21CFB": "Select Root on the Domain tree.", "step.step_3316F7C6E60647578FF73BD4105E0D": "Go to the Dashboard > Summary tab.", "step.step_00F9A6AB72ED4902967168C6AF5229": "Check what is displayed beside Most common latest attack.", "content.p_0E4D8DD9103A4691BE88432B7725A0": "This takes you to the Status tab and Internet Shield page, where you can see detailed information on the latest attacks on different hosts.", "step.step_A21B4865D5BB4F32A7AF4983BB9028": "If there has been an attack, you can access more detailed information by clicking View Internet Shield status.", "desc": [ { "steps.steps_0AB9A63CD98C41B9BD969C769728C5": [ "step.step_BB8479D451444FDAB345619EF21CFB", "step.step_3316F7C6E60647578FF73BD4105E0D", "step.step_00F9A6AB72ED4902967168C6AF5229", "step.step_A21B4865D5BB4F32A7AF4983BB9028", "content.p_0E4D8DD9103A4691BE88432B7725A0" ] } ] }, "concept_maintaining_fspms-16.10-en.json": { "title": "title_ACC4C938C05B4CA1883FFE58C38EA9FA", "title_ACC4C938C05B4CA1883FFE58C38EA9FA": "Maintaining Policy Manager Server", "shortdesc": "shortdesc_7A25118E429D486B9ACC902F42658C29", "shortdesc_7A25118E429D486B9ACC902F42658C29": "This section contains topics on how to ensure the reliable running of Policy Manager Server. ", "desc": [] }, "concept_virus_definition_updates-16.10-en.json": { "title": "title_FD94836D0D344DF896BAB8E6C51FB71A", "title_FD94836D0D344DF896BAB8E6C51FB71A": "Malware definition updates", "shortdesc": "shortdesc_D9071A3EC9614B9E9F1A9DD7861BFE10", "shortdesc_D9071A3EC9614B9E9F1A9DD7861BFE10": "The server maintains a cache of downloaded updates, which typically takes up to 2-3 GB of disk space.", "content.p_5D512C1FDE4A4FE88EE8649B4ABADD": "", "content.note_rnw_kgf_xyb": "Note: As of version 16.00, Policy Manager is now downloading updates from 2 independent locations: one for client versions 15.00 and another for client versions 16.00 and newer.", "content.p_4DC9EBA739524D1ABC4AFD582082E5": "Each update is downloaded only when requested by the managed client software. The process for the on-demand downloading of updates is typically as follows:", "step.step_C394CBD47CF240368BB7D6BFD49DA6": "The server regularly refreshes the metadata for the latest WithSecure updates. By default, this happens every 10 minutes.", "step.step_1CFAAD05DFD34C3793F0DBBC9EB0DA": "Clients regularly poll the server to check if new updates are available.", "step.step_236128DFDFE2428F9B4E7FDAC6D831": "When a client notices a new update, it requests the data.", "step.step_28184C7D2B1F4740B0B09E1E08A0FC": "The server accepts the request and starts downloading the update from the Internet asynchronously. The server also instructs the client to check the update status again in roughly 10 minutes.", "step.step_4101ECDF90084334A2CBBF08B733DB": "The client receives the requested update the next time it polls the server.", "content.p_6EC7D35F27C54814897A6928E6664D": "If a client was shut down for a very long time and the WithSecure cloud cannot determine the incremental updates for the old definitions, it instructs the server to send the full update archive to the client.", "content.title_3CFEB0CB244F438B8ED84DADE7E739A3": "File locations", "content.p_9E8B79C3DD3D4B4CAD692092E52C87": "The locations of configuration and log files are as follows:", "content.dt_989874D3E335461D8C513A06D8BF82": "HTTP proxy configuration file ", "content.dd_259AF1F0A5CE4ECEA281A02C1A992C": "This is located under the server's data folder:", "choice.choice_A75830FCEE8D4AAFA7ECB25BE233C9": "Windows: C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\data\\fspms.proxy.config", "choice.choice_5A9C7BCFD8064EF485BD94AE687157": "Linux: /var/opt/f-secure/fspms/data/fspms.proxy.config", "content.dt_322A3253570E4FB9BEBE99C098BA77": "Log files ", "content.dd_A59E5AF8D5824C05B2FE1A14D301CE": "Downloading and distribution events are logged to fspms-download-updates.log and fspms-serve-updates.log files, which can be found under the server's logs folder:", "choice.choice_55321931B60E4F1EB4B7E5644FE49A": "Windows: C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\log", "choice.choice_9E8703E342F144C6B86CF68FB23A03": "Linux: /var/opt/f-secure/fspms/logs", "content.dt_FB2C0E9B6E6C46798689DF4D56EB95": "Downloaded updates ", "content.dd_B86ECC46B0304DDBA96928ED4296F9": "The downloaded updates are stored in the following folder on Windows:", "choice.choice_4BA8DC27AE8E48D88D2DA965C0EC00": "C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\data\\ws-guts2\\updates", "content.p_virus_definition_updates_08784": "", "content.dd_D7824E66ACDC4788B769AAF06638FD": "On Linux:", "choice.choice_D7DC9080D48E4550AE8FB53C6C6019": "/var/opt/f-secure/fspms/data/ws-guts2/updates", "desc": [ "content.note_rnw_kgf_xyb", "content.p_4DC9EBA739524D1ABC4AFD582082E5", { "steps.ol_571527A039B8471394F0F4672178D2": [ "step.step_C394CBD47CF240368BB7D6BFD49DA6", "step.step_1CFAAD05DFD34C3793F0DBBC9EB0DA", "step.step_236128DFDFE2428F9B4E7FDAC6D831", "step.step_28184C7D2B1F4740B0B09E1E08A0FC", "step.step_4101ECDF90084334A2CBBF08B733DB" ] }, "content.p_6EC7D35F27C54814897A6928E6664D", "content.title_3CFEB0CB244F438B8ED84DADE7E739A3", "content.p_9E8B79C3DD3D4B4CAD692092E52C87", { "dl.dl_52507B69FE124BE6BB51EB497E9BEB": [ { "dlentry.dlentry_F70AA16738F14C64B73F532329D5C4": [ "content.dt_989874D3E335461D8C513A06D8BF82", "content.dd_259AF1F0A5CE4ECEA281A02C1A992C", { "choices.ul_8F34FB316C6641E2BDCC8A26BE77AC": [ "choice.choice_A75830FCEE8D4AAFA7ECB25BE233C9", "choice.choice_5A9C7BCFD8064EF485BD94AE687157" ] } ] }, { "dlentry.dlentry_089E663BED5D40E8B84DED062EE187": [ "content.dt_322A3253570E4FB9BEBE99C098BA77", "content.dd_A59E5AF8D5824C05B2FE1A14D301CE", { "choices.ul_8AC1D7D82D2F41D2B0E48D872892BB": [ "choice.choice_55321931B60E4F1EB4B7E5644FE49A", "choice.choice_9E8703E342F144C6B86CF68FB23A03" ] } ] }, { "dlentry.dlentry_E3BA58749CEB4A558BF80ECA605673": [ "content.dt_FB2C0E9B6E6C46798689DF4D56EB95", "content.dd_B86ECC46B0304DDBA96928ED4296F9", { "choices.ul_BFBCCBF8435D419A81A7E8B3FC437B": [ "choice.choice_4BA8DC27AE8E48D88D2DA965C0EC00" ] }, "content.p_virus_definition_updates_08784", "content.dd_D7824E66ACDC4788B769AAF06638FD", { "choices.ul_ax4_xgs_xyb": [ "choice.choice_D7DC9080D48E4550AE8FB53C6C6019" ] } ] } ] } ] }, "task_checking_virus_definitions-16.10-en.json": { "title": "title_151DBB7460D1434891A3E0A609BF6666", "title_151DBB7460D1434891A3E0A609BF6666": "Checking the malware definitions on Policy Manager Server", "shortdesc": "shortdesc_C169AC189DAE448A91696D6D7C837D4B", "shortdesc_C169AC189DAE448A91696D6D7C837D4B": "You can check the status and distribution of malware definitions on the Dashboard tab. ", "step.step_35AB60C21F56447FB376D753943003": "Go to the Dashboard tab.", "content.p_9AC0B471CC214D2B9258142A2DE305": "This opens the update status view. The downloaded updates for version 16 and newer clients and version 15 are shown on separate tabs.", "step.step_775F15EC87664CE6B93D585F7CB26C": "Click Show details in the upper-right section of the page.", "desc": [ { "steps.steps_D79D314ED62C493AAF88F9FD7D685F": [ "step.step_35AB60C21F56447FB376D753943003", "step.step_775F15EC87664CE6B93D585F7CB26C", "content.p_9AC0B471CC214D2B9258142A2DE305" ] } ] }, "concept_updates_isolated_networks-16.10-en.json": { "title": "title_D0DAD4C2150C47A7B03FB9374FFC387A", "title_D0DAD4C2150C47A7B03FB9374FFC387A": "Updating malware definitions in isolated networks", "shortdesc": "shortdesc_FA5D4B9A0DD1456C9D953879F15E5711", "shortdesc_FA5D4B9A0DD1456C9D953879F15E5711": "Policy Manager offers two options for updating virus definitions in isolated networks that have no direct connection to the Internet. ", "content.p_624832F53E7C4FC5AE7D8F495C8F4C": "If your network configuration allows Policy Manager to access internal resources, which in turn can access the Internet, we recommend that you use Policy Manager Proxy as the source for updates.", "content.p_0FE4C8FB24D548BB9F8C6CF0CBBCFF": "If using Policy Manager Proxy is not permitted, you can use a tool provided with Policy Manager to fetch the updates as an archive and copy that to the server where Policy Manager is installed.", "desc": [ "content.p_624832F53E7C4FC5AE7D8F495C8F4C", "content.p_0FE4C8FB24D548BB9F8C6CF0CBBCFF" ] }, "task_using_pmp_update_malware_definitions-16.10-en.json": { "title": "title_BA02D26DA0B64DA19EEC2FE3CB8E217A", "title_BA02D26DA0B64DA19EEC2FE3CB8E217A": "Using Policy Manager Proxy to update malware definitions", "shortdesc": "shortdesc_EA4B6D40C2DA4117BCA3E56D018C5337", "shortdesc_EA4B6D40C2DA4117BCA3E56D018C5337": "If your network setup does not allow Policy Manager to connect to the Internet, but allows connections to internal resources that can access the Internet, you can use Policy Manager Proxy to keep the malware definitions up to date. ", "content.p_2E9F33A3AE4142E99057EFDA352FAA": "This is the most convenient option for isolated networks, as it does not require any subsequent actions after you have set up Policy Manager Proxy and completed the configuration in Policy Manager.", "content.p_42DB52ACB2044C39BF507CD5253AE5": "To minimize network communication between Policy Manager Proxy and Policy Manager Server, you can now install the proxy in standalone mode. This mode makes Policy Manager Proxy fully autonomous:", "choice.choice_9C47B9ACE606498BBEDD3F35F9159A": "It does not need access to Policy Manager Server", "choice.choice_6F4A49D4C0CE4688A000E899CA77D6": "It does not serve any client requests except for downloading malware definitions", "content.p_20F567EFD86546D59B0361E02A5669": "To set up Policy Manager Proxy for an isolated network:", "step.step_72D8D6ABEFA640D3ACDD758645DDEC": "Start the installation of Policy Manager Proxy (version 16 or higher) on a host that has Internet access to the update service (http://guts2.fsapi.com).", "step.step_6EC9303EE46940A587220DC7EF4CD4": "To activate standalone mode, use a 0.0.0.0 loopback interface IP as the Policy Manager Server address when installing the proxy.", "subsubchoice.choice_5C0D4EF34F934526886D111F537FEB": "On Windows, open the registry and go to HKLM\\SOFTWARE\\WithSecure\\Policy Manager\\Policy Manager Server \\additional_java_args.", "subsubchoice.choice_8E068227EB314C2F85AFC2E99C15B4": "On Linux, open the fspms.conf configuration file and look for the additional_java_args parameter.", "content.p_FBC29C41FA3F42FFAC9B4BD00FA366": "", "substep.substep_260FA99387584228A861DC0C71C4A1": "Open the additional Java arguments configuration:", "content.p_4B24D84581324A3393F266EB716C1B": "Add the following value: -Dguts2ServerUrl=http://<proxy_address>/guts2 -DwsGuts2ServerUrl=http://<proxy_address>/ws-guts2", "substep.substep_68E5B0C794344EB8B6D60D307933E8": "Edit the string value for additional_java_args.", "step.step_F7C53372206D43B18EE75A5D43E19F": "Configure Policy Manager Server to use the proxy as the source for virus definitions.", "step.step_D8406D0C0861416C86AB64D72AE1C4": "Restart the Policy Manager Server service.", "desc": [ "content.p_2E9F33A3AE4142E99057EFDA352FAA", "content.p_42DB52ACB2044C39BF507CD5253AE5", { "choices.ul_B20587FD40364C4F85F19DE6B3F154": [ "choice.choice_9C47B9ACE606498BBEDD3F35F9159A", "choice.choice_6F4A49D4C0CE4688A000E899CA77D6" ] }, "content.p_20F567EFD86546D59B0361E02A5669", { "steps.steps_870949904C5144F894D62E0C8D5058": [ "step.step_72D8D6ABEFA640D3ACDD758645DDEC", "step.step_6EC9303EE46940A587220DC7EF4CD4", "step.step_F7C53372206D43B18EE75A5D43E19F", { "substeps.substepsalpha_F08D0295E7484D66A4F4D73389BC1B": [ "substep.substep_260FA99387584228A861DC0C71C4A1", "content.p_FBC29C41FA3F42FFAC9B4BD00FA366", { "subsubchoices.ul_4682C19CF3D347158AA1C690E8FA5D": [ "subsubchoice.choice_5C0D4EF34F934526886D111F537FEB", "subsubchoice.choice_8E068227EB314C2F85AFC2E99C15B4" ] }, "substep.substep_68E5B0C794344EB8B6D60D307933E8", "content.p_4B24D84581324A3393F266EB716C1B" ] }, "step.step_D8406D0C0861416C86AB64D72AE1C4" ] } ] }, "task_using_update_archives-16.10-en.json": { "title": "title_30F16A2744904E01ABA94FA4AE8FE21F", "title_30F16A2744904E01ABA94FA4AE8FE21F": "Using archives to update malware definitions", "shortdesc": "shortdesc_881690895EB44F09B53A4BB0D553464D", "shortdesc_881690895EB44F09B53A4BB0D553464D": "When you cannot use a connection to an intermediate proxy due to security policies, you can update the malware definitions using the tool provided with Policy Manager. ", "content.p_43D86B9D4CC649F589AC01E4ADC3CD": "The tool for downloading updates is bundled with Policy Manager and can be extracted with the provided scripts. When you run it on any machine with internet access, the tool downloads the latest updates and required diffs to generate an all-in-one archive.", "content.p_76AB1B9FDB8B46CEA4A33809916418": "You can import the generated archive to a Policy Manager Server that is configured to not connect to the Internet for requested definitions updates, but to instead distribute only updates that are imported from the archive.", "content.p_1C8DBF5BFAA64795A5E6214F94684E": "By default, the tool uses the data\\updates folder to store the downloaded update binaries. It also stores the update history to use as a reference for downloading the relevant diffs to the latest version.", "content.p_66D179A67DAE46678FCE63AE104A70": "The version history is important for the tool, as it defines the number of diffs to provide to Policy Manager and then serve to managed clients. The default history depth is 10 and is modified using the update_diffs_count property. The longer the history, the more time it takes to download diffs from WithSecure Cloud, because it takes time to generate the diffs from older versions. You can configure the number of download attempts and the time between them in configuration.properties.", "content.p_EF2CCF8F448B4C6D990B63BA9E11F4": "The process can be automated by scheduling the download and subsequent import operations. You can customize the path to the updates archive to make it easier to transfer, for example using a shared network drive.", "content.p_B168A4BDE4B24F5A9F302352A15546": "", "content.note_293CCB4ECB864B58A6F20FAAC1E95B": "Note: Make sure that Policy Manager Server has permission to delete the updates archive, as it removes it after completing the import.", "content.p_C9F6EF5C88894654B0D2459309B4E9": "To update the malware definitions:", "content.note_71ED97ECD3844905947EDB19D1ADC5": "Note: You have to prepare the tool the first time before you use it. To update the malware definitions later, you only have to run the tool (step 3).", "content.p_401ACB078FFA46348604135AEC2DD2": "The tool is intended to be run on the same platform that you use to prepare the tool. For example, if you prepare the tool on a Linux computer, the tool works on Linux versions of Policy Manager.", "subsubchoice.choice_C019EEF3C7E94D898B336FBB1834B2": "Windows: c:\\Program Files\\WithSecure\\Policy Manager\\Policy Manager Server\\bin\\prepare-fspm-definitions-update-tool.bat <destination folder>", "subsubchoice.choice_1C2B054986E143ECA516FD3035305D": "Linux: /opt/f-secure/fspms/bin/prepare-fspm-definitions-update-tool <destination folder>", "content.p_B985B1B27B3041C98DDFD2AF768989": "", "substep.substep_488DAF8523004EAD981DFA3198DD40": "Run the following command to prepare the tool.", "subsubchoice.choice_4599670B04FA4272A976AC58497C08": "conf\\channels.json: this contains a list of the channels to be updated. By default, it includes updates for all the supported clients managed by Policy Manager, so we recommend that you leave only those that are necessary for your environment.", "subsubchoice.choice_6BF3A28E19D5455CB0A43E6968F4CC": "conf\\configuration.properties: among other settings, you can specify a HTTP proxy here, if needed.", "content.p_007F0BFE073A4130A003F04A6BC561": "", "substep.substep_8AA39E2047E54D1AA903FC6AB14946": "Modify the tool configuration, if necessary.", "substep.substep_D22ACBFF9E95492F98FE89C2990A73": "Transfer the prepared binaries to a machine that has Internet access.", "step.step_701ECF84F6594B2C9BEA87D1D826DA": "Prepare the tool.", "subsubchoice.choice_5C0D4EF34F934526886D111F537FEB": "On Windows, open the registry and go to HKLM\\SOFTWARE\\WithSecure\\Policy Manager\\Policy Manager Server \\additional_java_args.", "subsubchoice.choice_8E068227EB314C2F85AFC2E99C15B4": "On Linux, open the fspms.conf configuration file and look for the additional_java_args parameter.", "content.p_FA4FD06366B443B18905CB370D871B": "", "substep.substep_74A037EC92D04BD9B108D821743B49": "Open the additional Java arguments configuration to configure Policy Manager Server to run in isolated mode.", "substep.substep_DD169FD088F245F5AE667A828C2149": "Edit or add the string value additional_java_args with the following value: -DisolatedMode=true to the Java arguments configuration.", "substep.substep_40FC35CD3EDF4D379EA0850E99534C": "Restart Policy Manager Server to switch it to isolated mode", "step.step_010AC461B1CE4518AAD36BE92815DF": "Prepare the environment.", "subsubchoice.choice_0DCD1E23C963442EAD84C1BE5D647C": "Windows: fspm-definitions-update-tool.bat", "subsubchoice.choice_48F33EC6BCCF442D95F69BA44B9961": "Linux: fspm-definitions-update-tool", "content.p_499D197478EB4AE9A963B985286618": "", "content.p_D76EE75C03634218989EFC6C960C1B": "The tool creates 2 archives withsecure-updates.zip and f-secure-updates.zip containing the full set of the latest definitions and diffs to this version for 16 and newer clients and version 15 respectively. If all data is up to date, no archive is generated.", "substep.substep_C4BD74E4A3284586A9A415E5CED76E": "Run the tool.", "subsubchoice.choice_222B3AB6CDEE49018F9F101EA7F66A": "Windows: C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\data\\", "subsubchoice.choice_EDA50527828D47C884ABEB1F14FBDD": "Linux: /var/opt/f-secure/fspms/data/", "content.p_52A581EA5906419CBE81D77FB02B2C": "", "content.note_FD52E914EE25468CB5D1428D52AEFD": "Note: Do not change the archive file name or destination path, as they are hardcoded.", "substep.substep_1768F968597D435AA4C255F856517F": "Transfer the prepared archives (data\\withsecure-updates.zip and data\\f-secure-updates.zip) to the Policy Manager Server machine.", "subsubchoice.choice_9C0428E6AC17490C9F3E9C6C33FF56": "Windows: C:\\Program Files\\WithSecure\\Policy Manager\\Policy Manager Server\\bin\\import-definition-updates.bat", "subsubchoice.choice_44C65FC457FA4D2E9689E3CDCA14CC": "Linux: /opt/f-secure/fspms/bin/import-definition-updates", "content.p_BC95571695F1469EB2BA05B0C887F5": "", "substep.substep_C6EB1AAC541F4E43ACF71304B19950": "Run the following command to import the prepared updates.", "step.step_403033C96C7C4C059313E63622B070": "Transfer updates.", "desc": [ "content.p_43D86B9D4CC649F589AC01E4ADC3CD", "content.p_76AB1B9FDB8B46CEA4A33809916418", "content.p_1C8DBF5BFAA64795A5E6214F94684E", "content.p_66D179A67DAE46678FCE63AE104A70", "content.p_EF2CCF8F448B4C6D990B63BA9E11F4", "content.note_293CCB4ECB864B58A6F20FAAC1E95B", "content.p_C9F6EF5C88894654B0D2459309B4E9", { "steps.steps_EB834E459F334FF093D747A55476F8": [ "step.step_701ECF84F6594B2C9BEA87D1D826DA", "content.note_71ED97ECD3844905947EDB19D1ADC5", { "substeps.substepsalpha_F58B921D3E9945699D32BDC938CE5E": [ "substep.substep_488DAF8523004EAD981DFA3198DD40", "content.p_401ACB078FFA46348604135AEC2DD2", "content.p_B985B1B27B3041C98DDFD2AF768989", { "subsubchoices.ul_0C644C56087D49458747F0E53D7644": [ "subsubchoice.choice_C019EEF3C7E94D898B336FBB1834B2", "subsubchoice.choice_1C2B054986E143ECA516FD3035305D" ] }, "substep.substep_8AA39E2047E54D1AA903FC6AB14946", "content.p_007F0BFE073A4130A003F04A6BC561", { "subsubchoices.ul_38E52E5BE3134F3DA1FD48269559C0": [ "subsubchoice.choice_4599670B04FA4272A976AC58497C08", "subsubchoice.choice_6BF3A28E19D5455CB0A43E6968F4CC" ] }, "substep.substep_D22ACBFF9E95492F98FE89C2990A73" ] }, "step.step_010AC461B1CE4518AAD36BE92815DF", { "substeps.substepsalpha_5373ADC9BAC949BC9302AF56BA5B91": [ "substep.substep_74A037EC92D04BD9B108D821743B49", "content.p_FA4FD06366B443B18905CB370D871B", { "subsubchoices.ul_4682C19CF3D347158AA1C690E8FA5D": [ "subsubchoice.choice_5C0D4EF34F934526886D111F537FEB", "subsubchoice.choice_8E068227EB314C2F85AFC2E99C15B4" ] }, "substep.substep_DD169FD088F245F5AE667A828C2149", "substep.substep_40FC35CD3EDF4D379EA0850E99534C" ] }, "step.step_403033C96C7C4C059313E63622B070", { "substeps.substepsalpha_812754F6738A4240BAE66496E5B1AF": [ "substep.substep_C4BD74E4A3284586A9A415E5CED76E", "content.p_499D197478EB4AE9A963B985286618", { "subsubchoices.ul_AAED6D736F7C41D6931EB64A75DD5F": [ "subsubchoice.choice_0DCD1E23C963442EAD84C1BE5D647C", "subsubchoice.choice_48F33EC6BCCF442D95F69BA44B9961" ] }, "content.p_D76EE75C03634218989EFC6C960C1B", "substep.substep_1768F968597D435AA4C255F856517F", "content.p_52A581EA5906419CBE81D77FB02B2C", { "subsubchoices.ul_6AAED05BA02C412593D2FC866380FC": [ "subsubchoice.choice_222B3AB6CDEE49018F9F101EA7F66A", "subsubchoice.choice_EDA50527828D47C884ABEB1F14FBDD" ] }, "content.note_FD52E914EE25468CB5D1428D52AEFD", "substep.substep_C6EB1AAC541F4E43ACF71304B19950", "content.p_BC95571695F1469EB2BA05B0C887F5", { "subsubchoices.ul_855712D3C96E4329A5C3346B6ED431": [ "subsubchoice.choice_9C0428E6AC17490C9F3E9C6C33FF56", "subsubchoice.choice_44C65FC457FA4D2E9689E3CDCA14CC" ] } ] } ] } ] }, "task_updating_offline_cs_hosts-16.10-en.json": { "title": "title_8290F7148A674C80A103E643C06A1B12", "title_8290F7148A674C80A103E643C06A1B12": "Updating malware definitions on isolated Client Security hosts", "shortdesc": "shortdesc_09F90BF2F783444E9B14E62E9A5C0E06", "shortdesc_09F90BF2F783444E9B14E62E9A5C0E06": "If you have installed Client Security on hosts that do not have a network connection, you can update the malware definitions using the tool provided with Policy Manager. ", "content.p_00E9C9804BBC40968D90AC80579D27": "", "content.note_F4142D3F0015404F89A72545991996": "Note: This procedure applies to Client Security, Client Security for Mac and Server Security. Use file withsecure-updates.zip for versions 16 and newer, f-secure-updates.zip for version 15.", "content.p_1A33843DFE764CD390AA79D9B83829": "The tool for downloading updates is bundled with Policy Manager and can be extracted with the provided scripts. When you run it on any machine with internet access, the tool downloads the latest updates and required diffs to generate an all-in-one archive.", "content.p_6269AC4CA009453D847B3E7F04306F": "By default, the tool uses the data\\updates folder to store the downloaded update binaries. It also stores the update history to use as a reference for downloading the relevant diffs to the latest version.", "content.p_E996BDD00C2348848F469E022D83E1": "In addition to the update binaries, you also need the fsaua-update tool to import the prepared updates. This tool is included in the Client Security installation package: C:\\Program Files (x86)\\F-Secure\\Client Security\\fsaua-update_32.exe.", "content.p_499785B6EA83463EBF738CFED09DC6": "To update the malware definitions:", "subchoice.choice_F49C9F7195124F93B46EE31DEF0E67": "Windows: C:\\Program Files\\WithSecure\\Policy Manager Server\\bin\\ prepare-fspm-definitions-update-tool.bat <destination folder>", "subchoice.choice_9F8CDE765A774D5782F8FC9E580E8A": "Linux: /opt/f-secure/fspms/bin/prepare-fspm-definitions-update-tool <destination folder>", "step.step_E7225AE4D33A45C5822E38ECBF1845": "Run the following command on the Policy Manager machine to prepare the tool:", "step.step_8C662C7E993949C9BA5D55F4B17723": "Transfer the prepared binaries to a machine that has internet access, if necessary.", "subchoice.choice_5D701C5CAA004BC0A7222BC2327EF2": "conf\\channels.json: this contains a list of the channels to be updated. By default, it includes updates for all the supported clients managed by Policy Manager, so we recommend that you leave only the Client Security versions necessary for your environment.", "step.step_4E8F0538EAE44E21BA9520E2BCC254": "Modify the tool configuration, if necessary:", "subchoice.choice_7E064B6EC4D34A9E856D5F8197A6A3": "Windows: fspm-definitions-update-tool.bat", "subchoice.choice_8278C5E894474C56BD9BF9EC644C4A": "Linux: fspm-definitions-update-tool", "content.p_A1DF83486F434BD1937E505A6E75D1": "The resulting archive contains the full set of the latest definitions and diffs to this version. If all data is up to date, no archive is generated.", "step.step_E3C84113D2234E25AB891D76532DE7": "Run the tool:", "subchoice.choice_3EE5D27DD6D345EEAD804BCEB968EA": "Client Security: Transfer the archive to the C:\\Program Files (x86)\\F-Secure\\Client Security directory on the host.", "subchoice.choice_E1398A109BA7423B8DED3E48498676": "Server Security: Transfer the archive to the C:\\Program Files (x86)\\F-Secure\\Server Security directory on the host", "subchoice.choice_EFC5A134CFD1475A91B3D8AD28C777": "Client Security for Mac: Transfer the archive to any convenient directory on the host.", "step.step_2669B7BCE51A46629C9D08FA0C7C2F": "Transfer the prepared archive (data\\withsecure-updates.zip or data\\f-secure-updates.zip depending on the client version by default) to the isolated host: directory on the isolated Client Security host.", "subchoice.choice_2A1B405601C844AC84391CDBB2B450": "Client Security: Run C:\\Program Files (x86)\\F-Secure\\Client Security\\fsaua-update_32.exe with administrator privileges.", "subchoice.choice_89AC5272EDDF4457A4DC020805A670": "Server Security: Run C:\\Program Files (x86)\\F-Secure\\Server Security\\Sfsaua-update_32.exe with administrator privileges.", "subchoice.choice_BB27E02090214CF184B810D6C2A8BD": "Client Security for Mac: Run sudo/Library/WithSecure/bin/guts2-standalone-update --updateFile <path to withsecure-updates.zip>.", "step.step_5C1C1184D7AC459BAB924B634D19A8": "Launch the update on the isolated host:", "desc": [ "content.note_F4142D3F0015404F89A72545991996", "content.p_1A33843DFE764CD390AA79D9B83829", "content.p_6269AC4CA009453D847B3E7F04306F", "content.p_E996BDD00C2348848F469E022D83E1", "content.p_499785B6EA83463EBF738CFED09DC6", { "steps.steps_525C5E454BF64B8390583B346B5567": [ "step.step_E7225AE4D33A45C5822E38ECBF1845", { "subchoices.choices_0F72E7BC3B2944AFAA9A215E750A84": [ "subchoice.choice_F49C9F7195124F93B46EE31DEF0E67", "subchoice.choice_9F8CDE765A774D5782F8FC9E580E8A" ] }, "step.step_8C662C7E993949C9BA5D55F4B17723", "step.step_4E8F0538EAE44E21BA9520E2BCC254", { "subchoices.choices_A83F8F9D7B4B44639306F43FBF1AEA": [ "subchoice.choice_5D701C5CAA004BC0A7222BC2327EF2" ] }, "step.step_E3C84113D2234E25AB891D76532DE7", { "subchoices.choices_E98809758A3A4B09B6DBA7600FAC1B": [ "subchoice.choice_7E064B6EC4D34A9E856D5F8197A6A3", "subchoice.choice_8278C5E894474C56BD9BF9EC644C4A" ] }, "content.p_A1DF83486F434BD1937E505A6E75D1", "step.step_2669B7BCE51A46629C9D08FA0C7C2F", { "subchoices.choices_58FA8D2AD8954C6889E3499BF3AFF0": [ "subchoice.choice_3EE5D27DD6D345EEAD804BCEB968EA", "subchoice.choice_E1398A109BA7423B8DED3E48498676", "subchoice.choice_EFC5A134CFD1475A91B3D8AD28C777" ] }, "step.step_5C1C1184D7AC459BAB924B634D19A8", { "subchoices.choices_338EB0162B6F44E78A6D4C39DA266D": [ "subchoice.choice_2A1B405601C844AC84391CDBB2B450", "subchoice.choice_89AC5272EDDF4457A4DC020805A670", "subchoice.choice_BB27E02090214CF184B810D6C2A8BD" ] } ] } ] }, "concept_backup_restore_fspmc_data-16.10-en.json": { "title": "title_DBE74EE38243428A8F5921EA235DBFE7", "title_DBE74EE38243428A8F5921EA235DBFE7": "Backing up and restoring Policy Manager data", "shortdesc": "shortdesc_214F7528B134426B8843277F4646E4BA", "shortdesc_214F7528B134426B8843277F4646E4BA": "Policy Manager Server can be maintained by routinely backing up the data on the server in case it needs to be restored. ", "content.p_A859318A3C8640A989C9843B418056": "It is highly recommended that you back up the most important management information regularly. The domain and policy data, as well as the signing keys, are all stored in the H2 database.", "content.p_D3DFAAC052784385AC854A7C1D8F0B": "You can set Policy Manager to automatically backup the server data on a regular schedule. You can choose when the backups should be taken and how many backups you want to store - as more backups are created, the oldest ones are deleted.", "content.p_D914FECFD9634C51A1D82185AD21E1": "You can also export the signing keys in use on your installation of Policy Manager Server to a network location, from where they can be imported again if necessary.", "content.p_1960DCBA6FF5492AB8318A7B59D62C": "If you want to save the Policy Manager Console preferences, back up the lib\\Administrator.properties file from the local installation directory.", "content.note_C82815D25A10403CA1FAD5EF44E2E0": "Note: The Administrator.properties file is created during the first run of Policy Manager Console and contains session related information such as window size or the server URL.", "desc": [ "content.p_A859318A3C8640A989C9843B418056", "content.p_D3DFAAC052784385AC854A7C1D8F0B", "content.p_D914FECFD9634C51A1D82185AD21E1", "content.p_1960DCBA6FF5492AB8318A7B59D62C", "content.note_C82815D25A10403CA1FAD5EF44E2E0" ] }, "task_creating_backup-16.10-en.json": { "title": "title_8D7D8B5C72504A4894CA39A2C01429CF", "title_8D7D8B5C72504A4894CA39A2C01429CF": "Creating the backup", "shortdesc": "shortdesc_159C80E056994B09835F11843A5059FB", "shortdesc_159C80E056994B09835F11843A5059FB": "Here you will find how to create a backup of the policy data and domain structure. ", "content.p_EA58AF285EA44109AC5C426BE1DB0F": "Any backups you take are stored in the C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\data\\backup folder.", "step.step_707B35ADCB9F4A1AAECFD934D7A508": "Select Tools > Server configuration from the menu.", "step.step_0A18B31077E7454EB9665CBE5AF112": "Select Backup.", "substep.substep_93A12B9B39FB467EB301296AFEB442": "Select Enable automatic backup.", "substep.substep_1E69CFB2C3494FB9B2E1B638E65159": "Select either a Daily or Weekly backup schedule and select when you want the automatic backups to be taken.", "step.step_68FCD96913F04157A43D3715D203F4": "To set up a schedule for automatic backups:", "step.step_DB85EDD07FEF4B97BCABCDCC67518B": "Select how many backups you want to keep.", "step.step_A80FFEDDBFD1473CBDF868B498F757": "If you want to take a backup immediately, click Backup now.", "step.step_443DEC29D22C43DD98190403260FFC": "Click OK.", "desc": [ "content.p_EA58AF285EA44109AC5C426BE1DB0F", { "steps.steps_40EF85BAC52644CE9D91E2EA580C8C": [ "step.step_707B35ADCB9F4A1AAECFD934D7A508", "step.step_0A18B31077E7454EB9665CBE5AF112", "step.step_68FCD96913F04157A43D3715D203F4", { "substeps.substepsalpha_BD5FCDA4149B4DE798546311252CB7": [ "substep.substep_93A12B9B39FB467EB301296AFEB442", "substep.substep_1E69CFB2C3494FB9B2E1B638E65159" ] }, "step.step_DB85EDD07FEF4B97BCABCDCC67518B", "step.step_A80FFEDDBFD1473CBDF868B498F757", "step.step_443DEC29D22C43DD98190403260FFC" ] } ] }, "task_task_E1DB5A93FC5B4AF7AE32027CE262CA4F_5884CD40-16.10-en.json": { "title": "title_B4258D4357CC4AB3A02B6885FB6640F5", "title_B4258D4357CC4AB3A02B6885FB6640F5": "Restoring the backup", "shortdesc": "shortdesc_3067005A5F674E94B78B6E6A92192E3F", "shortdesc_3067005A5F674E94B78B6E6A92192E3F": "In the event of lost Policy Manager data, you can restore the most recently backed up data. ", "content.p_E30030A6D3E8461DBD741714EC00A5": "To restore backed up Policy Manager data:", "step.step_8FF035C018F14434814E72971287BC": "Stop the Policy Manager Server service.", "step.step_4CFC7F9D7B76415BA7AC293EFA45C0": "Copy the contents of the backup that you want restore from the c:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\data\\backup folder to the C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\data\\h2db folder.", "step.step_FFDE9B02C9274717BA730697F8C870": "Restart the Policy Manager Server service.", "step.step_FF118035377E4D079E34E78BC44566": "Reopen the Policy Manager Console management sessions.", "desc": [ "content.p_E30030A6D3E8461DBD741714EC00A5", { "steps.steps_36641BA830D444C98383DB58FBDBEA": [ "step.step_8FF035C018F14434814E72971287BC", "step.step_4CFC7F9D7B76415BA7AC293EFA45C0", "step.step_FFDE9B02C9274717BA730697F8C870", "step.step_FF118035377E4D079E34E78BC44566" ] } ] }, "task_restoring_backup-16.10-en.json": { "title": "title_B57D6A31CF8542FB934800B13184CAE8", "title_B57D6A31CF8542FB934800B13184CAE8": "Restoring an automatically saved backup on Linux", "shortdesc": "shortdesc_DBD6344023C74F6A98731BE04C1D640F", "shortdesc_DBD6344023C74F6A98731BE04C1D640F": "If necessary, you can restore a backup of Policy Manager's H2 database, which contains your domain and policy data. ", "content.p_1FEF364C852D4239B5DEE1028A193C": "When you set Policy Manager to automatically take regular backups of the H2 database, the backup files are stored in the var/opt/f-secure/fspms/data/backup folder, with the individual backup files named by date and time (<yyyy_mm_dd_nn_nn_nn>.backup.zip).", "content.p_1A2C6D08EE6647AE9ABA3C83247B28": "To restore the backup data:", "content.p_B834F8C6BDE542F2B8A28E0DCF3132": "# systemctl stop fspms", "step.step_0BCEB48956044B26A63557E8A82E7D": "Stop the Policy Manager service:", "content.p_E6568D6DFA664A6793BE5EB9EA8254": "# ps -efl | grep java", "content.p_15400FD0DDDE434E930A36A793DD87": "If the process is still running, wait until it shuts down completely or check the process again after a while.", "step.step_7E411416C06A42199ADC5574F429AD": "Check that the Policy Manager Java process is stopped:", "step.step_BF2E4D1EE4124FDF93A8846B8FD817": "Overwrite the fspms.h2.db file under /var/opt/f-secure/fspms/data/h2db with the corresponding file from the zipped backup.", "step.step_9340BF9217CA4E60A8E942467D1D86": "Restart the Policy Manager service.", "desc": [ "content.p_1FEF364C852D4239B5DEE1028A193C", "content.p_1A2C6D08EE6647AE9ABA3C83247B28", { "steps.steps_0E533D4258804F24875FF43DBE7B76": [ "step.step_0BCEB48956044B26A63557E8A82E7D", "content.p_B834F8C6BDE542F2B8A28E0DCF3132", "step.step_7E411416C06A42199ADC5574F429AD", "content.p_E6568D6DFA664A6793BE5EB9EA8254", "content.p_15400FD0DDDE434E930A36A793DD87", "step.step_BF2E4D1EE4124FDF93A8846B8FD817", "step.step_9340BF9217CA4E60A8E942467D1D86" ] } ] }, "task_exporting_importing_keys-16.10-en.json": { "title": "title_4FBE5EE831E9435C80D1C552AF323CB3", "title_4FBE5EE831E9435C80D1C552AF323CB3": "Exporting and importing signing keys", "shortdesc": "shortdesc_CC618123C0B5495ABE4F6C79618FE2B9", "shortdesc_CC618123C0B5495ABE4F6C79618FE2B9": "You can export your signing keys to an external location or import existing signing keys to replace the ones generated during installation.", "content.p_0EACBA89CDC04573BA51CDC92713AB": "You may need to export the signing keys, for example if you use several installations of Policy Manager to manage a large environment, but want to use the same signing keys across the whole environment.", "step.step_3CD9EE027908467F8A83B21ADA90A8": "Select Tools > Server configuration from the menu.", "content.p_506834F432A44E63AFB63802E5866A": "To export your current signing keys:", "substep.substep_13D789B07A624EA5AF7A907A361F90": "Click Export.", "substep.substep_26F6A88C067A481A876B9FE6B39E2D": "Select the target folder or network location for the exported keys, then click Save.", "substep.substep_32E88DB91CFA4DF09113CDB1192EA9": "Enter and confirm a passphrase for the exported private key, then click OK.", "content.p_E9751B02306F46529C5238DD48A5B9": "To import existing signing keys to replace those currently in use:", "substep.substep_CD307FC3A8D34BEEBBDC471F4EF60E": "Click Replace.", "substep.substep_BB13360535FE404AA1F1A63E64C7EB": "Browse to the location of the keys you want to import, then click OK.", "substep.substep_BD08E78B589F4CCAA58A5C9961963B": "Enter the passphrase for the imported signing keys, then click OK.", "content.p_1CDBC28D79FD4DBEAF4EE74D99C4D0": "A notification will appear to confirm that the signing keys were successfully exported or replaced.", "step.step_B3DE58E8E8A045D5BF1C270549C0C8": "Select Keys.", "step.step_E2E1D9235F3641388CCE3BD0F29ECE": "Click OK to close the Server configuration dialog box.", "desc": [ "content.p_0EACBA89CDC04573BA51CDC92713AB", { "steps.steps_D545CDA5846A4978AAD73A1B742BE3": [ "step.step_3CD9EE027908467F8A83B21ADA90A8", "step.step_B3DE58E8E8A045D5BF1C270549C0C8", "content.p_506834F432A44E63AFB63802E5866A", { "substeps.substepsalpha_62FE875527B8492C82971E8478583E": [ "substep.substep_13D789B07A624EA5AF7A907A361F90", "substep.substep_26F6A88C067A481A876B9FE6B39E2D", "substep.substep_32E88DB91CFA4DF09113CDB1192EA9" ] }, "content.p_E9751B02306F46529C5238DD48A5B9", { "substeps.substepsalpha_CE34D73150F547659BD2C17E37C9EE": [ "substep.substep_CD307FC3A8D34BEEBBDC471F4EF60E", "substep.substep_BB13360535FE404AA1F1A63E64C7EB", "substep.substep_BD08E78B589F4CCAA58A5C9961963B" ] }, "content.p_1CDBC28D79FD4DBEAF4EE74D99C4D0", "step.step_E2E1D9235F3641388CCE3BD0F29ECE" ] } ] }, "task_replicating_software_using_image_files-16.10-en.json": { "title": "title_B4058858AC3D430998687ABD5608FE6F", "title_B4058858AC3D430998687ABD5608FE6F": "Replicating software using image files", "shortdesc": "shortdesc_671BF3C1743943148A4B0E4920CCCBDD", "shortdesc_671BF3C1743943148A4B0E4920CCCBDD": "If you use image files to distribute product installations, you need to make sure that there are no unique ID conflicts. ", "content.p_EE63D6F6E5F6450C8A3EB8A9BC3CB2": "Client Security may be included when software is replicated using disk image files. Every product installation does, however, contain a unique identification code (Unique ID) that is used by Policy Manager. Several computers may attempt to use the same unique ID if disk image software is used to install new computers. This situation will prevent Policy Manager from functioning properly.", "content.p_E45532D42FF04922837B7BCBDB94BB": "Follow these steps to make sure that each computer uses a personalized unique ID even if disk imaging software has been used:", "step.step_2EE399ED9699414CAD17BC7A762F32": "Install the system and all the software that should be in the image file, including Client Security.", "content.note_AEE6324E2FCF4DBBB0DAEACAF93877": "Note: Do not import the host to Policy Manager Console if the host has sent an autoregistration request to Policy Manager Server. Only hosts to where the image file will be installed should be imported.", "step.step_B6A6259FF6C54654B151B3B4F81C80": "Configure Client Security to use the correct Policy Manager Server.", "content.p_D4269DFCE40E4A28912B973E7035D8": "For Client Security version 15.20 and newer and Server Security version 15.10 and newer, use SMBIOS or WINS with the Automatically update client host identity setting selected in Policy Manager Console.", "content.p_659E4D93D1AF45E3828D893BB9CE64": "For older client versions, or if using RANDOMGUID is a requirement, use the C:\\Program Files (x86)\\F-Secure\\Client Security\\resetuid.exe utility to reset the unique ID for the distributable image.", "substep.substep_BE83739C2A31455D9386A3CC140A7C": "Run the following command to check the current ID method: C:\\Program Files (x86)\\F-Secure\\Client Security\\resetuid.exe showuid", "substep.substep_FE4239FCDED14B7E993658CD76B8C3": "Reset the unique ID to use a new ID when the host next starts up: C:\\Program Files (x86)\\F-Secure\\Client Security\\resetuid.exe resetuid randomguid", "step.step_D3B3E840DAA3466686651714BF724D": "Set the identification method to use for the host.", "content.note_7D6F6746F5B74E33ABABDBC470C1B7": "Note: Do not restart the computer at this stage.", "step.step_4F4FE3A586C440A58B11684D032EBE": "Shut down the computer.", "content.p_759303A50CD74FDE85AF52F4FD743B": "The utility program resets the Unique ID in the Client Security installation. A new Unique ID is created automatically when the system is restarted. This will happen individually on each machine where the image file is installed. These machines will send autoregistration requests to Policy Manager and the request can be processed normally.", "step.step_04ADBDD5AB3D491A8F67DF5BD16FAF": "Create the disk image file.", "desc": [ "content.p_EE63D6F6E5F6450C8A3EB8A9BC3CB2", "content.p_E45532D42FF04922837B7BCBDB94BB", { "steps.steps_7F1C5EAD6C8843CDBD5E909FFD3001": [ "step.step_2EE399ED9699414CAD17BC7A762F32", "step.step_B6A6259FF6C54654B151B3B4F81C80", "content.note_AEE6324E2FCF4DBBB0DAEACAF93877", "step.step_D3B3E840DAA3466686651714BF724D", "content.p_D4269DFCE40E4A28912B973E7035D8", "content.p_659E4D93D1AF45E3828D893BB9CE64", { "substeps.substepsalpha_333DD583E4854709B756A16D61172D": [ "substep.substep_BE83739C2A31455D9386A3CC140A7C", "substep.substep_FE4239FCDED14B7E993658CD76B8C3" ] }, "step.step_4F4FE3A586C440A58B11684D032EBE", "content.note_7D6F6746F5B74E33ABABDBC470C1B7", "step.step_04ADBDD5AB3D491A8F67DF5BD16FAF", "content.p_759303A50CD74FDE85AF52F4FD743B" ] } ] }, "task_reindexing_search_data-16.10-en.json": { "title": "title_195D5A9CE91D41A79C10DEF0067A6585", "title_195D5A9CE91D41A79C10DEF0067A6585": "Re-indexing search data", "shortdesc": "shortdesc_D689930DB0FD465E9FF9707857DAC56C", "shortdesc_D689930DB0FD465E9FF9707857DAC56C": "The search index in Policy Manager uses the Apache Solr framework and provides data for Web Reporting, Data mining, and other functionality within the product. ", "content.p_669237603BB84A4BB5EE2326259E86": "The search index data in itself is not included in the product backups, although the data that it uses to compile the index is. In some cases, you may need to re-index the data to ensure that the Data mining feature and Web Reporting are working properly.", "step.step_289502D2306E43C3ABAFD9E2B1BFCA": "Select Tools > Server configuration from the menu.", "step.step_F9AD400EDB54411696C11894CF1FE0": "Click the Search index tab.", "content.p_AF35BD6B8E2A497DBE6A777EAA651B": "This recompiles the data for the search index from the H2 database and event files.", "step.step_2E0B08B7BE814DC0BAF2F5A2C6B9BE": "Click Re-index data.", "desc": [ "content.p_669237603BB84A4BB5EE2326259E86", { "steps.steps_DB161FDA698D40C091D7C73FD345A7": [ "step.step_289502D2306E43C3ABAFD9E2B1BFCA", "step.step_F9AD400EDB54411696C11894CF1FE0", "step.step_2E0B08B7BE814DC0BAF2F5A2C6B9BE", "content.p_AF35BD6B8E2A497DBE6A777EAA651B" ] } ] }, "task_database_maintenance_tool-16.10-en.json": { "title": "title_F28E4E319A534794930EFEC458FEF177", "title_F28E4E319A534794930EFEC458FEF177": "Running the database maintenance tool", "shortdesc": "shortdesc_5229A9469484422DA71D17D560DFF865", "shortdesc_5229A9469484422DA71D17D560DFF865": "Policy Manager includes a database maintenance tool that optimizes and checks the integrity of your database. ", "content.p_533AC12E54904291A8CF89EB373515": "", "content.note_7024F0E02CEB4F6DA8560E944D066A": "Note: Before running the maintenance tool, check that there is enough free disk space available on the computer where Policy Manager is installed. The disk space requirements for the maintenance tool depend on the size of your database, but as a guideline you should have at least twice as much free space as the size of your database.", "content.p_216AFFAC12CC4375A83F638B423BF8": "Database maintenance is automatically started as part of any Policy Manager upgrade or re-installation to ensure that the database structure is compatible with the latest version.", "content.p_6E34E56BFAC54835996486C78BAAE5": "The maintenance tool creates a backup of your database, after which it verifies the database integrity and then applies the updated schema to the contents of the database. It also cleans up any invalid data to optimize the size and performance of the database.", "content.p_5E878B4B251B4FC196B2412887B7DE": "To run the database maintenance tool manually:", "step.step_D2B18881623F4F87BD6109AEC1EA6A": "Stop the Policy Manager service.", "subchoice.choice_40A47EDD09DF4D91BBEE37A8BB940E": "On Windows, run C:\\Program Files\\WithSecure\\Policy Manager Server\\bin\\fspms-db-maintenance-tool.exe. When the maintenance tool opens, click Start maintenance.", "subchoice.choice_E92BC4BE9288452797C8A75A21283E": "On Linux, run the /opt/f-secure/fspms/bin/fspms-db-maintenance-tool script.", "content.p_A2C5506835314C44B43763556C792B": "The progress and details of the maintenance steps are shown.", "content.note_E25361ABE88D4D3FBE6141EF71FFA0": "Note: The maintenance tool may skip some of the maintenance steps, for example if the database schema is already up to date. However, the overall maintenance can still be successful even with skipped steps.", "step.step_2779C073340449888687000C3788E5": "Start the maintenance tool.", "step.step_5F3F52E6C6E649EB97212CCD29A429": "On Windows, after the maintenance steps have run, click Close.", "step.step_7FF01AC820A745F38AC2947351BC07": "Restart the Policy Manager service.", "content.p_C4C6BD94583E40488AD5AA595772A9": "If the maintenance is not successful, no changes are applied to the database and Policy Manager Server is not started.", "desc": [ "content.note_7024F0E02CEB4F6DA8560E944D066A", "content.p_216AFFAC12CC4375A83F638B423BF8", "content.p_6E34E56BFAC54835996486C78BAAE5", "content.p_5E878B4B251B4FC196B2412887B7DE", { "steps.steps_F3BF31E5FE97488081C14F4CE3D8D2": [ "step.step_D2B18881623F4F87BD6109AEC1EA6A", "step.step_2779C073340449888687000C3788E5", { "subchoices.choices_9C88A1312E784BDCAF53F9C1FEF3AB": [ "subchoice.choice_40A47EDD09DF4D91BBEE37A8BB940E", "subchoice.choice_E92BC4BE9288452797C8A75A21283E" ] }, "content.p_A2C5506835314C44B43763556C792B", "content.note_E25361ABE88D4D3FBE6141EF71FFA0", "step.step_5F3F52E6C6E649EB97212CCD29A429", "step.step_7FF01AC820A745F38AC2947351BC07" ] }, "content.p_C4C6BD94583E40488AD5AA595772A9" ] }, "task_running_the_search_maintenance_tool-16.10-en.json": { "title": "title_85A39531490F4752865D4CEA3A1676DB", "title_85A39531490F4752865D4CEA3A1676DB": "Running the search maintenance tool", "shortdesc": "shortdesc_CF91B8CB2B6B4C8A83397C7D4357845A", "shortdesc_CF91B8CB2B6B4C8A83397C7D4357845A": "This tool gives you the option to rebuild the index from scratch. ", "content.p_134FBD5B532A453F9ABD6354AAC8E5": "With the search maintenance tool, you can reset the Policy Manager event logs. This initializes new event logs based on the current data in the database. You may need to do this in the following cases:", "choice.choice_8C6C619513CE4A61BF6E9ACA4B45F9": "The event log is corrupted,", "choice.choice_D073EE6F32F4481D9FB5A34C157D5B": "The customer has moved the Policy Manager H2 database without any events, or", "choice.choice_3C8B4FD5A8E346A59AC7F8DB639603": "For other troubleshooting purposes.", "content.p_849AAC06DB804878B858DF227B39F8": "", "content.note_894E9B970B3544D8B06CCC0A85E3F1": "Note: The tool backs up the current event logs before making any changes.", "content.p_5A56773BF2454B91BFA17F72DE7DCF": "To run the search maintenance tool:", "step.step_2AC68417406744BCB73C1C88EF68F4": "Stop the Policy Manager service.", "subchoice.choice_72383CB5FCAB43E589020F7C4A1166": "On Windows, run C:\\Program Files\\WithSecure\\Policy Manager Server\\bin\\fspms-db-maintenance-tool.exe -resetEventLogs.", "subchoice.choice_141525B27E0B496498963184F2E9B9": "On Linux, run the /opt/f-secure/fspms/bin/fspms-db-maintenance-tool -resetEventLogs.", "step.step_89EB62B233334B1A8D1E06BB7042EF": "Start the maintenance tool.", "content.p_9EF133AC549047E985F4EA93460C3F": "Depending on the size of your database, rebuilding the index may take some time.", "step.step_0B1E9A09EE4744E0908CACBA44A631": "When the maintenance tool opens, click Start maintenance.", "step.step_1ACDF71EB7DB4B0E8F8731B90FEFA0": "Start the Policy Manager service.", "content.p_D5FDC11F2A5C488A8E4D47CBC5FD64": "New event logs have now been created.", "desc": [ "content.p_134FBD5B532A453F9ABD6354AAC8E5", { "choices.ul_F0C0F538D3CA4E0BA840BB97DD5BD9": [ "choice.choice_8C6C619513CE4A61BF6E9ACA4B45F9", "choice.choice_D073EE6F32F4481D9FB5A34C157D5B", "choice.choice_3C8B4FD5A8E346A59AC7F8DB639603" ] }, "content.note_894E9B970B3544D8B06CCC0A85E3F1", "content.p_5A56773BF2454B91BFA17F72DE7DCF", { "steps.steps_5C512F22599649379E12CF08C97F62": [ "step.step_2AC68417406744BCB73C1C88EF68F4", "step.step_89EB62B233334B1A8D1E06BB7042EF", { "subchoices.choices_85A9C9CD72DD4FF68B175D7771DC55": [ "subchoice.choice_72383CB5FCAB43E589020F7C4A1166", "subchoice.choice_141525B27E0B496498963184F2E9B9" ] }, "step.step_0B1E9A09EE4744E0908CACBA44A631", "content.p_9EF133AC549047E985F4EA93460C3F", "step.step_1ACDF71EB7DB4B0E8F8731B90FEFA0" ] }, "content.p_D5FDC11F2A5C488A8E4D47CBC5FD64" ], "related": [ "task_reindexing_search_data-16.10-en" ] }, "database_maintenance_tool-16.10-en.json": { "title": "title_05B20BE9E17747349DC7D47B9FACD62A", "title_05B20BE9E17747349DC7D47B9FACD62A": "Database maintenance troubleshooting", "shortdesc": "shortdesc_8BDA195FB09F45F4BD2DDC16949C70CE", "shortdesc_8BDA195FB09F45F4BD2DDC16949C70CE": "This section describes some of the warnings that may appear when running the database maintenance tool and how you can resolve them. ", "content.p_FD17EAF6D0C14FB4838F8C4C2704F5": "", "content.note_45A89E02E66449379385DE1BB752C3": "Note: In addition to the critical issues and warnings listed here, the integrity verification step is skipped if the database revision is unknown. This does not stop the maintenance process; the tool proceeds to run the remaining steps.", "content.title_51DB77A42D1042069F1918257C3D2618": "Critical issues", "content.p_A4B5D75F04964422AC408E49E4D958": "If a critical error occurs during the maintenance process, the remaining steps are skipped and no changes are applied. In addition, when you close the maintenance tool, Policy Manager Server does not start up automatically; this is to prevent upgrading the database schema so that the original database remains intact.", "content.dt_73EE6F1E42A44C7288B756D47D9A04": "Backup ", "content.dd_6BE40DA7A6E04662AC5821C4254FBA": "If the maintenance tool cannot create a backup of the database, it is most likely due to insufficient free disk space. If this happens:", "step.step_458EE88B09744914AA17149B204B76": "Finish the setup.", "step.step_75CEB9D5F5634290AE737802FB3781": "Free up some additional disk space.", "step.step_22D573EB5DE54BF5A5C89E46D28258": "Run the maintenance tool manually.", "step.step_C13437BA5B96429B87EA0C56F4362D": "Start the Policy Manager Server service.", "content.dt_1435889F31F441309656170854D652": "Integrity verification ", "content.dd_D4574A2BC3A44D3B8DA75965FD48E0": "This step fails with a critical error only when the management keys or domain tree tables cannot be processed. In the latter case, the tool exports the management keys to the Policy Manager Server data folder (the path is shown in the details dialog), so that you can import this key pair into a fresh database to avoid re-deploying the clients or using a key replacer tool.
", "content.dd_7C43E8F16F0B4656BC6841A5526A79": "If the integrity check of the critical tables fails, then the previous installation was most likely already broken. If this occurs, we recommend that you delete the corrupt database, start Policy Manager Server and import the rescued or earlier exported management key pair to a newly created database. You can also contact technical support and provide a copy of the database backup to see if it can be rescued.
", "content.dd_8D7014D50D974B0C9F8ABE687D6B19": "You can also try running the maintenance tool on an earlier backup:", "step.step_3CD503D268984841898E46F864751A": "Finish the setup.", "step.step_8C6CD41EA3364C62AEAB1A7F2DB479": "Check that the Policy Manager Server service has stopped.", "step.step_D4AE4E95F5C744E3952DA7323185F6": "Copy the earlier backup to the Policy Manager Server data folder, replacing the broken database.", "step.step_4C94488C61994F078461EB867ACDD1": "Run the database maintenance tool.", "content.dt_2C7F78BFE5D147628DE92E923236C2": "Database schema upgrade ", "content.dd_61849080B7564C0E8DD3377BF5543F": "A critical error during this step may be due to insufficient disk space. If this is the case, free up some additional disk space and run the maintenance tool on the backup that it created during the upgrade.
", "content.dd_C7B792441B244E65868302AE394F8F": "If a critical error occurs during this step, and your previous installation of Policy Manager was working, you can revert to the previous version as follows:", "step.step_7228F5BA8A42470786ABAB738E2CBC": "Finish the setup.", "step.step_FFE7B134BD564B45887A80032C8599": "Uninstall Policy Manager.", "step.step_4BFE98FA7341475EB308CF20164771": "Restore the original database from the backup copy.", "step.step_533FA3B377274FF1814194A0BF000D": "Install the previous version of Policy Manager.", "content.p_db_maintenance_troublesh_0F913": "", "content.dd_14E124BD40374877A6AFFF4BE8221D": "You can also try running the maintenance tool on an earlier backup, as described for issues in the integrity verification step.
", "content.dd_B53F23012C284EDCB4FB10EB38D01A": "If a critical error occurs during this step, we recommend that you create a support ticket that includes the broken database.", "content.title_C9FCBEF22EC5497CAC4DF1A95E68360B": "Warnings", "content.p_426FF4EE60B047C5B16E33B335D6AA": "If there are any issues during the maintenance process that prompt a warning, the process will still continue, but a warning icon is shown for the step and details are given in a separate dialog.", "content.dt_4FF6945F69D749BCB8E341E997416A": "Integrity verification ", "content.dd_3051B6A17D8A4E80A031DFCB67298C": "", "choice.choice_E3EC5ED677554C889DEE4538FCA051": "A warning is displayed if non-critical data is lost during this step.", "choice.choice_8C4E77BD59CA4E5388ACE287F87E5F": "This may be due to insufficient disk space. If this is the case, you can free up some additional disk space and run the maintenance tool on the backup that it created during the upgrade.", "choice.choice_5BE44DE11C004A428DEEA0E87CE839": "If the lost data originated from managed hosts (for example, status, alert, or report data), you do not need to do anything and some of the data will be recovered at some stage.", "choice.choice_0D1F801A389C454BB287CB36845BE4": "If the details for the warning indicate a loss of user data (for example, policies, host import rules, or Active Directory rules), you can try running the maintenance tool on an earlier backup. If this does not recover the lost data, the administrator needs to re-enter the data manually in Policy Manager Console.", "content.dt_35CBC20C956044AE85EBA4D560F2BA": "Database schema upgrade ", "content.dd_0B213F2249894BAF91ADEC03C7EBEE": "", "choice.choice_79FBBA797A09468DA5BA196BFC2137": "There are very few known issues that prompt a warning for this step.", "choice.choice_39CCB9344A934F059B26A1D4A40171": "One possible cause is an issue when moving the SMTP server credentials from the database to secure storage.", "choice.choice_ED44A3F29BC940B5917AAC45CCB09D": "If any data is lost, you can try running the maintenance tool on an earlier backup once the setup is complete. If this does not recover the lost data, the administrator needs to re-enter the data manually in Policy Manager Console.", "desc": [ "content.note_45A89E02E66449379385DE1BB752C3", "content.title_51DB77A42D1042069F1918257C3D2618", "content.p_A4B5D75F04964422AC408E49E4D958", { "dl.dl_108FFFB16C0E480FAE0D87034E9DC9": [ { "dlentry.dlentry_5C9B19A746A140E4AAC0D7482EF570": [ "content.dt_73EE6F1E42A44C7288B756D47D9A04", "content.dd_6BE40DA7A6E04662AC5821C4254FBA", { "steps.ol_745D3F0D0DC14382AF0D971C17AE22": [ "step.step_458EE88B09744914AA17149B204B76", "step.step_75CEB9D5F5634290AE737802FB3781", "step.step_22D573EB5DE54BF5A5C89E46D28258", "step.step_C13437BA5B96429B87EA0C56F4362D" ] } ] }, { "dlentry.dlentry_C540F438B5374D45ADC190B13E1F93": [ "content.dt_1435889F31F441309656170854D652", "content.dd_D4574A2BC3A44D3B8DA75965FD48E0", "content.dd_7C43E8F16F0B4656BC6841A5526A79", "content.dd_8D7014D50D974B0C9F8ABE687D6B19", { "steps.ol_C87F03D70D044CC4A34AD776F00F74": [ "step.step_3CD503D268984841898E46F864751A", "step.step_8C6CD41EA3364C62AEAB1A7F2DB479", "step.step_D4AE4E95F5C744E3952DA7323185F6", "step.step_4C94488C61994F078461EB867ACDD1" ] } ] }, { "dlentry.dlentry_A16B3803CEEE4208BE0D29A2395244": [ "content.dt_2C7F78BFE5D147628DE92E923236C2", "content.dd_61849080B7564C0E8DD3377BF5543F", "content.dd_C7B792441B244E65868302AE394F8F", { "steps.ol_22BB8CECA5A54046A3BB9DEF2F8193": [ "step.step_7228F5BA8A42470786ABAB738E2CBC", "step.step_FFE7B134BD564B45887A80032C8599", "step.step_4BFE98FA7341475EB308CF20164771", "step.step_533FA3B377274FF1814194A0BF000D" ] }, "content.p_db_maintenance_troublesh_0F913", "content.dd_14E124BD40374877A6AFFF4BE8221D", "content.dd_B53F23012C284EDCB4FB10EB38D01A" ] } ] }, "content.title_C9FCBEF22EC5497CAC4DF1A95E68360B", "content.p_426FF4EE60B047C5B16E33B335D6AA", { "dl.dl_A74DD3438C07476A9E4EBB385E58FC": [ { "dlentry.dlentry_D9C70CB8578740CE8B45756378A122": [ "content.dt_4FF6945F69D749BCB8E341E997416A", "content.dd_3051B6A17D8A4E80A031DFCB67298C", { "choices.ul_4DA1B0E475524BBEA02438F6D2E8DF": [ "choice.choice_E3EC5ED677554C889DEE4538FCA051", "choice.choice_8C4E77BD59CA4E5388ACE287F87E5F", "choice.choice_5BE44DE11C004A428DEEA0E87CE839", "choice.choice_0D1F801A389C454BB287CB36845BE4" ] } ] }, { "dlentry.dlentry_ACD2F840C3F6430CAD2D03E43942E9": [ "content.dt_35CBC20C956044AE85EBA4D560F2BA", "content.dd_0B213F2249894BAF91ADEC03C7EBEE", { "choices.ul_25EF8CF119404CA59955AD2E16E619": [ "choice.choice_79FBBA797A09468DA5BA196BFC2137", "choice.choice_39CCB9344A934F059B26A1D4A40171", "choice.choice_ED44A3F29BC940B5917AAC45CCB09D" ] } ] } ] } ] }, "concept_web_reporting-16.10-en.json": { "title": "title_81883207D7364F1AB484179E9CACC18A", "title_81883207D7364F1AB484179E9CACC18A": "Web Reporting ", "shortdesc": "shortdesc_3C3ABAB8C84C44DCB744FDFA6EA87BD2", "shortdesc_3C3ABAB8C84C44DCB744FDFA6EA87BD2": "Web Reporting is a browser-based graphical reporting system included in Policy Manager Server. ", "content.p_D145DBF85C3247BFB21E950ED3858D": "Web Reporting provides several standard reports that give detailed information on the status of the managed environment, infections, and software updates. In addition, queries that you create and publish with the Data mining feature are available as custom reports. You can create printable versions of the reports and create schedules for regular delivery of the reports.", "content.p_495EC3C90B364185891FAB1C9D6600": "The reports use donut, treemap, and bar charts as well as tables to present the data, depending on the report type. For the data presented in tables, you can select the column that is used to sort the data and choose which columns are shown.", "desc": [ "content.p_D145DBF85C3247BFB21E950ED3858D", "content.p_495EC3C90B364185891FAB1C9D6600" ], "related": [ "task_reindexing_search_data-16.10-en" ] }, "task_viewing_reports-16.10-en.json": { "title": "title_43D42212DA674489A805E77405F22AFA", "title_43D42212DA674489A805E77405F22AFA": "Viewing reports", "shortdesc": "shortdesc_61D969B5DB4F440C8DEB71F4F87111E6", "shortdesc_61D969B5DB4F440C8DEB71F4F87111E6": "Web Reporting includes several standard reports and also shows any custom reports based on Data mining queries that you have published in Policy Manager Console. ", "content.p_709C31BD534042CDA631397EC81EB0": "", "content.note_802EC8A42ECF40788B5B559CA238CA": "Note: Web Reporting uses a HTTPS connection and requires authentication to access reports. Use your Policy Manager Console user name and password to access Web Reporting.", "content.p_8E65F0404E5E47FB80D9A9E37D1E18": "For example, fspms.example.com:8081.", "content.p_0419BD3AF409467E9A3008E18399A1": "Alternatively, if you are accessing Web Reporting locally, you can open it from the Start menu: Start > WithSecurePolicy Manager Server > Web Reporting.", "step.step_C08B05DBC2DD4EAAA5D8B3B76581C0": "Enter the name or IP address of the Policy Manager Server followed by the Web Reporting port (separated by a colon) in your browser.", "content.p_B4AB0BA2BD684CEB9E8A549CFB0D86": "The Web Reporting page opens, showing a list of the available reports. Each report has a category tag: Environment, Malware protection, Software updates, or Custom report. Reports under the Custom report category are based on published Data mining queries. The other report categories are for the standard set of reports.", "step.step_E3D8927CFCBC4A898ACFE8E02CE43A": "Enter your Policy Manager Console user name and password to log in if prompted.", "content.p_16D4AC0192F2472FA64A3E224B0138": "The selected report opens. The data presented depends on the report. Custom reports show the data in tables, while standard reports may include both table data and charts.", "step.step_2507B4E35EAC43E7A6A7A74651FFFD": "Select one of the listed reports.", "subchoice.choice_F35C7E0FAE934E03A2C74479B82326": "To change the domain scope of the report, click the scope selector at the top of the page and select a domain. By default, the scope is set to Root when you open Web Reporting.", "subchoice.choice_06A918DFFEBB48A2887BEF5FACA2B9": "If you want to see the reported data for a different time period, select Last 24 hours, Last 30 days, Last 7 days, or Last 90 days from the Time period drop-down menu.", "subchoice.choice_2139884FB03B48838CC98EDD4E6899": "To change what columns are shown in a report table, click the column icon and select or clear the columns as needed.", "subchoice.choice_11D54DC15A0C45259FA806BB6C82F5": "Click the sort icons on any table columns to change how the data is sorted.", "subchoice.choice_5219502080914AFA878CAD1A5E675E": "Some reports contain clickable links, for example to show host details or descriptions for software updates.", "step.step_52F20B6A073D4C43A4822E475D034D": "Modify the report settings and presentation if necessary:", "content.p_F098B27F80B6479A9A97E201964548": "This opens the report in a new tab for printing.", "step.step_8C8757CD58A74C37B6949D48F8D009": "To view a printable version of a report, click Print.", "desc": [ "content.note_802EC8A42ECF40788B5B559CA238CA", { "steps.steps_8A5274807C444354AA8E48C11BB189": [ "step.step_C08B05DBC2DD4EAAA5D8B3B76581C0", "content.p_8E65F0404E5E47FB80D9A9E37D1E18", "content.p_0419BD3AF409467E9A3008E18399A1", "step.step_E3D8927CFCBC4A898ACFE8E02CE43A", "content.p_B4AB0BA2BD684CEB9E8A549CFB0D86", "step.step_2507B4E35EAC43E7A6A7A74651FFFD", "content.p_16D4AC0192F2472FA64A3E224B0138", "step.step_52F20B6A073D4C43A4822E475D034D", { "subchoices.choices_6E30DD3118C44909946E8765104243": [ "subchoice.choice_F35C7E0FAE934E03A2C74479B82326", "subchoice.choice_06A918DFFEBB48A2887BEF5FACA2B9", "subchoice.choice_2139884FB03B48838CC98EDD4E6899", "subchoice.choice_11D54DC15A0C45259FA806BB6C82F5", "subchoice.choice_5219502080914AFA878CAD1A5E675E" ] }, "step.step_8C8757CD58A74C37B6949D48F8D009", "content.p_F098B27F80B6479A9A97E201964548" ] } ] }, "task_scheduling_reports-16.10-en.json": { "title": "title_D106FEDDCA57406B8AB0F2AC3BA36615", "title_D106FEDDCA57406B8AB0F2AC3BA36615": "Scheduling reports", "shortdesc": "shortdesc_4C1E494B0B93480E9B37A556E2D737B8", "shortdesc_4C1E494B0B93480E9B37A556E2D737B8": "You can configure Web Reporting to send regular reports by email to one or more recipients. ", "content.p_044D8A62A7D54E6D816B8772EB0EBD": "To send the reports by email, you need to enter the mail server details in Policy Manager Console. To do this:", "step.step_77B43F6B3EFA410B8BFF8F5BF481B1": "Select Tools > Server configuration and click the Mail server tab.", "step.step_534A3AD7EB2745FDA61F213818958B": "Enter the mail server address and authentication information.", "step.step_BDEE54537A00461F87799CF66C0194": "Enter the address that you want to display as the sender in the report emails. This does not have to be a valid email address.", "step.step_3BCAD2AA67244A0EAA4828FB6A9539": "Click OK.", "content.p_scheduling_reports_000004_0E76": "To configure the report scheduling:", "step.step_2FF290683A544F0A9FCA62DD51AC0F": "On the Web Reporting main page, click the Schedules icon.", "step.step_BC01E23F9BD8497884492B2E8553D2": "Click Create schedule.", "content.note_2BE8D770651C49BA92BEFCA922F752": "Note: You cannot schedule reports for individual hosts, only for domains. You can use the root domain if you want the reports to cover all configured domains.", "step.step_D6101414AA42417DB10A97132C1EDA": "Select the domain, reports, frequency, and language for the scheduled report delivery.", "content.p_6B95170118314A9F96770922DEE76B": "Use semi-colons to separate multiple addresses.", "step.step_4C9E86B81E9A4CCCB542E89B418C9D": "In the Recipients field, enter the email addresses that should receive the reports.", "step.step_88E8A5C8685D4F97893AAEFB51F5EA": "Click Save.", "content.p_6FBFE458834640D9A7392FFED13217": "The listed recipients will receive the selected reports in PDF format according to your settings.", "content.p_BD48DB28CEC1486EAC72F12001DBA3": "If you want to check that the report emails are delivered correctly, click the action button for the report and select Send reports now.", "desc": [ "content.p_044D8A62A7D54E6D816B8772EB0EBD", { "steps.ol_EAFC0CAA264C4BF6938781AA91C217": [ "step.step_77B43F6B3EFA410B8BFF8F5BF481B1", "step.step_534A3AD7EB2745FDA61F213818958B", "step.step_BDEE54537A00461F87799CF66C0194", "step.step_3BCAD2AA67244A0EAA4828FB6A9539" ] }, "content.p_scheduling_reports_000004_0E76", { "steps.steps_A13911305B21488EBD685B4349E215": [ "step.step_2FF290683A544F0A9FCA62DD51AC0F", "step.step_BC01E23F9BD8497884492B2E8553D2", "step.step_D6101414AA42417DB10A97132C1EDA", "content.note_2BE8D770651C49BA92BEFCA922F752", "step.step_4C9E86B81E9A4CCCB542E89B418C9D", "content.p_6B95170118314A9F96770922DEE76B", "step.step_88E8A5C8685D4F97893AAEFB51F5EA" ] }, "content.p_6FBFE458834640D9A7392FFED13217", "content.p_BD48DB28CEC1486EAC72F12001DBA3" ] }, "task_changing_web_reporting_port-16.10-en.json": { "title": "title_AF56F1E050A141D593962989B85E397E", "title_AF56F1E050A141D593962989B85E397E": "Changing the Web Reporting port", "shortdesc": "shortdesc_F6E9DFE68FE140CD95DA16EDB37D9C38", "shortdesc_F6E9DFE68FE140CD95DA16EDB37D9C38": "The recommended method for changing the Web Reporting port is to re-run the Policy Manager setup, and change the Web Reporting port there. ", "content.p_B066D1033E1840578EF3E7D5B1C2A2": "You can also change the Web Reporting port by editing the HKLM\\SOFTWARE\\WithSecure\\Policy Manager\\Policy Manager Server\\ registry key:", "step.step_7ED3644790DF4A6BBFC2FA989970A3": "Stop Policy Manager Server.", "step.step_47885822D5F34293AA7DBC983722FB": "Open the HKLM\\SOFTWARE\\WithSecure\\Policy Manager\\Policy Manager Server\\ registry key.", "content.p_44AE0E85377045909D26AC8BB77BCB": "Make sure Decimal is selected as the Base option when entering the new port number.", "step.step_80AB6D4695F249559CF7881135D821": "Edit the WRPortNum value and enter the new port number.", "content.p_58F51958523F454CBCF79C5204D718": "If there is a port conflict, Policy Manager Server will not start, and an error message will be printed in the log file. In this case you should try another, unused port.", "step.step_CAD3BBF8311348E48A8B1ACCF9C995": "Start Policy Manager Server.", "desc": [ "content.p_B066D1033E1840578EF3E7D5B1C2A2", { "steps.steps_1B44A7E2490F483884FDF43F4B3D0A": [ "step.step_7ED3644790DF4A6BBFC2FA989970A3", "step.step_47885822D5F34293AA7DBC983722FB", "step.step_80AB6D4695F249559CF7881135D821", "content.p_44AE0E85377045909D26AC8BB77BCB", "step.step_CAD3BBF8311348E48A8B1ACCF9C995", "content.p_58F51958523F454CBCF79C5204D718" ] } ] }, "concept_fspm_proxy-16.10-en.json": { "title": "title_C6C19066655C418AB382A4F150615434", "title_C6C19066655C418AB382A4F150615434": "Policy Manager Proxy ", "shortdesc": "shortdesc_3C4D00AF748E4A9D8601AABD7968B5B1", "shortdesc_3C4D00AF748E4A9D8601AABD7968B5B1": "This section provides a brief introduction to installing and using Policy Manager Proxy in your managed network. ", "desc": [] }, "concept_fspm_proxy_overview-16.10-en.json": { "title": "title_46DFC15694A04DCD97CE78B9DDE96728", "title_46DFC15694A04DCD97CE78B9DDE96728": "Overview", "shortdesc": "shortdesc_CEC047E3556A4ACF9BF2C84706D6467B", "shortdesc_CEC047E3556A4ACF9BF2C84706D6467B": "Policy Manager Proxy reduces the load on networks to solve bandwidth problems in distributed installations of Client Security. ", "content.p_F4458531E28B419682F2309FC444C2": "Policy Manager Proxy offloads heavy traffic from the master server to optimize costly, high-latency traffic. For example, the proxy node gets the necessary installation packages for software updates from the master server, and the managed hosts then retrieve the packages from the proxy node. This means that the master server no longer needs to handle the distribution load.", "content.p_C4A2B970949742E1B0200AB72B1AC2": "Secure connections are used both between hosts and proxy, and proxy and master server. This means that the proxy node certificates must be pre-configured. Managed hosts connect to the configured proxy nodes using the Policy Manager Proxies table.", "content.p_66AD26A1EB32427ABAE16A71A47000": "Policy Manager Proxy can be configured to function as a reverse proxy. The proxy type defines if data requested by hosts, such as anti-virus definitions and software updates, is retrieved directly from the internet or from the configured upstream Policy Manager or other proxy. Forward proxy is used to decrease traffic between networks, for example a branch office and headquarters. Reverse proxy is used in environments where the proxy has no direct connection to the internet, for example. Reverse proxy is also used to decrease the load on the master server (or other forward proxy). By default the proxy is installed in forward mode.", "desc": [ "content.p_F4458531E28B419682F2309FC444C2", "content.p_C4A2B970949742E1B0200AB72B1AC2", "content.p_66AD26A1EB32427ABAE16A71A47000" ] }, "concept_when_to_use_fspmp-16.10-en.json": { "title": "title_D9C900AC8F9A44DC946628710D1E339F", "title_D9C900AC8F9A44DC946628710D1E339F": "When should you use Policy Manager Proxy?", "shortdesc": "shortdesc_7528B21B5AF647E480FC2FCF1F695265", "shortdesc_7528B21B5AF647E480FC2FCF1F695265": "You do not have to use Policy Manager Proxy in your managed network, but it can provide certain advantages. ", "content.p_F1D47B12F80D4466B4247A2BF99121": "The effects of Policy Manager Proxy are most obvious in large, vastly spread networks; for example, a large corporation with remote offices in different parts of the globe. The following figure is an example of a situation where Policy Manager Proxy is useful:
", "content.p_640439898B5D49BC9C5992E335F36E": "The benefits of using Policy Manager Proxy include:", "choice.choice_D53DF45C02B942DA98DD4265AAF722": "Less network bandwidth consumption. In particular, you should use Policy Manager Proxy when you have a group of workstations that are located far away from your Policy Manager Server.", "choice.choice_33B2D86B525F48509D83A1247A2069": "Quicker delivery of malware definition updates. This is especially true when you have a group of workstations separated from your Policy Manager Server by a slow connection.", "choice.choice_FDE9E56596CA4BD1826C6E616B15AC": "Less load on Policy Manager Server. In large-scale networks, Policy Manager Proxy can take care of the majority of requests from managed hosts.", "content.p_2186C1D8BE0C4FD8B2D93C80E21D81": "In addition to the scenario outlined above, if you are using Policy Manager in a network environment where it has no Internet connection, you can use Policy Manager Proxy to handle malware definition updates.", "desc": [ "content.p_F1D47B12F80D4466B4247A2BF99121", "content.p_640439898B5D49BC9C5992E335F36E", { "choices.ul_278D1DB93DF04E8F84BA8E6110969D": [ "choice.choice_D53DF45C02B942DA98DD4265AAF722", "choice.choice_33B2D86B525F48509D83A1247A2069", "choice.choice_FDE9E56596CA4BD1826C6E616B15AC" ] }, "content.p_2186C1D8BE0C4FD8B2D93C80E21D81" ] }, "task_setup_nextgen_pmp-16.10-en.json": { "title": "title_6F4F42BB31F84C11BF4A5C03554B7567", "title_6F4F42BB31F84C11BF4A5C03554B7567": "Setting up Policy Manager Proxy", "shortdesc": "shortdesc_4315FA3780EA48BAA379CFCF87EC256D", "shortdesc_4315FA3780EA48BAA379CFCF87EC256D": "Follow these steps to install Policy Manager Proxy for either Windows or Linux. ", "subchoice.choice_98812D7479FF4685969687D71C7DFE": "Download it from the master Policy Manager using your browser (https://<policy manager server IP/host name>:<https port number>);", "subchoice.choice_7CED942309C04904992C114F3C0ED6": "Export it from Policy Manager Console; or", "subchoice.choice_AC5AD12250124AB086BA49D98BF145": "Retrieve it from the host if the Policy Manager Proxy host is already running Server Security or Linux Security and is connected to the master Policy Manager.", "step.step_232B8EB7B2D040478359EE4F37D407": "Fetch admin.pub from the master Policy Manager:", "content.note_pdj_jw5_xbc": "Note: For available MSI parameters, see Supported MSI parameters.", "step.step_BAC718BD69F1433F8B0A641632B214": "Run the Policy Manager Proxy installer.", "step.step_D388A193EFC7499C8FC58DC9298E47": "When prompted, enter the path to the retrieved admin.pub file.", "content.p_B31B7E33B68646B1AA1C3366936644": "This is required for authorizing the enrollment of the TLS certificate.", "step.step_100388C5D4144C2A9582DF74AE31B7": "Enter the credentials for your administrator account on the master Policy Manager Server.", "content.note_97BEA0AF5B884A0BB1CED35C078783": "Note: By default the proxy is installed in forward proxy mode. To switch to reverse mode: ", "content.p_044A6E8A1CD4479BBC765DC0FEFFF5": "In forward mode, the proxy downloads database and Software Updater updates from the internet. In reverse mode, the proxy downloads the updates from the Policy Manager Server.", "content.p_5EE11F7E2D3B466E8328E3CAF5BE40": "You can check that the installation was successful by going to the Proxy welcome page (https://proxy_name:<HTTPS_port>, where <HTTPS_port> is the HTTPS port that you entered during installation) in your browser.", "step.step_8426A4C8DAD04729B955A9799585CB": "Complete the installation wizard.", "content.note_D3615858EFAA4E979A167344673071": "Note: The HTTP proxy that you configure is only used when Policy Manager Proxy is installed in forward proxy mode, and only for internet connections. Connections to Policy Manager (to communicate certificates, policies, and status, for example) are made directly to the Policy Manager Server. In reverse proxy mode, all connections are made directly to the Policy Manager Server.", "subsubchoice.choice_BE5E10FCE64D4EF4A7584D654254EB": "Linux: /var/opt/f-secure/fspms/data/fspms.proxy.config", "subsubchoice.choice_setup_nextgen_pmp_000010_47302": "Windows: C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\data\\fspms.proxy.config", "content.p_21FC398CEA254CF5BC5069C51BE4C9": "", "substep.substep_6DD059E429624C87A205E6C43F4CFF": "Edit the HTTP proxy configuration file.", "content.p_9DD8F8F3CE994290AB931B31A6FF0B": "http_proxy=[http://][user[:password]@]<address>[:port].", "content.note_D2483F8439074C8A9498EE09F7FBD4": "Note: Policy Manager only supports basic authentication for HTTP proxies.", "content.p_1AEDB71060B84EF7ADC918C58B469B": "Use percent encoding for any reserved URI characters in the user name or password. For example, if the password is ab%cd, you need to enter it as follows: http_proxy=http://user:ab%25cd@proxy.example.com:8080/.", "substep.substep_464490C7F40A4EFEB0A4E01CB2D55C": "Add the proxy as a new line, using the following format:", "substep.substep_372557A6C0684D848CE25D485913B5": "Restart the Policy Manager Server service.", "content.note_E4B76A19076546EA97502CA02EFB53": "Note: Policy Manager Proxy supports a single HTTP proxy configuration and there is no fallback to a direct internet connection when an HTTP proxy is defined.", "step.step_4E93CFEEB525459983433A90D5ABB0": "Specify the HTTP proxy configuration if the Policy Manager Proxy host does not have a direct internet connection.", "content.p_71E33D4666F4469D86A06C57CE1E6A": "You can now configure endpoints to use the proxy by specifying the priority order of proxy nodes in the Policy Manager Proxy table.", "desc": [ { "steps.steps_EE03D26F86A14C9A9BDFBAAC60D508": [ "step.step_232B8EB7B2D040478359EE4F37D407", { "subchoices.choices_387CB9E773EC4577A51C3FDA467253": [ "subchoice.choice_98812D7479FF4685969687D71C7DFE", "subchoice.choice_7CED942309C04904992C114F3C0ED6", "subchoice.choice_AC5AD12250124AB086BA49D98BF145" ] }, "step.step_BAC718BD69F1433F8B0A641632B214", "content.note_pdj_jw5_xbc", "step.step_D388A193EFC7499C8FC58DC9298E47", "step.step_100388C5D4144C2A9582DF74AE31B7", "content.p_B31B7E33B68646B1AA1C3366936644", "step.step_8426A4C8DAD04729B955A9799585CB", "content.note_97BEA0AF5B884A0BB1CED35C078783", "content.p_044A6E8A1CD4479BBC765DC0FEFFF5", "content.p_5EE11F7E2D3B466E8328E3CAF5BE40", "step.step_4E93CFEEB525459983433A90D5ABB0", "content.note_D3615858EFAA4E979A167344673071", { "substeps.substepsalpha_4DF685C829BA4EA9AC791F2A76F644": [ "substep.substep_6DD059E429624C87A205E6C43F4CFF", "content.p_21FC398CEA254CF5BC5069C51BE4C9", { "subsubchoices.ul_4739B149D9C34405984C3F40A7DE23": [ "subsubchoice.choice_BE5E10FCE64D4EF4A7584D654254EB", "subsubchoice.choice_setup_nextgen_pmp_000010_47302" ] }, "substep.substep_464490C7F40A4EFEB0A4E01CB2D55C", "content.p_9DD8F8F3CE994290AB931B31A6FF0B", "content.note_D2483F8439074C8A9498EE09F7FBD4", "content.p_1AEDB71060B84EF7ADC918C58B469B", "substep.substep_372557A6C0684D848CE25D485913B5" ] }, "content.note_E4B76A19076546EA97502CA02EFB53" ] }, "content.p_71E33D4666F4469D86A06C57CE1E6A" ], "related": [ "supported_msi_parameters_0-16.10-en" ] }, "task_set_up_pmp_silent_mode-16.10-en.json": { "title": "title_45154CC9D09B4B0395C92EC224AA3FD5", "title_45154CC9D09B4B0395C92EC224AA3FD5": "Setting up Policy Manager Proxy in silent mode", "shortdesc": "shortdesc_45AFFF10320D4FBDA5E5CECC8BED3362", "shortdesc_45AFFF10320D4FBDA5E5CECC8BED3362": "If you want to install Policy Manager Proxy without any prompts during installation, you need to configure the required details separately for the installation package. ", "content.p_set_up_pmp_silent_mode_0001CD3": "", "content.note_s52_mzb_ybc": "Note: Silent clean installation is not supported for Windows.", "step.step_D6EC27D02E7746C3BEB755E091EC00": "Open Policy Manager Console and create a temporary user with full access permissions to the root domain.", "step.step_6B325FDC57204C0BA96E2C1A73767E": "Download the Policy Manager Proxy installer.", "subchoice.choice_98812D7479FF4685969687D71C7DFE": "Download it from the master Policy Manager using your browser (https://<policy manager server IP/host name>:<https port number>);", "subchoice.choice_7CED942309C04904992C114F3C0ED6": "Export it from Policy Manager Console; or", "subchoice.choice_AC5AD12250124AB086BA49D98BF145": "Retrieve it from the host if the Policy Manager Proxy host is already running Server Security or Linux Security and is connected to the master Policy Manager.", "step.step_9D958D1F3E13426C85D49A57D8D452": "Fetch admin.pub from the master Policy Manager:", "content.p_6984050C224E4E00A383B033E2D5F6": "Linux (Red Hat, SuSE):", "content.p_538CD8BBBCC7443D980F38279EB379": "yum -y update libstdc++
rpm -i wspmp-<installer_version>-1.x86_64.rpm
/opt/f-secure/fspms/bin/fspms-config <<PMPCONFIG
PM address
PM port (usually 443)
./admin.pub
PMP http port to be used (usually 80)
PMP httpS port to be used (usually 443)
PM admin username (for the temporary user that you created)
PM admin password (for the temporary user that you created)
PMPCONFIG", "substep.substep_A438DF2E8BEC4A23BA5123C9C6D42D": "Create a shell script named, for example, pmp.sh with the following content:", "content.p_26FF014E44D7413A92FCCB31C6475B": "echo 'additional_java_args=\"-DreverseProxy=true\"' >> /etc/opt/f-secure/fspms/fspms.conf", "substep.substep_480A7C65A6384F87983EEA2D0B5DC5": "If you want to install Policy Manager Proxy in reverse mode, add the following command to pmp.sh between the installation and fspms-config commands:", "content.p_99B85B26CB17492685B3391B8B4CCF": "Linux (Debian, Ubuntu):", "content.p_650E51C7A1FB48BAB8D778870EA2B9": "apt -y upgrade libstdc++6
dpkg -i wspmp_<installer_version>_amd64.deb
/opt/f-secure/fspms/bin/fspms-config <<PMPCONFIG
PM address
PM port (usually 443)
./admin.pub
PMP http port to be used (usually 80)
PMP httpS port to be used (usually 443)
PM admin username (for the temporary user that you created)
PM admin password (for the temporary user that you created)
PMPCONFIG", "substep.substep_F4BEC6F1838B40F1AD354E2F2FDF5F": "Create a shell script named, for example, pmp.sh with the following content:", "content.p_DEA4AEF5547E457FB7E3C56C643652": "echo 'additional_java_args=\"-DreverseProxy=true\"' >> /etc/opt/f-secure/fspms/fspms.conf", "substep.substep_3AE1576551534756B3B65BFFA9EB95": "If you want to install Policy Manager Proxy in reverse mode, add the following command to pmp.sh between the installation and fspms-config commands:", "content.p_61FE7C6DD5074780BFCDCD9467FA6D": "The Policy Manager Proxy distributable package is now ready.", "step.step_C3C46A911FF242D49A179166E6D4A0": "Customize the installation package.", "step.step_5FFF1DE7D83E42CDB5BB822D458F7C": "Transfer the rpm package, admin.pub key, and pmp.sh script. Remember to set the execute bit for the .sh file.", "step.step_14ABF85525F442DCA1516FC38740DC": "Install the product by running the ./pmp.sh script.", "step.step_16AFE676B89E41A5A67994830322A3": "When the installation is complete on each target host, remove the temporary user that you created to avoid credentials being shared in plain text format.", "desc": [ "content.note_s52_mzb_ybc", { "steps.steps_19052DB7840A400EA5C8D53711B510": [ "step.step_D6EC27D02E7746C3BEB755E091EC00", "step.step_6B325FDC57204C0BA96E2C1A73767E", "step.step_9D958D1F3E13426C85D49A57D8D452", { "subchoices.choices_387CB9E773EC4577A51C3FDA467253": [ "subchoice.choice_98812D7479FF4685969687D71C7DFE", "subchoice.choice_7CED942309C04904992C114F3C0ED6", "subchoice.choice_AC5AD12250124AB086BA49D98BF145" ] }, "step.step_C3C46A911FF242D49A179166E6D4A0", "content.p_6984050C224E4E00A383B033E2D5F6", { "substeps.substepsalpha_4233B615401942BCBF3940D73777E0": [ "substep.substep_A438DF2E8BEC4A23BA5123C9C6D42D", "content.p_538CD8BBBCC7443D980F38279EB379", "substep.substep_480A7C65A6384F87983EEA2D0B5DC5", "content.p_26FF014E44D7413A92FCCB31C6475B" ] }, "content.p_99B85B26CB17492685B3391B8B4CCF", { "substeps.substepsalpha_238447486C6C436B8A2D2139F9509B": [ "substep.substep_F4BEC6F1838B40F1AD354E2F2FDF5F", "content.p_650E51C7A1FB48BAB8D778870EA2B9", "substep.substep_3AE1576551534756B3B65BFFA9EB95", "content.p_DEA4AEF5547E457FB7E3C56C643652" ] }, "content.p_61FE7C6DD5074780BFCDCD9467FA6D", "step.step_5FFF1DE7D83E42CDB5BB822D458F7C", "step.step_14ABF85525F442DCA1516FC38740DC", "step.step_16AFE676B89E41A5A67994830322A3" ] } ] }, "upgrading_policy_manager_proxy_in_silent_mode-16.10-en.json": { "title": "title_upgrading_pmp_in_silent__0541A", "title_upgrading_pmp_in_silent__0541A": "Upgrading Policy Manager Proxy in silent mode", "shortdesc": "shortdesc_upgrading_pmp_in_silent__0C49D", "shortdesc_upgrading_pmp_in_silent__0C49D": "For upgrading the product, you do not have to configure Policy Manager Proxy or create certificates, you only need to upgrade the installation. ", "content.p_upgrading_pmp_in_silent__07D82": "Follow these steps:", "substep.step_9303CADB04AB4142BB01390B033DE7": "Download the Policy Manager Proxy installer.", "substep.step_5FB5348678164022A709145C2D760C": "Run the msiexec with the /quiet option: msiexec /i wspmp-windows-msi-<installer_version>.msi /quiet", "choice.choice_CD74C074CC08455F9D1E06DB4D0886": "Windows:", "substep.step_F4DD07B9007F41BD8A3A8A76CD5829": "Download the Policy Manager Proxy installer.", "substep.step_C327402638D24212A57D9E198DD759": "Run the following command: rpm -U wspmp-<installer_version>-1.x86_64.rpm", "choice.choice_CCAFF5FF30AE4B79BD588E4F9238FC": "Linux (Red Hat, SuSE):", "substep.step_31660F9903644FEB85266EAD4C6B7D": "Download the Policy Manager Proxy installer.", "substep.step_A6B35F4E8A4C481797240BCF0E840C": "Run the following command: dpkg -i wspmp_<installer_version>_amd64.deb", "choice.choice_533DC710E5544C99B945220557CC04": "Linux (Debian, Ubuntu):", "desc": [ "content.p_upgrading_pmp_in_silent__07D82", { "choices.ul_68A4537ABAFD457589DA3C251AD293": [ "choice.choice_CD74C074CC08455F9D1E06DB4D0886", { "substeps.olalpha_96B55487A6DE486E8941E03835D9B6": [ "substep.step_9303CADB04AB4142BB01390B033DE7", "substep.step_5FB5348678164022A709145C2D760C" ] }, "choice.choice_CCAFF5FF30AE4B79BD588E4F9238FC", { "substeps.olalpha_4FB2757BB0C4485BA826EC6460F159": [ "substep.step_F4DD07B9007F41BD8A3A8A76CD5829", "substep.step_C327402638D24212A57D9E198DD759" ] }, "choice.choice_533DC710E5544C99B945220557CC04", { "substeps.olalpha_7AE594DD05FD42B6AFF2024F5297C1": [ "substep.step_31660F9903644FEB85266EAD4C6B7D", "substep.step_A6B35F4E8A4C481797240BCF0E840C" ] } ] } ] }, "concept_centralized_management-16.10-en.json": { "title": "title_C5FD9E85161C4DCA913C7C1798639516", "title_C5FD9E85161C4DCA913C7C1798639516": "Centralized management of Policy Manager Proxy", "shortdesc": "shortdesc_BCB2995D1FE540CD81C2890E5E9B24FA", "shortdesc_BCB2995D1FE540CD81C2890E5E9B24FA": "Policy Manager Proxy instances are shown in the Policy Manager domain tree as ordinary hosts with a dedicated icon to distinguish them. ", "content.p_3A1DAA88110C472188DCB2CE36ABFB": "The installed proxies are included alongside other products in the Policy Manager tabs and reports. Installed proxies report their status to the server, and in addition to the basic host properties, the following information is delivered:", "choice.choice_EF1958DE61AA44A6A161E20F8FDEF2": "Malware and Software Updater definitions distributed to connected hosts", "choice.choice_13A787F7B992416D9777771C59C104": "Amount of free disk space", "choice.choice_EDB458200F734DAC8B656AB29E8815": "Used disk space by data type", "choice.choice_B46D090F657241368B847C6883F7C2": "Statistics of proxied traffic", "content.p_6E58B0F1BA90420DA7F5C6DB55B606": "Policy Manager Proxy receives the following policy settings from Policy Manager Server:", "choice.choice_4437BD9FE92D4C9E951CC5487C472A": "Communication polling interval", "choice.choice_7D6741A768AB436FB75E026104EE13": "Maximum disk space allocated to caching Software Updater updates", "content.p_CA6253775D124520A0E5C1725FC99B": "Installed proxies generate host alerts if the malware or Software Updater definitions are out of date.", "content.p_EC7329CBC0354F76A43D41C5B820DD": "", "content.note_646D63A2B9804C958E6332D997DCCE": "Note: If Server Security is installed on the same machine as Policy Manager Proxy, the two products are shown as separate hosts in the domain tree so that they can be organized differently.", "desc": [ "content.p_3A1DAA88110C472188DCB2CE36ABFB", { "choices.ul_11F7B14DC96B493D931CC35414673D": [ "choice.choice_EF1958DE61AA44A6A161E20F8FDEF2", "choice.choice_13A787F7B992416D9777771C59C104", "choice.choice_EDB458200F734DAC8B656AB29E8815", "choice.choice_B46D090F657241368B847C6883F7C2" ] }, "content.p_6E58B0F1BA90420DA7F5C6DB55B606", { "choices.ul_658AD0DA9C354AB5A2A01CCB2D9408": [ "choice.choice_4437BD9FE92D4C9E951CC5487C472A", "choice.choice_7D6741A768AB436FB75E026104EE13" ] }, "content.p_CA6253775D124520A0E5C1725FC99B", "content.note_646D63A2B9804C958E6332D997DCCE" ] }, "software_distribution-16.10-en.json": { "title": "title_08B8E25BBCA0459FBFDE5FCB4D0FB910", "title_08B8E25BBCA0459FBFDE5FCB4D0FB910": "Software distribution", "shortdesc": "shortdesc_DC9847D2190242C1BF98E9871B0544F8", "shortdesc_DC9847D2190242C1BF98E9871B0544F8": "Policy Manager offers many ways to install and update managed software. ", "content.p_5C80874AF13843279906B74758722C": "The Installation tab has shortcuts to all the installation features.", "desc": [ "content.p_5C80874AF13843279906B74758722C" ] }, "concept_push_installations-16.10-en.json": { "title": "title_B56400C69A424657969336E80C884B39", "title_B56400C69A424657969336E80C884B39": "Push installations", "shortdesc": "shortdesc_41BC2CC2CF544862A9B830E4A488D67A", "shortdesc_41BC2CC2CF544862A9B830E4A488D67A": "This section describes how to push installation packages to hosts. ", "content.p_D28D6ABC7E0546F78D81A72D5D865F": "", "content.note_F9694BC368124668A32CC1A913C2F2": "Note: Push installation is not supported for Mac clients. The Client Security for Mac installation package is distributed using JAR archives, which administrators can configure with the console's Remote installation wizard and export to the hosts for installation.", "content.p_5F46199D9ECD431BA576D67A871497": "The only difference between the Autodiscover Windows hosts and the Push install to Windows hosts features is how the target hosts are selected: Autodiscover browses Windows domains or fetches information from an Active Directory server to allow the user to select the target hosts from a list, push install allows you to define the target hosts directly with IP addresses or host names. After the target hosts are selected, both push installation operations proceed the same way.", "content.note_C1FF6F640D2D471E88C5D1F309B6D9": "Note: Before you start to install WithSecure products on hosts, you should check that any firewalls do not block access to the target computer. Policy Manager Console uses TCP port 135 for remote procedure call (RPC) access and port 445 for network and file sharing access. The target computer and Policy Manager Console both use Policy Manager Server's host port to report the installation result.", "content.p_E2973E3D3C814B1391F150DF5F0943": "The push installation functionality is part of Policy Manager Console. This means that you can use push installations if you have Policy Manager Server running on a Linux machine and Policy Manager Console installed on a Windows machine. If you install Policy Manager Console on a Linux machine, push installation is not available.", "content.p_8C64F5337BD34743BE1B24BE9ECAE1": "Push installation works as follows:", "step.step_4E9AA043FAD04DB386C704ACE2EC82": "Policy Manager Console uploads the installation package to the remote host's admin (ADMIN$) share. This requires that file sharing is enabled on the remote host.", "step.step_C53F8B2D8844475CA9588FA4B655D6": "Policy Manager Console uses the remote procedure call (RPC) service to install and start the push installation service on the target computer with the appropriate parameters. The purpose of this service is to start the installer and to communicate the installation results to Policy Manager.", "step.step_2DD6BAD90D3C405AA9090D4915E16B": "If the installation cannot start, this is communicated directly to Policy Manager Console.", "step.step_D2365D26C3D045959E6EA86932099C": "When the installation is finished, the results are sent to Policy Manager Server via HTTP. Policy Manager Console polls the server for the results and reports them.", "desc": [ "content.note_F9694BC368124668A32CC1A913C2F2", "content.p_5F46199D9ECD431BA576D67A871497", "content.note_C1FF6F640D2D471E88C5D1F309B6D9", "content.p_E2973E3D3C814B1391F150DF5F0943", "content.p_8C64F5337BD34743BE1B24BE9ECAE1", { "steps.ol_3D8A3F483AAE419D99A07C71E36C49": [ "step.step_4E9AA043FAD04DB386C704ACE2EC82", "step.step_C53F8B2D8844475CA9588FA4B655D6", "step.step_2DD6BAD90D3C405AA9090D4915E16B", "step.step_D2365D26C3D045959E6EA86932099C" ] } ] }, "task_autodiscover_windows_hosts-16.10-en.json": { "title": "title_E3209E501D344F8EB680AFB11F51BCF0", "title_E3209E501D344F8EB680AFB11F51BCF0": "Autodiscover Windows hosts", "shortdesc": "shortdesc_51224123267741DBB79FA487CF391AE5", "shortdesc_51224123267741DBB79FA487CF391AE5": "Target hosts within Windows domains can be selected with the Autodiscover feature. ", "content.p_B7128634FACE4B87AE8E841DAA0BE0": "To select target hosts:", "step.step_BC069EFE0B2E4A8E8DE28200281B80": "Select the target domain.", "content.p_DD5F5FB2B04D46D1A4A973E9ABC924": "Alternatively, click the following icon on the toolbar:
", "step.step_9A63480C1ADE4786B3537413761E96": "Select Edit > Autodiscover Windows hosts from the menu.", "step.step_B757D51EC6A345DCA95E2C1842EB12": "Select NT Domains.", "content.p_9BD9A91BAB67451387CCF3A111D763": "The host list is updated only when you click Refresh. Otherwise cached information is displayed for performance reasons. Before clicking Refresh, you can change the following options:", "subchoice.choice_52CAF749942E47598DD69F6A22CB16": "Hide already managed hosts. Select this check box to show only those hosts, which do not have WithSecure applications installed.", "subchoice.choice_46D1FA0C26BA415395022AC76D6587": "Resolve hosts with all details (slower). With this selection, all details about the hosts are shown, such as the versions of the operating system and Management Agent.", "subchoice.choice_2C4C87DDF09744C28409F63E3FD2ED": "Resolve host names and comments only (quicker). If all hosts are not shown in the detailed view or it takes too much time to retrieve the list, this selection can be used. Note, that sometimes it may take a while before Master browser can see a new host recently installed in the network.", "step.step_B2324BC367F04CB59EEDB34511D2BF": "From the domain list, select one of the domains and click Refresh.", "content.p_DF72EBC7A36449DBB1784EA7C8EAD4": "Press the space bar to check selected host(s). Several hosts can be easily selected by holding down the shift key and doing one of the following:", "subchoice.choice_FA31DC70B1A74891BCFF5BAF2E05B8": "clicking the mouse on multiple host rows,", "subchoice.choice_931584C91D274309A8DFA787E069E7": "dragging the mouse over several host rows,", "subchoice.choice_E1655AC726A94EC8A5CDAC88C9D41E": "using the up or down arrow keys.", "content.p_C29F5792E8784E4195A3D7A8D13A01": "Alternatively, you can right-click your mouse. Use the host list’s context menu to select:", "cell.choptionhd_autodiscover_windows_hos_0F655": "Option", "cell.chdeschd_autodiscover_windows_hos_003F1": "Description", "cell.choption_autodiscover_windows_hos_021B4": "Check", "cell.chdesc_autodiscover_windows_hos_088F9": "checkmarks the selected host(s) (same as pressing the space bar).", "cell.choption_autodiscover_windows_hos_000EE": "Uncheck", "cell.chdesc_autodiscover_windows_hos_0D43F": "removes the checkmark from the selected host(s) (same as pressing the space bar).", "cell.choption_autodiscover_windows_hos_023B2": "Check all", "cell.chdesc_autodiscover_windows_hos_07A52": "checkmarks all hosts in the selected Windows domain.", "cell.choption_autodiscover_windows_hos_02345": "Uncheck all", "cell.chdesc_autodiscover_windows_hos_0E547": "removes the checkmark from all hosts in the selected Windows domain.", "step.step_70BF57D03E4E4305AE60C92D6BAF0D": "Select the hosts to be installed.", "step.step_6B10F1A34B014DEEAAECE0DD863E8E": "Click Install to continue.", "content.p_37DED6614E264AD59E8CA6934056D7": "After you have selected your target hosts, you still need to push-install the applications to hosts.", "desc": [ "content.p_B7128634FACE4B87AE8E841DAA0BE0", { "steps.steps_18BC89ADE57E41E486269375003197": [ "step.step_BC069EFE0B2E4A8E8DE28200281B80", "step.step_9A63480C1ADE4786B3537413761E96", "content.p_DD5F5FB2B04D46D1A4A973E9ABC924", "step.step_B757D51EC6A345DCA95E2C1842EB12", "step.step_B2324BC367F04CB59EEDB34511D2BF", "content.p_9BD9A91BAB67451387CCF3A111D763", { "subchoices.choices_C1599E88F7E74121905CBEAA968E69": [ "subchoice.choice_52CAF749942E47598DD69F6A22CB16", "subchoice.choice_46D1FA0C26BA415395022AC76D6587", "subchoice.choice_2C4C87DDF09744C28409F63E3FD2ED" ] }, "step.step_70BF57D03E4E4305AE60C92D6BAF0D", "content.p_DF72EBC7A36449DBB1784EA7C8EAD4", { "subchoices.choices_05163A5FE44340CEAAB7A2AB2DBB58": [ "subchoice.choice_FA31DC70B1A74891BCFF5BAF2E05B8", "subchoice.choice_931584C91D274309A8DFA787E069E7", "subchoice.choice_E1655AC726A94EC8A5CDAC88C9D41E" ] }, "content.p_C29F5792E8784E4195A3D7A8D13A01", { "table.table_2D7419B3710041E7AF1FB11C0DD131": [ { "thead.chhead_autodiscover_windows_hos_03394": [ "cell.choptionhd_autodiscover_windows_hos_0F655", "cell.chdeschd_autodiscover_windows_hos_003F1" ] }, { "row.choice_2629D34160474BE0BB08C303800254": [ "cell.choption_autodiscover_windows_hos_021B4", "cell.chdesc_autodiscover_windows_hos_088F9" ] }, { "row.choice_81DEFE3050F0401582EE23845B9D79": [ "cell.choption_autodiscover_windows_hos_000EE", "cell.chdesc_autodiscover_windows_hos_0D43F" ] }, { "row.choice_B620554238D344AE96A90F10CCBDFD": [ "cell.choption_autodiscover_windows_hos_023B2", "cell.chdesc_autodiscover_windows_hos_07A52" ] }, { "row.choice_B81C8845EB3E45769DA159201CA7C4": [ "cell.choption_autodiscover_windows_hos_02345", "cell.chdesc_autodiscover_windows_hos_0E547" ] } ] }, "step.step_6B10F1A34B014DEEAAECE0DD863E8E" ] }, "content.p_37DED6614E264AD59E8CA6934056D7" ] }, "task_autodiscover_ad_hosts-16.10-en.json": { "title": "title_1F203F6E9F1C44939E90B94E572E5422", "title_1F203F6E9F1C44939E90B94E572E5422": "Autodiscover hosts from an Active Directory server", "shortdesc": "shortdesc_A3D263D54D024A4BA737408C99B21DA3", "shortdesc_A3D263D54D024A4BA737408C99B21DA3": "You can also use the Autodiscover feature to select hosts from an Active Directory server. ", "content.p_BE1F017A8F1C453C81AB2B821FEBA0": "To select target hosts:", "step.step_548EB9ABB1324ACEA8FF12DEC6EBD2": "Select the target domain.", "content.p_DD5F5FB2B04D46D1A4A973E9ABC924": "Alternatively, click the following icon on the toolbar:
", "step.step_9A63480C1ADE4786B3537413761E96": "Select Edit > Autodiscover Windows hosts from the menu.", "step.step_40E463367F6348CD9F7A18EC87BEC2": "Select Active Directory.", "step.step_8763A33D9BE44D17A99740689EA80F": "Enter the address for the domain server and your user name and password.", "content.p_1A092AF9A88D450E9295E5559D7AEF": "When the list of hosts has been fetched, select Hide already managed hosts if you only want to see hosts that do not have any managed software installed yet.", "step.step_83E3F4E36F0F42A28C1E9F6B2761DB": "Click List hosts.", "content.p_3E17859DDE8748F88F3E9941CB5F6D": "If you want to select all the listed hosts, click Check all.", "step.step_A8C557C22AE24F22B005F259326BED": "Select the hosts to which you want to install managed software.", "step.step_7C3FDFFF20A8402287D8772F5E8859": "Click Install to continue.", "content.p_37DED6614E264AD59E8CA6934056D7": "After you have selected your target hosts, you still need to push-install the applications to hosts.", "desc": [ "content.p_BE1F017A8F1C453C81AB2B821FEBA0", { "steps.steps_89D324DDA7EC4921B3879EC88569A3": [ "step.step_548EB9ABB1324ACEA8FF12DEC6EBD2", "step.step_9A63480C1ADE4786B3537413761E96", "content.p_DD5F5FB2B04D46D1A4A973E9ABC924", "step.step_40E463367F6348CD9F7A18EC87BEC2", "step.step_8763A33D9BE44D17A99740689EA80F", "step.step_83E3F4E36F0F42A28C1E9F6B2761DB", "content.p_1A092AF9A88D450E9295E5559D7AEF", "step.step_A8C557C22AE24F22B005F259326BED", "content.p_3E17859DDE8748F88F3E9941CB5F6D", "step.step_7C3FDFFF20A8402287D8772F5E8859" ] }, "content.p_37DED6614E264AD59E8CA6934056D7" ] }, "task_push_install_windows_hosts-16.10-en.json": { "title": "title_4B6AA00CCF6540B7B7810CEF93D06420", "title_4B6AA00CCF6540B7B7810CEF93D06420": "Push install to Windows hosts", "shortdesc": "shortdesc_2C8286E4393E4C4B889B846C4F1FFF63", "shortdesc_2C8286E4393E4C4B889B846C4F1FFF63": "You can also select target hosts with the Push install to Windows hosts feature. ", "content.p_1B4F720149104874A2BDC92C2DB0C7": "To select target hosts:", "step.step_9543743EA65E4A0484A4CF124348DA": "Select the target domain.", "content.p_6C6C8749ED934341B0E248DE4FF995": "Alternatively, click the following icon on the toolbar:
", "step.step_6DA600BCC7B04C4CB3A0F9DFD64FE1": "Select Edit > Push install to Windows hosts from the menu.", "content.p_AE31B7BA02974498B886ACCBF3D4D6": "You can click Browse to check the Management Agent version(s) on the host(s).", "step.step_4D9AA7F0CC5A416E94D441741F5932": "Enter the target host names of those hosts to which you want to push install, and click Next to continue.", "content.p_5067AF6F865241109702BD3796DD24": "After you have selected your target hosts, you still need to push-install the applications to hosts.", "desc": [ "content.p_1B4F720149104874A2BDC92C2DB0C7", { "steps.steps_0E3DFC4396FE4533B03AD57CECC0F4": [ "step.step_9543743EA65E4A0484A4CF124348DA", "step.step_6DA600BCC7B04C4CB3A0F9DFD64FE1", "content.p_6C6C8749ED934341B0E248DE4FF995", "step.step_4D9AA7F0CC5A416E94D441741F5932", "content.p_AE31B7BA02974498B886ACCBF3D4D6" ] }, "content.p_5067AF6F865241109702BD3796DD24" ] }, "task_push_installation_after_target_host_selection-16.10-en.json": { "title": "title_203B276F66604BBF99DCC16EEC79BD7E", "title_203B276F66604BBF99DCC16EEC79BD7E": "Push install after target host selection", "shortdesc": "shortdesc_47488DF9CDEC4204B16247D85DFFC9F3", "shortdesc_47488DF9CDEC4204B16247D85DFFC9F3": "After selecting the target hosts, you have to push install the installation packages. ", "content.p_CCA3B52C59CA4520B0D5851B0FAA55": "To push install the installation package(s) on the selected target hosts:", "content.p_5CD35F51B4334319A82CB645763CC0": "You can import new installation packages on this page if necessary. The Forced reinstallation option is always turned on in all installation packages, so the application will be reinstalled if the host already has the same version number of the application installed.", "step.step_9F83905F2732410DAF7C2649EDC833": "Select the installation package and click Next to continue.", "step.step_6696D864A7E04DFBBE2782F1F978E8": "Choose to accept the default policy, or specify which host or domain policy should be used as an anonymous policy, and click Next to continue.", "content.note_0A395AE0363642C7B1CAD77F86AD43": "Note: Push installation requires administrator rights for the target machine during the installation. If the account you entered does not have administrator rights on one of the remote hosts, an Access denied error message will be indicated for that host, while installation will continue on the other hosts.", "content.p_C88D9C43090C45749A70CA5F0883AB": "When you select This account, you will use the security rights of the account currently logged on. Use this option in the following cases:", "subchoice.choice_54B9F9E959EE44B49E4749E55C5D2C": "You are already logged in as domain administrator; or", "subchoice.choice_6136E887B74A4F54BFAFC9FBF50A96": "You are logged in as the local administrator with a password that matches the local administrator’s password on the target host.", "content.p_30F9154EF93B466E8F63E379DE8C60": "Another user: enter account and password. The administrator can enter any proper domain administrator account and password to easily complete the remote installation on selected hosts.", "subchoice.choice_AE6B91AC0D13439684466BB50C79E7": "When completing the installation to the trusted and non-trusted domains with a domain account, make sure you enter the account in the format DOMAIN\\ACCOUNT.", "subchoice.choice_4803A4354AD440419C1884E7B3F573": "When using a local administrator account, use the format ACCOUNT. Do not enter the host name as part of the account, otherwise the account is accepted only by the host in question.", "content.note_5A32DEA65FA74F21A73D71DD789EEC": "Note: When installing, if the administrator machine has open network connections to the target machine with another user account, the NT credential conflict error message 1219 appears. The solution in this case is to close the active connections before using the Push installation feature.", "step.step_44AA6A978B734293BA561AFC27E18F": "Choose the user account and password for the push installation by selecting either This account (the current account) or Another user.", "step.step_2F68D0B6B24942A78FF4E1F86C9BAD": "Review the installation summary.", "content.p_4134A97657A04219BB4DD59145720C": "The Remote installation wizard will guide you through a series of dialog boxes in which you must answer some questions for the installation to take place. In the final dialog box, click Finish, and go to the next step.", "content.p_B4D4DBB0AF2342F18213455C675C37": "Policy Manager installs Management Agent and the selected products on the hosts. During this process, the Status line will display the procedure in process. You can click Cancel at any time to stop the installation.", "step.step_0579606F8FD64D25B768542FE27BD8": "To start the Remote installation wizard, click Start.", "step.step_8397C6D52A164403B8B87E776C0D1F": "When the Status line displays finished, the process has finished and you can select in which domain the new hosts should be placed using the import settings.", "content.p_6E1E10DDC68447F3870B5786B38BE2": "Policy Manager Console will place the new hosts in the domain that you selected, unless you specified another domain in this dialog. You can also choose not to place the hosts to any domain automatically. The new hosts will send autoregs and the hosts can be imported that way.", "content.p_FB309F8AD8EE4E369875619A46D693": "After a few minutes, the products that were installed will be listed.", "step.step_D93B6C729BE146F8BDDE47D4530D16": "Click Finish.", "step.step_843FC8EA3A7B4915A2747424143D65": "To see this list, select the Installation tab (alternatively select the top domain on the Policy domain tree).", "desc": [ "content.p_CCA3B52C59CA4520B0D5851B0FAA55", { "steps.steps_B6DFF86AB8214D17901351F4186DB0": [ "step.step_9F83905F2732410DAF7C2649EDC833", "content.p_5CD35F51B4334319A82CB645763CC0", "step.step_6696D864A7E04DFBBE2782F1F978E8", "step.step_44AA6A978B734293BA561AFC27E18F", "content.note_0A395AE0363642C7B1CAD77F86AD43", "content.p_C88D9C43090C45749A70CA5F0883AB", { "subchoices.choices_9228BCD7B9374DFCB15DC35177AE60": [ "subchoice.choice_54B9F9E959EE44B49E4749E55C5D2C", "subchoice.choice_6136E887B74A4F54BFAFC9FBF50A96" ] }, "content.p_30F9154EF93B466E8F63E379DE8C60", { "subchoices.choices_5F79A215DE444B77A216F7FFD44D25": [ "subchoice.choice_AE6B91AC0D13439684466BB50C79E7", "subchoice.choice_4803A4354AD440419C1884E7B3F573" ] }, "content.note_5A32DEA65FA74F21A73D71DD789EEC", "step.step_2F68D0B6B24942A78FF4E1F86C9BAD", "step.step_0579606F8FD64D25B768542FE27BD8", "content.p_4134A97657A04219BB4DD59145720C", "content.p_B4D4DBB0AF2342F18213455C675C37", "step.step_8397C6D52A164403B8B87E776C0D1F", "step.step_D93B6C729BE146F8BDDE47D4530D16", "content.p_6E1E10DDC68447F3870B5786B38BE2", "content.p_FB309F8AD8EE4E369875619A46D693", "step.step_843FC8EA3A7B4915A2747424143D65" ] } ] }, "concept_policy_based_installation-16.10-en.json": { "title": "title_8180EA95C8C4475DA0B2A13914B0AFC3", "title_8180EA95C8C4475DA0B2A13914B0AFC3": "Policy-based installation", "shortdesc": "shortdesc_BE09E9DE9E75482F8F98A2113C009886", "shortdesc_BE09E9DE9E75482F8F98A2113C009886": "Installation operations on hosts that have Management Agent installed can be centrally managed through the policies in Policy Manager.", "content.p_7EDEE2D381DE408FB14E02B3C62073": "Policy-based installation creates and stores the operation-specific installation package, and writes an installation task to the base policy files (thus, policy distribution is required to start installations). Both base policy files and the installation package are signed by the management key-pair so that only genuine information is accepted by the hosts.", "content.p_42CE9C28A7B646F8AE4E89FE56B874": "Management Agent on the hosts fetches the new policies from Policy Manager Server and discovers the installation task. Management Agent fetches the installation package specified in the task parameters from the server and starts the installation program.", "content.p_60DAA67A4FA14FA6B6E2ABA52F597B": "When installation is complete, Management Agent sends the result of the installation operation in an incremental policy file to the server. The results of the new status information are then shown in Policy Manager Console .", "content.p_81778B59696645FAA1190FD03D7662": "Uninstallation uses these same delivery mechanisms. The results of the uninstallation will not be reported.", "desc": [ "content.p_7EDEE2D381DE408FB14E02B3C62073", "content.p_42CE9C28A7B646F8AE4E89FE56B874", "content.p_60DAA67A4FA14FA6B6E2ABA52F597B", "content.p_81778B59696645FAA1190FD03D7662" ] }, "task_using_installation_editor-16.10-en.json": { "title": "title_985B9F20602042CB84D6F5DCCDFFB58F", "title_985B9F20602042CB84D6F5DCCDFFB58F": "Using policy-based installation", "shortdesc": "shortdesc_1C543A7E693C446897D0D91E83D09351", "shortdesc_1C543A7E693C446897D0D91E83D09351": "Policy-based installation must be used on hosts that already have Management Agent installed.", "content.p_05462AA4EF6E45B096C592E6C809C6": "You can use policy-based installation to perform installation operations on a selected domain or selected hosts. In addition to installing products, you can perform hotfix, upgrade, repair and uninstallation operations.", "content.p_7BE553DF8DDD4107A5E908C88E6995": "When the installation operation is completed successfully, you can leave the operation on the Policy-based installations table, so that the same installation operation will automatically be applied to any new hosts that are added to the corresponding domain.", "content.p_3623CD075652442AAEAF927BE7DFE4": "To use policy-based installation:", "content.p_4E7885B0075A4BB0A9D4B704EB9D03": "On the Installation tab, Policy-based installations table shows the status of any current installation operations, and the Installed products summary table lists the products that are currently installed on managed hosts.", "step.step_2B9D4DC2A0C443C4A84DC89D77E7CC": "Open the Installation tab.", "step.step_E3EE47BE93864FD8BC1E1BCB22DE11": "Click Install under the Policy-based installations table to start the remote installation wizard.", "content.p_3736C3CB38C7439CBD484D201917C0": "The information entered in the remote installation wizard is used to prepare the customized package specific for this installation operation. The installation package will be then distributed to the selected domain or hosts once the policy is distributed.", "content.p_134E8FAB016849149173EC7DDC1EAE": "Once the remote installation wizard is complete, the installation operation and status will appear on the Policy-based installations table as a new row.", "step.step_9304C66ED5224520B460EB8957712E": "Complete the remote installation wizard with the necessary details.", "content.p_6FA42F88C5DA4427828F720B094DA7": "Once the installation operation is complete, the product name, version and number of hosts running the product are shown on the Installed products summary table.", "content.note_0C60DCC9BDCF401B988F52FD20D79E": "Note: It may take a considerable length of time to carry out an installation operation. This may happen if an affected host is not currently connected to the network, or if the active installation operation requires a user to restart his host before the installation is completed. If the hosts are connected to the network and they send and receive policy files correctly, then there could be a real problem. The host may not be correctly acknowledging the installation operation. It is possible to remove the installation operation from the policy by clicking Clear row and then distributing the policy. This will cancel the installation operation. It is possible to stop the installation task in the selected domain and all subdomains by selecting the Recursively cancel installation for subdomains and hosts option in the confirmation dialog.", "step.step_777240189D0D468789467A1AB1C3DF": "Distribute the policy.", "content.p_A1D37778FEF74F92875043536DAF2B": "For other installation operations, for example upgrades or uninstallation, you can use the links next to the product on the Installed products summary table. These links will automatically appear whenever the installation packages necessary for the corresponding action are available. The options are: hotfix, upgrade, repair and uninstall.", "content.p_8191AF10AFEE47BE8544EE1E261544": "If the link for the operation you want to run is not shown on the Installed products summary table, you can click Install under the Policy-based installations table and check if the required package is available there. If the product does not support remote uninstallation, there will not be an option for uninstallation.", "content.p_0D841BADA92148B7A2A4EC0213A7DA": "When uninstalling managed clients, no statistical information will be sent stating that the uninstallation was successful, because client has been removed and is unable to send any information.", "desc": [ "content.p_05462AA4EF6E45B096C592E6C809C6", "content.p_7BE553DF8DDD4107A5E908C88E6995", "content.p_3623CD075652442AAEAF927BE7DFE4", { "steps.steps_359EA676A3464C49BE471400016EA7": [ "step.step_2B9D4DC2A0C443C4A84DC89D77E7CC", "content.p_4E7885B0075A4BB0A9D4B704EB9D03", "step.step_E3EE47BE93864FD8BC1E1BCB22DE11", "step.step_9304C66ED5224520B460EB8957712E", "content.p_3736C3CB38C7439CBD484D201917C0", "content.p_134E8FAB016849149173EC7DDC1EAE", "step.step_777240189D0D468789467A1AB1C3DF", "content.p_6FA42F88C5DA4427828F720B094DA7", "content.note_0C60DCC9BDCF401B988F52FD20D79E" ] }, "content.p_A1D37778FEF74F92875043536DAF2B", "content.p_8191AF10AFEE47BE8544EE1E261544", "content.p_0D841BADA92148B7A2A4EC0213A7DA" ] }, "concept_local_installation_and_updates-16.10-en.json": { "title": "title_BC3CF3AD8C6247CE89EEB8AE23F0BE84", "title_BC3CF3AD8C6247CE89EEB8AE23F0BE84": "Local installation and updates with pre-configured packages", "shortdesc": "shortdesc_C26D7F7B26EC4EBB877EA872833CBD9B", "shortdesc_C26D7F7B26EC4EBB877EA872833CBD9B": "You can export pre-configured packages in MSI (Microsoft Installer) or JAR format. ", "content.p_441DBBCE22F948EB86FBEC447A826B": "The MSI packages can be distributed, for example, using Windows Group Policy in an Active Directory environment.", "content.p_38C7946310A647829E4F4AA940A2AF": "The procedure for exporting is the same in both formats, and is explained below. You can select the file format for the customized package in the Export installation package dialog box.", "content.p_04BE9BB56AD1478BBFF51D20AD652B": "", "content.note_D137149E179840069A3B27FF93B007": "Note: When configuring and exporting an installation package for Mac hosts, do not rename the exported file, as the file name contains various metadata related to Policy Manager.", "desc": [ "content.p_441DBBCE22F948EB86FBEC447A826B", "content.p_38C7946310A647829E4F4AA940A2AF", "content.note_D137149E179840069A3B27FF93B007" ] }, "task_login_script_windows-16.10-en.json": { "title": "title_40A1AEEE95894D50A127F3B5FEAC0932", "title_40A1AEEE95894D50A127F3B5FEAC0932": "Using the customized remote installation package", "shortdesc": "shortdesc_79825AE6EC2242289E35DB7117105992", "shortdesc_79825AE6EC2242289E35DB7117105992": "There are two ways of using the login script on Windows platforms: by using a customized MSI package or a customized remote installation JAR package. ", "content.p_D0ABB6F5ADC8429AB6EEC66F3BDC75": "To use a customized installation package:", "step.step_74B0788D1F044204963C48CE68FF9A": "Run Policy Manager Console.", "content.p_E293E046AD0A48C3B3C84AC385F50E": "This will open the Installation packages dialog box.", "step.step_5DAFAC9786F64DE6B1BD5DAADD3755": "Select Tools > Installation packages from the menu.", "step.step_BEF212E146AC414690C23AAC83C822": "Select the installation package that contains the products you want to install, and click Export.", "step.step_48AD2261ECE7482786E248C0B88246": "Specify the file format, MSI or JAR, and the location where you want to save the customized installation package, then click Export.", "step.step_59EFD0D3697741DDAA4AE32BC930D0": "Specify the file location where you want to save the customized installation package and click Save.", "step.step_D897EBAFA2874AFC97E12A42C6B22D": "Select the products you want to install and click Next to continue.", "step.step_F6E563DFE3C54C738B9464C9C29FDE": "Choose to accept the default policy, or specify which host or domain policy should be used as an anonymous policy, then click Next to continue.", "content.p_99F69D713C3C40D398069F1FD6475B": "Policy Manager Console displays the Remote installation wizards that collect all necessary setup information for the selected products.", "step.step_32C092FB1EA541BB9C7AEA0A2F8F5E": "Review the summary and click Start to continue to the installation wizard.", "step.step_D40B428BF08F47ECBA7C1ED9EDC1DE": "When you reach the last wizard page, click Finish to continue.", "content.p_C4C4F0646A974BCA811A5C63C9B1E5": "The ilaunchr.exe tool is located in the Policy Manager Console installation directory under the ...\\Administrator\\Bin directory. To do this:", "substep.substep_06EEC2BC58974EE6B03E925AEE8EBE": "Copy ilaunchr.exe and the exported JAR to a location where the login script can access them.", "content.p_BE64928EE76A429CA1E54E4652FBE5": "When the installation runs, the user will see a dialog displaying the installation progress. If a restart is required after the installation, the user is prompted to restart the computer as defined when the installation package was exported. If you want the installation to run in silent mode, enter the command in format: ilaunchr <package name>.jar /Q. Also in this case the user may be prompted to restart the computer after the installation, and if a fatal error occurs during the installation, a message is displayed.", "content.p_49C88A867C7D45A9838EE74CC7F0A4": "ILAUNCHR has the following command line parameters:", "content.p_BC91C979F1F64B178E64EFB6B09BCE": "/U — Unattended. No messages are displayed, even when a fatal error occurs.", "content.p_F50E61EC769A477983B17DB269F254": "/F — Forced installation. Completes the installation even if Management Agent is already installed.", "content.p_85B516D65D184E66A3AF5A96C5E762": "Enter ILAUNCHR /? on the command line to display complete help.", "subsubchoice.choice_AA8D7E3E12D447699C24D64132B7C4": "/user:domain\\username (variation: /user:username) — Specifies the user account and the domain name. The domain name can be optionally left out.", "subsubchoice.choice_90E883B4B3734E0E85204508B68DDA": "/password:secret (variation: /password:\"secret with spaces\") — Specifies the password of the user account.", "content.p_login_script_windows_000009AC3": "The ilaunchr functionality stays the same if neither of these two parameters is given. If only one of the parameters is given, ilaunchr returns an error code. If both parameters are given, Ilaunchr starts the Setup program. An example of the command:", "content.p_34D89776BFC740CFA4FAFC43AB65AC": "You can also use the following parameters:", "content.p_8EDE9504A23D418EA971A1A737C920": "ILaunchr <jar file> /user:domain\\user_name /password:secret_word", "substep.substep_49DAB8D038F94875AD6F201AEDA9B4": "Enter the command: ilaunchr <package name>.jar where <package name> is replaced by the actual name of the JAR package being installed.", "step.step_BE17D99C4DFD4F498C5CB84F8CC938": "You can also install an exported JAR to the hosts by running the ilaunchr.exe tool.", "desc": [ "content.p_D0ABB6F5ADC8429AB6EEC66F3BDC75", { "steps.steps_5D99247879DD405786A5AECFEAD346": [ "step.step_74B0788D1F044204963C48CE68FF9A", "step.step_5DAFAC9786F64DE6B1BD5DAADD3755", "content.p_E293E046AD0A48C3B3C84AC385F50E", "step.step_BEF212E146AC414690C23AAC83C822", "step.step_48AD2261ECE7482786E248C0B88246", "step.step_59EFD0D3697741DDAA4AE32BC930D0", "step.step_D897EBAFA2874AFC97E12A42C6B22D", "step.step_F6E563DFE3C54C738B9464C9C29FDE", "step.step_32C092FB1EA541BB9C7AEA0A2F8F5E", "content.p_99F69D713C3C40D398069F1FD6475B", "step.step_D40B428BF08F47ECBA7C1ED9EDC1DE", "step.step_BE17D99C4DFD4F498C5CB84F8CC938", "content.p_C4C4F0646A974BCA811A5C63C9B1E5", { "substeps.substepsalpha_1BCBFED687104BECBDE54D8705CFA0": [ "substep.substep_06EEC2BC58974EE6B03E925AEE8EBE", "substep.substep_49DAB8D038F94875AD6F201AEDA9B4", "content.p_BE64928EE76A429CA1E54E4652FBE5", "content.p_49C88A867C7D45A9838EE74CC7F0A4", "content.p_BC91C979F1F64B178E64EFB6B09BCE", "content.p_F50E61EC769A477983B17DB269F254", "content.p_85B516D65D184E66A3AF5A96C5E762", "content.p_34D89776BFC740CFA4FAFC43AB65AC", { "subsubchoices.ul_DAFC417309B241B2AC9BC75707ED2E": [ "subsubchoice.choice_AA8D7E3E12D447699C24D64132B7C4", "subsubchoice.choice_90E883B4B3734E0E85204508B68DDA" ] }, "content.p_login_script_windows_000009AC3", "content.p_8EDE9504A23D418EA971A1A737C920" ] } ] } ], "related": [ "task_import_autoreg_hosts-16.10-en" ] }, "task_preparing_msi_linux-16.10-en.json": { "title": "title_3023A5A3D51C438E95259472D3D8042A", "title_3023A5A3D51C438E95259472D3D8042A": "How to prepare MSI installation packages with Policy Manager for Linux", "shortdesc": "shortdesc_5F1502F1138648F2A0DA43ACF262C9E1", "shortdesc_5F1502F1138648F2A0DA43ACF262C9E1": "For clients version 14.00 and newer, you can prepare MSI packages for distributed installation within your managed network even if you have both Policy Manager Server and Policy Manager Console running on Linux. ", "content.p_CCE0B42C6A5D47529538B3B1B1945E": "With the Linux version of Policy Manager, you cannot use the base MSI file extracted from the JAR installation package to roll out WithSecure products to Windows hosts. However, you can use a command line tool to prepare the MSI file for distributed installation.", "step.step_20CF143878674769AD96D785C0D77E": "Export the client installation JAR package from Policy Manager Console.", "step.step_677ECB57837F469D95E77AE837C0D5": "Extract the content of the JAR archive on a Windows host.", "subchoice.choice_6D2F49B95C4447D986A41C71B3802C": "For Client Security: program\\inst\\one-launcher.exe --install --prepare_msi_only --msi OneClientCS.msi", "subchoice.choice_7785687367894C8890BFFA8EE29B3F": "For Server Security: program\\inst\\one-launcher.exe --install --prepare_msi_only --msi OneClientSS.msi", "content.p_55005C6DEB674188BD473EA4F5755C": "The correct command is also given as the preparemsicommand property in the package.hdr file, which you can find in the root folder of the extracted content.", "content.p_A02391ED04B44DFDBE50D5431DC369": "This command updates the .msi file given as the parameter for the --msi option. You can use this prepared MSI file to distribute the WithSecure product to Windows hosts in your network.", "step.step_E6CA5ECCE5CB40309F21B059B110A9": "Run the following command:", "content.p_B34ECBB7E7AF485F8153C26C2A5CCD": "If the target MSI package is not updated, the log file may be useful for troubleshooting purposes. The location of the log file depends on your access rights when running the preparation command:", "choice.choice_E85AB97750C84482BB27AC17CFC241": "With administrator rights and user access elevation: C:\\ProgramData\\F-Secure\\Log\\BusinessSuite\\one-launcher.u.log", "choice.choice_B55F6CBA37DB404296D3A303B85202": "Without user access elevation: C:\\Users\\user\\AppData\\Local\\F-Secure\\Log\\BusinessSuite\\one-launcher.u.log", "desc": [ "content.p_CCE0B42C6A5D47529538B3B1B1945E", { "steps.steps_B2D3630875F1494DA9EABA4DE4E4A0": [ "step.step_20CF143878674769AD96D785C0D77E", "step.step_677ECB57837F469D95E77AE837C0D5", "step.step_E6CA5ECCE5CB40309F21B059B110A9", { "subchoices.choices_DE26B1D91DA64AEDAAF92EE8103523": [ "subchoice.choice_6D2F49B95C4447D986A41C71B3802C", "subchoice.choice_7785687367894C8890BFFA8EE29B3F" ] }, "content.p_55005C6DEB674188BD473EA4F5755C", "content.p_A02391ED04B44DFDBE50D5431DC369" ] }, "content.p_B34ECBB7E7AF485F8153C26C2A5CCD", { "choices.ul_B0118A210E1C4C1AA8DBB3DE2F1145": [ "choice.choice_E85AB97750C84482BB27AC17CFC241", "choice.choice_B55F6CBA37DB404296D3A303B85202" ] } ] }, "concept_upgrading_software-16.10-en.json": { "title": "title_388C274FE3934645A6BE99C655CF7BB8", "title_388C274FE3934645A6BE99C655CF7BB8": "Upgrading managed software", "shortdesc": "shortdesc_78AABFF3420C403BB45FECD7459F79FC", "shortdesc_78AABFF3420C403BB45FECD7459F79FC": "You can remotely upgrade WithSecure anti-virus software already installed on hosts by using the Installation editor. ", "content.p_F6A59BE40FBC48CFAC05D19F6995D2": "The editor creates policy-based installation tasks that each host in the target domain will carry out after the next policy update.", "content.note_04D8D1A623724FA7A0B5F9E117D7FC": "Note: It is also possible to upgrade Client Security by using any other installation scheme.", "desc": [ "content.p_F6A59BE40FBC48CFAC05D19F6995D2", "content.note_04D8D1A623724FA7A0B5F9E117D7FC" ] }, "concept_managing_cs_settings-16.10-en.json": { "title": "title_6A62DC593EAB45CEA7FF7DE977AD9B14", "title_6A62DC593EAB45CEA7FF7DE977AD9B14": "Managing endpoint security", "shortdesc": "shortdesc_9DE111A6203E4EDAAF07D994D574DBB1", "shortdesc_9DE111A6203E4EDAAF07D994D574DBB1": "This section contains information on how to configure WithSecure endpoint security products for managed hosts in your network. ", "content.p_AF9D6BAD31E0448BA38733FBA62C06": "The topics in this section focus on the settings for WithSecure Client Security and WithSecure Server Security.", "content.p_64B29A8017A940C79A8FF0F67D2C7E": "The settings for WithSecure Linux Security 64 are available in Policy Manager Console on the Settings > Linux pages. You can find more information on managing the settings in the Linux Security 64 documentation.", "content.p_0215549CB3114850A9EF6DD7E25BC8": "The settings for WithSecure Client Security for Mac are similar to those for the Windows product, but more limited in scope. These settings are available in Policy Manager Console under the Settings > Mac pages.", "content.p_6E3DE3D1FD574223B9A22C75E2EBD9": "The settings for WithSecure Email and Server Security are combined under the Windows, Microsoft Exchange, and Microsoft SharePoint pages on the Settings tab. The server-related Windows settings apply to the local protection for hosts where Email and Server Security is installed. For more information on the settings, see the Email and Server Security Administrator's Guide.", "desc": [ "content.p_AF9D6BAD31E0448BA38733FBA62C06", "content.p_64B29A8017A940C79A8FF0F67D2C7E", "content.p_0215549CB3114850A9EF6DD7E25BC8", "content.p_6E3DE3D1FD574223B9A22C75E2EBD9" ] }, "concept_migration_ess_settings-16.10-en.json": { "title": "title_A52738BEA2DA4295B9C1A529A0EB4843", "title_A52738BEA2DA4295B9C1A529A0EB4843": "Migration of Email and Server Security settings", "shortdesc": "shortdesc_E107674AEA54407C8EF67C5CFB202BCF", "shortdesc_E107674AEA54407C8EF67C5CFB202BCF": "Existing settings for the Microsoft Exchange and Microsoft SharePoint protection features of Email and Server Security are migrated to the Standard view for using 14.x and newer versions of the product. ", "content.p_241475D0D60045D3987DE799643A03": "The existing settings are also preserved in Advanced view for managing older versions of Email and Server Security.", "content.p_FFC428A0A5D4435F84053F64E09FB1": "If you have Email and Server Security installed on managed hosts, it is important to check all the migrated settings. As all already defined match lists and message templates are moved to the Root domain, it is especially important to check those. You also need to check all references to the match lists and message templates in the Microsoft Exchange and Microsoft SharePoint settings, including those used in scheduled scanning tasks.", "desc": [ "content.p_241475D0D60045D3987DE799643A03", "content.p_FFC428A0A5D4435F84053F64E09FB1" ] }, "task_using_mdm_profiles_to_set_up_cs_mac-16.10-en.json": { "title": "title_02920C351E504B7985363BEB2FB60CA9", "title_02920C351E504B7985363BEB2FB60CA9": "Using MDM profiles to set up WithSecure Client Security for Mac", "shortdesc": "shortdesc_28E545E538AA40CDA9B44CCA564F2144", "shortdesc_28E545E538AA40CDA9B44CCA564F2144": "MDM profiles help you to set up WithSecure Client Security for Mac on many devices within your organization. ", "content.p_A1CD39AD570A42FEA130DA4C303233": "To create MDM profiles to deploy the product configuration to devices, follow these instructions:", "content.p_2D39A613B0F24DDE9408EAC0ED2574": "Use the following templates to create or extend your own MDM profiles.", "content.note_C5D9E1CA823A401DA5B97C822E86DA": "Note: Replace all PayloadUUID and PayloadIdentifier values in the templates with your own values. You can generate a UUID with the uuidgen command-line tool, for example.", "content.p_AD280B94927A4B87800CE43EE51EA3": "Required. For more information, see the Apple Developer documentation: the SystemPolicyKernelExtensions page", "content.p_248B89ABDF1F442B8126F2314ACB6A": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">
<plist version=\"1.0\">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>AllowUserOverrides</key>
<true/>
<key>AllowedTeamIdentifiers</key>
<array>
<string>V928P8X763</string>
</array>
<key>RemovableSystemExtensions</key>
<dict>
<key>6KALSAFZJC</key>
<array>
<string>com.f-secure.fsmac.gui.FSCSystemExtension</string>
</array>
</dict>
<key>PayloadDescription</key>
<string>Allows WithSecure System Extension</string>
<key>PayloadDisplayName</key>
<string>WithSecure System Extension</string>
<key>PayloadIdentifier</key>
<string>com.apple.system-extension-policy.213E79BF-4F5E-430D-AFED-D76EC62ACE96</string>
<key>PayloadType</key>
<string>com.apple.system-extension-policy</string>
<key>PayloadUUID</key>
<string>213E79BF-4F5E-430D-AFED-D76EC62ACE96</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>PayloadOrganization</key>
<string>WithSecure Oyj</string>
</dict>
</array>
<key>PayloadDisplayName</key>
<string>WithSecure CS Profile</string>
<key>PayloadIdentifier</key>
<string>SAMPLE.00000000-0000-0000-0000-000000000001</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>00000000-0000-0000-0000-000000000001</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>", "substep.step_info_7016052A1C974FBEB94A2BAB9": "Allow all WithSecure system extensions.", "content.p_D6784A3CDB524835B15817BBD4744F": "Required. For more information, see the Apple Developer documentation: the WebContentFilter page", "content.p_AA799BB69F49454585FCE46015B8BD": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">
<plist version=\"1.0\">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>UserDefinedName</key>
<string>WithSecure Firewall</string>
<key>PluginBundleID</key>
<string>com.withsecure.wsagent</string>
<key>FilterDataProviderBundleIdentifier</key>
<string>com.withsecure.wsagent.wssystemextension</string>
<key>FilterDataProviderDesignatedRequirement</key>
<string>identifier \"com.withsecure.wsagent.wssystemextension\" and anchor apple generic and certificate leaf[subject.OU] = \"V928P8X763\"</string>
<key>FilterSockets</key>
<true/>
<key>FilterPackets</key>
<false/>
<key>FilterBrowsers</key>
<false/>
<key>FilterType</key>
<string>Plugin</string>
<key>PayloadDescription</key>
<string>Allow WithSecure Firewall to filter network traffic</string>
<key>PayloadDisplayName</key>
<string>WithSecure Firewall</string>
<key>PayloadIdentifier</key>
<string>com.apple.webcontent-filter.9FF6DE99-59E2-47A1-8918-CE259D92E785</string>
<key>PayloadType</key>
<string>com.apple.webcontent-filter</string>
<key>PayloadUUID</key>
<string>9FF6DE99-59E2-47A1-8918-CE259D92E785</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>PayloadOrganization</key>
<string>WithSecure Oyj</string>
</dict>
</array>
<key>PayloadDisplayName</key>
<string>WithSecure CS Profile</string>
<key>PayloadIdentifier</key>
<string>SAMPLE.00000000-0000-0000-0000-000000000001</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>00000000-0000-0000-0000-000000000001</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>", "substep.step_info_C4839B07EAB24B01A2698EA39": "Allow content filtering for WithSecure system extension.", "content.p_5407B6A4BD814BA385AFDEB4AE0A41": "Required. For more information, see the Apple Developer documentation: the PrivacyPreferencesPolicyControl.Services page", "content.p_8139B8006A4D4E9DB880473C70B355": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">
<plist version=\"1.0\">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadDescription</key>
<string>Grant Full Disk Access to WithSecure processes</string>
<key>PayloadDisplayName</key>
<string>Grant Full Disk Access to WithSecure processes</string>
<key>PayloadIdentifier</key>
<string>com.apple.TCC.configuration-profile-policy.F8432F17-1ECD-420D-B3D0-2A35F0BB144E</string>
<key>PayloadUUID</key>
<string>F8432F17-1ECD-420D-B3D0-2A35F0BB144E</string>
<key>PayloadType</key>
<string>com.apple.TCC.configuration-profile-policy</string>
<key>PayloadOrganization</key>
<string>WithSecure Oyj</string>
<key>Services</key>
<dict>
<key>SystemPolicyAllFiles</key>
<array>
<dict>
<key>Identifier</key>
<string>com.withsecure.wsagent</string>
<key>IdentifierType</key>
<string>bundleID</string>
<key>CodeRequirement</key>
<string>identifier \"com.withsecure.wsagent\" and anchor apple generic and certificate leaf[subject.OU] = \"V928P8X763\"</string>
<key>Allowed</key>
<true/>
<key>Comment</key>
<string>Grant Full Disk Access to WithSecure processes</string>
</dict>
<dict>
<key>Identifier</key>
<string>com.withsecure.wsagent.wssystemextension</string>
<key>IdentifierType</key>
<string>bundleID</string>
<key>CodeRequirement</key>
<string>identifier \"com.withsecure.wsagent.wssystemextension\" and anchor apple generic and certificate leaf[subject.OU] = \"V928P8X763\"</string>
<key>Allowed</key>
<true/>
<key>Comment</key>
<string>Grant Full Disk Access to WithSecure's System Extension'</string>
</dict>
</array>
</dict>
</dict>
</array>
<key>PayloadDisplayName</key>
<string>WithSecure CS Profile</string>
<key>PayloadIdentifier</key>
<string>SAMPLE.00000000-0000-0000-0000-000000000001</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>00000000-0000-0000-0000-000000000001</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>", "substep.step_info_1C38D8060438408F976CD909A": "Grant full disk access for WithSecure processes.", "content.p_4784DF1330394127A101874E68BE67": "Required. For more information, see the Apple Developer documentation: the NotificationSettingsItem page", "content.p_BBAFB972E7B1455AB406B23D1EF6A5": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">
<plist version=\"1.0\">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>NotificationSettings</key>
<array>
<dict>
<key>AlertType</key>
<integer>2</integer>
<key>BadgesEnabled</key>
<true/>
<key>BundleIdentifier</key>
<string>com.withsecure.wsagent</string>
<key>CriticalAlertEnabled</key>
<false/>
<key>NotificationsEnabled</key>
<true/>
<key>ShowInLockScreen</key>
<true/>
<key>ShowInNotificationCenter</key>
<true/>
<key>SoundsEnabled</key>
<true/>
</dict>
</array>
<key>PayloadEnabled</key>
<true/>
<key>PayloadDescription</key>
<string>Allow notifications for WithSecure products</string>
<key>PayloadDisplayName</key>
<string>Allow notifications for WithSecure products</string>
<key>PayloadIdentifier</key>
<string>com.apple.notificationsettings.A134E8B3-AE82-4AE9-8D39-F9976B5BEEE1</string>
<key>PayloadType</key>
<string>com.apple.notificationsettings</string>
<key>PayloadUUID</key>
<string>A134E8B3-AE82-4AE9-8D39-F9976B5BEEE1</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>PayloadOrganization</key>
<string>WithSecure Corporation</string>
</dict>
</array>
<key>PayloadDisplayName</key>
<string>WithSecure CS Profile</string>
<key>PayloadIdentifier</key>
<string>SAMPLE.00000000-0000-0000-0000-000000000001</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>00000000-0000-0000-0000-000000000001</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>", "substep.step_info_B6E0787BC1A34C639B05B7382": "Allow user notifications for WithSecure processes.", "step.step_1C2C5347944B4E509D3368284D7E2B": "Generate MDM profiles for system preferences.", "content.p_740AA3B09DD04BD6B50A77D7E857B8": "For more information, consult the documentation of your MDM service.", "step.step_749D57C3573C4C46A57CECF962BC4A": "Import the MDM profiles that you have created into your MDM service and use it to deploy the configuration to devices in the organization.", "desc": [ "content.p_A1CD39AD570A42FEA130DA4C303233", { "steps.steps_13C69E54F9A34FA3834366D3D6770A": [ "step.step_1C2C5347944B4E509D3368284D7E2B", "content.p_2D39A613B0F24DDE9408EAC0ED2574", "content.note_C5D9E1CA823A401DA5B97C822E86DA", { "substeps.substepsalpha_usingalpha_mdmalpha_profilesalpha_toalpha_sealpha_059A6": [ "substep.step_info_7016052A1C974FBEB94A2BAB9", "content.p_AD280B94927A4B87800CE43EE51EA3", "content.p_248B89ABDF1F442B8126F2314ACB6A", "substep.step_info_C4839B07EAB24B01A2698EA39", "content.p_D6784A3CDB524835B15817BBD4744F", "content.p_AA799BB69F49454585FCE46015B8BD", "substep.step_info_1C38D8060438408F976CD909A", "content.p_5407B6A4BD814BA385AFDEB4AE0A41", "content.p_8139B8006A4D4E9DB880473C70B355", "substep.step_info_B6E0787BC1A34C639B05B7382", "content.p_4784DF1330394127A101874E68BE67", "content.p_BBAFB972E7B1455AB406B23D1EF6A5" ] }, "step.step_749D57C3573C4C46A57CECF962BC4A", "content.p_740AA3B09DD04BD6B50A77D7E857B8" ] } ] }, "concept_configuring_automatic_updates-16.10-en.json": { "title": "title_A54196D9C73B4678BC611FD0F6460D98", "title_A54196D9C73B4678BC611FD0F6460D98": "Configuring automatic updates", "shortdesc": "shortdesc_BC08056EEA104C40AC8BD628E0673FE8", "shortdesc_BC08056EEA104C40AC8BD628E0673FE8": "This section explains the different configuration settings available for automatic updates in Policy Manager, and gives some practical configuration examples for hosts with different protection needs.", "content.p_C6AC1B73B14F4FDB8B7264858E920A": "By following these instructions you can always keep the virus and spyware definitions on hosts up-to-date, and choose the best update source based on user needs.", "desc": [ "content.p_C6AC1B73B14F4FDB8B7264858E920A" ] }, "task_configuring_automatic_updates_pms-16.10-en.json": { "title": "title_9D2B2A40DF844102B6465587186FDD48", "title_9D2B2A40DF844102B6465587186FDD48": "Configuring automatic updates from Policy Manager Server", "shortdesc": "shortdesc_099730072DAF4E1083E44788EC6A7D28", "shortdesc_099730072DAF4E1083E44788EC6A7D28": "When centralized management is used, all hosts can fetch their virus and spyware definition updates from Policy Manager Server. ", "content.p_5C96CF0062DE48CA9E1E80C15847BB": "This is configured as follows:", "step.step_E1E57F02E86A430DAFDE9E5CB255F6": "Select Root on the Domain tree.", "step.step_EAEAFEACB25F40DD9FE995DF43520C": "Go to the Settings tab and select Windows > Centralized management.", "step.step_C9EFDA2E454C45E5A5AB9DBDDD53EA": "Make sure that the polling interval defined in Interval for polling updates from WithSecure Policy Manager Server is suitable for your environment.", "step.step_E92CA3AF815440DB9AC8A36C4CF727": "If your network includes hosts with Client Security version 13.x installed, make sure that Enable automatic updates is selected.", "step.step_4F3678C0530044BFB02DF4BDA3E94E": "If you want to restrict users from changing these settings, click the lock symbol beside the settings.", "step.step_B6D18C1FE088473A9F848CB0EBFCE3": "Click the following icon to distribute the policy:
", "desc": [ "content.p_5C96CF0062DE48CA9E1E80C15847BB", { "steps.steps_6F5EE43FA1FA49269D595F6D480B76": [ "step.step_E1E57F02E86A430DAFDE9E5CB255F6", "step.step_EAEAFEACB25F40DD9FE995DF43520C", "step.step_C9EFDA2E454C45E5A5AB9DBDDD53EA", "step.step_E92CA3AF815440DB9AC8A36C4CF727", "step.step_4F3678C0530044BFB02DF4BDA3E94E", "step.step_B6D18C1FE088473A9F848CB0EBFCE3" ] } ] }, "task_configuring_pm_proxy-16.10-en.json": { "title": "title_CAB7AB7F5F364ECA8E27246C054DEEA5", "title_CAB7AB7F5F364ECA8E27246C054DEEA5": "Configuring Policy Manager Proxy", "shortdesc": "shortdesc_75C44C1B99D6492682179ADE13280F42", "shortdesc_75C44C1B99D6492682179ADE13280F42": "If the different offices of a company have their own Policy Manager Proxy in use, it is often a good idea to configure the laptops that the user takes from one office to another to use a Policy Manager Proxy as the updates source. ", "content.p_8E93AA9B5BC84B27801DC1EAFE27C0": "In this configuration example, it is assumed that the laptops have been imported to one subdomain on the Policy domains tab, and that the different offices of the company have their own Policy Manager Proxy , and all of them will be included on the list of Policy Manager Proxy servers.", "content.p_22F4EDC9847F475792AF4AB3F148AA": "Follow these instructions:", "step.step_48651DCA9428419E8FA8FB535DBB4D": "Select the subdomain where you want to use the Policy Manager Proxy on the Policy domains tab.", "step.step_73434BB726E548F8B5703D9CC4E2A0": "Go to the Settings tab and select Windows > Centralized management.", "content.p_A83D258FCECD4876A38AEB1B31077E": "This opens the Policy Manager Proxy server properties window.", "step.step_6E54BC3080A54ADC84888E9315F292": "Click Add next to the Policy Manager Proxies table to add new servers to the list of available proxy servers.", "content.p_6E6BC91741E54EDF85BA9F498B3A97": "The priority numbers are used to define the order in which the hosts try to connect to the Policy Manager Proxy. Use, for example, 10 for the Policy Manager Proxy in the office where the host is normally located, and 20, 30 and so on for the other proxies.", "step.step_6E93F97B5BEF42A7A6A065DEA43108": "Enter a priority number for the Policy Manager Proxy in the Priority text box.", "step.step_4C7150C1652E44CAACD02D0952B68F": "Enter the URL of the Policy Manager Proxy server in the Address text box, then click OK.", "step.step_7FFC741A9B064D40AF7D311CC9FF76": "Repeat the above steps to add the other servers to the list.", "content.p_234F75D38A404B7EA9E7EEC160098D": "If necessary, you can modify their order by altering the priority numbers.", "step.step_699C8A8775DA481EACE87C8DE657DE": "When you have added all proxies to the list, check that they are in the correct order.", "step.step_9DE86EF0922C4F9A8766081B66288C": "If the policy domain includes hosts with Client Security 13.x installed, make sure that Enable automatic updates is selected.", "step.step_5F2F7FF0DEAE40819BBFEB1485EAAB": "If you want to restrict users from changing these settings, click the lock symbols beside the settings.", "step.step_106ABAF83715484CB3DE32E181D582": "Click the following icon to distribute the policy:
", "content.p_A1A43BBA90AC497F94DCE247B0A6D2": "", "content.note_D7B9EA3319904C9B8763D703C75CAE": "Note: End users can also add a Policy Manager Proxy to the list in the local user interface, and the host uses a combination of these two lists when downloading virus and spyware definitions updates. A Policy Manager Proxy added by an end user is tried before those added by the administrator.", "desc": [ "content.p_8E93AA9B5BC84B27801DC1EAFE27C0", "content.p_22F4EDC9847F475792AF4AB3F148AA", { "steps.steps_ED5E54942EEF4E0791BFBFE85CDA89": [ "step.step_48651DCA9428419E8FA8FB535DBB4D", "step.step_73434BB726E548F8B5703D9CC4E2A0", "step.step_6E54BC3080A54ADC84888E9315F292", "content.p_A83D258FCECD4876A38AEB1B31077E", "step.step_6E93F97B5BEF42A7A6A065DEA43108", "content.p_6E6BC91741E54EDF85BA9F498B3A97", "step.step_4C7150C1652E44CAACD02D0952B68F", "step.step_7FFC741A9B064D40AF7D311CC9FF76", "step.step_699C8A8775DA481EACE87C8DE657DE", "content.p_234F75D38A404B7EA9E7EEC160098D", "step.step_9DE86EF0922C4F9A8766081B66288C", "step.step_5F2F7FF0DEAE40819BBFEB1485EAAB", "step.step_106ABAF83715484CB3DE32E181D582" ] }, "content.note_D7B9EA3319904C9B8763D703C75CAE" ] }, "task_configuring_clients_download_updates-16.10-en.json": { "title": "title_3D98999B011646759E7FA89BB9FE5575", "title_3D98999B011646759E7FA89BB9FE5575": "Configuring hosts to download updates from each other", "shortdesc": "shortdesc_0CD035959A67484681D104403C898AED", "shortdesc_0CD035959A67484681D104403C898AED": "You can configure managed hosts so that updates are downloaded from each other in addition to any existing servers or proxies. ", "content.p_C4A85AF8AAA84294B6111C46D8A42A": "This feature is known as neighborcast. Updates can be downloaded from the following sources:", "choice.choice_EA434511006B46AD811DE19CE237F7": "A Policy Manager Server", "choice.choice_CFCB802F91C64C0FBC0FE50E361B15": "A Policy Manager Proxy", "choice.choice_422D03CD9BD64496B78FA64FE06793": "Another managed host (for example Client Security) with neighborcast enabled.", "content.p_7362B418E1AE43C69B48AF55BE8C2C": "To enable neighborcast:", "step.step_818CB510C501401E8062B9133C4968": "Select the target domain.", "substep.substep_77D857B9003441BF878CFB5A4B87AC": "To set hosts in the selected domain to download updates from other hosts, select Enable neighborcast client.", "substep.substep_246EA415721E4A6988F8E6AAE2661E": "To set hosts in the selected domain to serve updates to other hosts, select Enable neighborcast server.", "step.step_73E2CD044C5F41F4A0909F81C8A641": "Go to the Settings tab and select the Centralized management page.", "step.step_55D5F949ECCE4A37B4CC3B52E9FFDE": "To change the port used for neighborcast, enter the new port number in Neighborcast port.", "content.p_86DC7A2547D94FCDAFA615D78C73C6": "For example, you can set neighborcast to work only within your office network, so that the feature is turned off whenever a managed computer is outside the office. In practice, whenever the computer is outside the specified network, the HTTP and UDP ports are not in listening mode and the client does not make any broadcast requests.", "content.note_3D2C5C5E9D8647328F87589B489A61": "Note: We recommend using this network restriction, as it increases the security of managed hosts.", "step.step_4F35F94015DD41C79EB7B9FE91D82B": "If you want to use neighborcast only within a specific network, enter that network mask in the Neighborcast discovery address field.", "step.step_0A0C0F844D3B4F32A011AB78443D89": "Click the following icon to distribute the policy:
", "desc": [ "content.p_C4A85AF8AAA84294B6111C46D8A42A", { "choices.ul_5674C59668A44F608CD91305D659A6": [ "choice.choice_EA434511006B46AD811DE19CE237F7", "choice.choice_CFCB802F91C64C0FBC0FE50E361B15", "choice.choice_422D03CD9BD64496B78FA64FE06793" ] }, "content.p_7362B418E1AE43C69B48AF55BE8C2C", { "steps.steps_34FAD5D0E0994B7DA97F10351C1B83": [ "step.step_818CB510C501401E8062B9133C4968", "step.step_73E2CD044C5F41F4A0909F81C8A641", { "substeps.substepsalpha_96F205A75ACF4F268A6380DBD8E885": [ "substep.substep_77D857B9003441BF878CFB5A4B87AC", "substep.substep_246EA415721E4A6988F8E6AAE2661E" ] }, "step.step_55D5F949ECCE4A37B4CC3B52E9FFDE", "step.step_4F35F94015DD41C79EB7B9FE91D82B", "content.p_86DC7A2547D94FCDAFA615D78C73C6", "content.note_3D2C5C5E9D8647328F87589B489A61", "step.step_0A0C0F844D3B4F32A011AB78443D89" ] } ] }, "concept_configuring_virus_spyware_protection-16.10-en.json": { "title": "title_31A26DAC276148A5A0BEA48E5D5C58D5", "title_31A26DAC276148A5A0BEA48E5D5C58D5": "Configuring virus and spyware protection", "shortdesc": "shortdesc_F60F25C6F54940948DBF2141BFD064A0", "shortdesc_F60F25C6F54940948DBF2141BFD064A0": "Virus and spyware protection consists of automatic updates, manual scanning, scheduled scanning, real-time scanning, spyware scanning, DeepGuard, email scanning and browsing protection. ", "content.p_61809B9E5BC44200B07CDCC15896E7": "Virus and spyware protection keeps computers protected against file viruses, spyware, riskware, and viruses that are spreading by email attachments and in web traffic.", "content.p_9DFE9D541D0541D5BC749F2AB4B92F": "Automatic updates guarantee that virus and spyware protection is always up-to-date. Once you have set up virus and spyware protection and the automatic updates by distributing the settings in a security policy, you can be sure that the managed network is protected. You can also monitor the scanning results and other information the managed hosts send back to Policy Manager Console.", "content.p_F774E9142721439A8A50ACA7EB326E": "When a virus is found on a computer, one of the following actions will be taken:", "choice.choice_4C31620D5C76488095652922792D0D": "the infected file is disinfected,", "choice.choice_30D63F15A5E04AB3B8827420720C14": "the infected file is renamed,", "choice.choice_B30524C1647C4AB3A33D436BE5FE7D": "the infected file is deleted,", "choice.choice_C1B79E08E65A49F0A00C3D9DEF6FCC": "the infected file is quarantined,", "choice.choice_6C8991AEB910404D91C1C8CC7BF5F6": "the user is prompted to decide what action to take with the infected file,", "choice.choice_57303B1DF43F4FDA944006DD4B45DD": "the infected file or attachment (in email scanning) is reported only, or", "choice.choice_74B1D21112C24106868B9E6172F0E2": "the infected attachment (in email scanning) is either disinfected, removed or blocked.", "desc": [ "content.p_61809B9E5BC44200B07CDCC15896E7", "content.p_9DFE9D541D0541D5BC749F2AB4B92F", "content.p_F774E9142721439A8A50ACA7EB326E", { "choices.ul_5E1C4B0D0D964132BC4B2585F4B454": [ "choice.choice_4C31620D5C76488095652922792D0D", "choice.choice_30D63F15A5E04AB3B8827420720C14", "choice.choice_B30524C1647C4AB3A33D436BE5FE7D", "choice.choice_C1B79E08E65A49F0A00C3D9DEF6FCC", "choice.choice_6C8991AEB910404D91C1C8CC7BF5F6", "choice.choice_57303B1DF43F4FDA944006DD4B45DD", "choice.choice_74B1D21112C24106868B9E6172F0E2" ] } ] }, "concept_configuring_realtime_scanning-16.10-en.json": { "title": "title_1BE003E2AFC74F1EB573FCF5A80B4C03", "title_1BE003E2AFC74F1EB573FCF5A80B4C03": "Configuring real-time scanning", "shortdesc": "shortdesc_4C50B3AB54CA490F8C10B994ADEC86D3", "shortdesc_4C50B3AB54CA490F8C10B994ADEC86D3": "Real-time scanning protects the computer all the time, as it is scanning files when they are accessed, opened or closed. ", "content.p_2A1FBD1844344CBEB6378E5C913611": "It runs in the background, which means that once it has been set up, it is mostly transparent to the user.", "desc": [ "content.p_2A1FBD1844344CBEB6378E5C913611" ] }, "task_enabling_realtime_scanning_whole_domain-16.10-en.json": { "title": "title_DE16A6F40331496492408C26C98498D0", "title_DE16A6F40331496492408C26C98498D0": "Enabling real-time scanning for the whole domain", "shortdesc": "shortdesc_C5E97F9099BB447E86E74E838A5AD034", "shortdesc_C5E97F9099BB447E86E74E838A5AD034": "In this example, real-time scanning is enabled for the whole domain. ", "content.p_FCA7E3DBB51B4E0496E315B7449BFC": "Follow these instructions:", "step.step_5CA728BAC2BE48CD92B9A9933CB10D": "Select Root on the Domain tree.", "step.step_02630C9A859B496FB7B45CC7B2852C": "Go to the Settings tab and select Windows > Real-time scanning.", "step.step_A5365DCFF89F4D1A84BF58B7D381C8": "Select Enable real-time scanning.", "step.step_CB3D2B0A62214338B0F8436101BAAE": "Select Files with these extensions from the Files to scan: drop-down list.", "content.p_70D1BE064F564975A684DC78896156": "The settings are divided into two groups so that you can choose different settings for workstations and servers.", "step.step_D99B7EF6E2A04292A4661829742909": "Select how to handle infected files from the settings under the Actions on malware detection sections.", "step.step_D48F66B8C2C54DE091E1458AD04E20": "Check that the other settings on this page are suitable for your system, and modify them if necessary.", "step.step_DAC3BBF50E5F4993BFDCD4700B5F57": "Click the following icon to distribute the policy:
", "desc": [ "content.p_FCA7E3DBB51B4E0496E315B7449BFC", { "steps.steps_BAE868CE0B2F44EC8BC1F648E68A0F": [ "step.step_5CA728BAC2BE48CD92B9A9933CB10D", "step.step_02630C9A859B496FB7B45CC7B2852C", "step.step_A5365DCFF89F4D1A84BF58B7D381C8", "step.step_CB3D2B0A62214338B0F8436101BAAE", "step.step_D99B7EF6E2A04292A4661829742909", "content.p_70D1BE064F564975A684DC78896156", "step.step_D48F66B8C2C54DE091E1458AD04E20", "step.step_DAC3BBF50E5F4993BFDCD4700B5F57" ] } ] }, "task_using_amsi_integration-16.10-en.json": { "title": "title_AEC856FC03A24F599CD2D49BC5DCFB95", "title_AEC856FC03A24F599CD2D49BC5DCFB95": "Using AMSI integration to identify script-based attacks", "shortdesc": "shortdesc_D7BCBEC80720446188DBBD44BB326A04", "shortdesc_D7BCBEC80720446188DBBD44BB326A04": "Antimalware Scan Interface (AMSI) is a Microsoft Windows component that allows the deeper inspection of built-in scripting services. ", "content.p_E93A78B117D641FF84AEE20C62F74E": "", "content.note_E7F8483A07BD470D8FEDB49B95F7B1": "Note: AMSI integration is only available on Windows 10 and Windows 11 hosts that are running version 15 or newer products.", "content.p_F7C5C30326834F9BB1E5B7AE248110": "Advanced malware uses scripts that are disguised or encrypted to avoid traditional methods of scanning. Such malware is often loaded directly into memory, so it does not use any files on the device.", "content.p_B7632D76EB9F4A58B2FB7D445E52B0": "AMSI is an interface that applications and services that are running on Windows can use to send scanning requests to the antimalware product installed on the computer. This provides additional protection against harmful software that uses scripts or macros on core Windows components, such as PowerShell and Office365, or other applications to evade detection.", "step.step_7ADCF7247A3F4E2AA53F78585C4279": "Select the target domain.", "step.step_9ADB20B97AD94EDFB8C9B14C240E2F": "Go to the Settings tab and select Windows > Real-time scanning.", "step.step_7C0A606C3D8549C4908916C59A3742": "Select Enable Antimalware Scan Interface (AMSI).", "step.step_0EB3550474AC40138DBD2D2A3F281B": "Click the following icon to distribute the policy:
", "desc": [ "content.note_E7F8483A07BD470D8FEDB49B95F7B1", "content.p_F7C5C30326834F9BB1E5B7AE248110", "content.p_B7632D76EB9F4A58B2FB7D445E52B0", { "steps.steps_68A7369A67BF4FA1B20CB18808D8A1": [ "step.step_7ADCF7247A3F4E2AA53F78585C4279", "step.step_9ADB20B97AD94EDFB8C9B14C240E2F", "step.step_7C0A606C3D8549C4908916C59A3742", "step.step_0EB3550474AC40138DBD2D2A3F281B" ] } ] }, "task_excluding_pst_file_realtime_scanning-16.10-en.json": { "title": "title_4E63C4F65CF04754896990E1E1415B16", "title_4E63C4F65CF04754896990E1E1415B16": "Excluding files from real-time scanning", "shortdesc": "shortdesc_7C224B49FBA44042B1AA572E175C6209", "shortdesc_7C224B49FBA44042B1AA572E175C6209": "You may want real-time scanning to skip certain files, either based on the file extension or the file path. ", "content.p_E6DE6B63FC5E4C2DBBBCBC4CC8BCFC": "For example, you might not want to scan Microsoft Outlook’s .PST file to avoid slowing down the system unnecessarily, as PST files are typically very large and take a long time to scan.", "content.p_F36E6FD133B6432F9981C10E0A6086": "Follow these instructions:", "step.step_3D1E57E6B17149648B632C8CA72C24": "Select Root on the Domain tree.", "content.p_2682E2707123481181E0E8320E0291": "To select files based on their file extension:", "substep.substep_4ECCBA57505247D5809F18F8335D2E": "Select Do not scan files with the following extensions.", "content.note_45FBDCC1F71F4763A364B586E96F0B": "Note: The extensions should be added without the previous . (dot). Separate multiple extensions with spaces.", "substep.substep_FF1CCAE406964E2C9CA6E83EACFC3C": "Enter the extension in Excluded extensions.", "content.p_CB2D59A5D0F04BB29172A32017D95E": "To select files based on their location or checksum (hash):", "substep.substep_EF0FCDDDFAE941C1B3241CDE0F4834": "Select Do not scan the following files and applications.", "substep.substep_6E555C3723E44108AC108BE805E0CF": "Click Add.", "content.p_6DDEE8E82BC447D58534816901000B": "Select All if you want the exclusion to apply to both real-time and manual scanning.", "substep.substep_0890D4E46EBF4B969BA1ABEBFBBA2A": "Select the scope.", "content.p_425A17E63AC34220B6F7BCF0FEE320": "Select File path if the file always uses the same path.", "content.p_CD8A295A0C274952BDC5BA871F2887": "Select Folder path if you want scanning to skip all files in a specific folder.", "content.p_9D0B07AF3DE640FFAD3DEB06C32BC4": "Select Application SHA-1 if the path for the file may vary across different hosts. Note that this option is only available for the real-time scanning scope.", "substep.substep_1A6DE2E9AF7E4DFE886294DE6551F7": "Select the identification method.", "subsubchoice.choice_930D6D6374CA41E792A84D653C585D": "File name: text.txt (all files named text.txt are not scanned).", "subsubchoice.choice_B37E581145924CB29FD0BF839438BB": "Full file path: C:\\test\\text.txt (the text.txt file in the C:\\test folder is not scanned).", "subsubchoice.choice_51C0EB214BDC43D28849023CD4C76D": "Folder path: C:\\test (all contents in the C:\\test folder are not scanned).", "content.p_excluding_pst_file_realt_04CF5": "For example:", "content.p_80E5E45455EE46BD938A7A8C7EC5AE": "For more information on using wildcards, see Using wildcards in exclusions in real-time scanning.", "content.note_536829F5BB864C388491DBB093474B": "Note: DeepGuard does not support exclusions that are configured using wildcards or device names.", "content.p_01E77ACCBC624BC3B33382F8D32179": "You can also add a comment if you want to keep a record of why the file or application was excluded.", "substep.substep_3730FFEB99394099B06B2047FFB426": "Enter the path or hash that you want to exclude from scanning.", "substep.substep_0DEDD7149F724EB184B3F6828BE4D8": "Click OK.", "step.step_BFEACE6E03664381BD50AF96AA7B9B": "Go to the Settings tab and select Windows > Real-time scanning.", "step.step_8747367BB17346C18ABAD65D1B300F": "If you do not want to allow users to exclude files or applications from scanning, select Prevent users from adding scanning exclusions.", "step.step_2DA2A1F814E04AA39BBE6F97F0C1C8": "Click the following icon to distribute the policy:
", "desc": [ "content.p_E6DE6B63FC5E4C2DBBBCBC4CC8BCFC", "content.p_F36E6FD133B6432F9981C10E0A6086", { "steps.steps_DEB5DCA21E144A0389094D3AD444E8": [ "step.step_3D1E57E6B17149648B632C8CA72C24", "step.step_BFEACE6E03664381BD50AF96AA7B9B", "content.p_2682E2707123481181E0E8320E0291", { "substeps.substepsalpha_F098B22D25CD40858B60AF57F952A0": [ "substep.substep_4ECCBA57505247D5809F18F8335D2E", "substep.substep_FF1CCAE406964E2C9CA6E83EACFC3C", "content.note_45FBDCC1F71F4763A364B586E96F0B" ] }, "content.p_CB2D59A5D0F04BB29172A32017D95E", { "substeps.substepsalpha_255832ECEA78435ABA565FE03B974E": [ "substep.substep_EF0FCDDDFAE941C1B3241CDE0F4834", "substep.substep_6E555C3723E44108AC108BE805E0CF", "substep.substep_0890D4E46EBF4B969BA1ABEBFBBA2A", "content.p_6DDEE8E82BC447D58534816901000B", "substep.substep_1A6DE2E9AF7E4DFE886294DE6551F7", "content.p_425A17E63AC34220B6F7BCF0FEE320", "content.p_CD8A295A0C274952BDC5BA871F2887", "content.p_9D0B07AF3DE640FFAD3DEB06C32BC4", "substep.substep_3730FFEB99394099B06B2047FFB426", "content.p_excluding_pst_file_realt_04CF5", { "subsubchoices.ul_516D30506A5F4B589C768F255F3C59": [ "subsubchoice.choice_930D6D6374CA41E792A84D653C585D", "subsubchoice.choice_B37E581145924CB29FD0BF839438BB", "subsubchoice.choice_51C0EB214BDC43D28849023CD4C76D" ] }, "content.p_80E5E45455EE46BD938A7A8C7EC5AE", "content.note_536829F5BB864C388491DBB093474B", "content.p_01E77ACCBC624BC3B33382F8D32179", "substep.substep_0DEDD7149F724EB184B3F6828BE4D8" ] }, "step.step_8747367BB17346C18ABAD65D1B300F", "step.step_2DA2A1F814E04AA39BBE6F97F0C1C8" ] } ] }, "task_excluding_processes_realtime_scanning-16.10-en.json": { "title": "title_1F23055B6D9A44F1B5CA29E3C8B450F6", "title_1F23055B6D9A44F1B5CA29E3C8B450F6": "Excluding processes from real-time scanning", "shortdesc": "shortdesc_D0488507A5EC4D57974010B50031C831", "shortdesc_D0488507A5EC4D57974010B50031C831": "To optimize disk performance on managed hosts, you may want to exclude some processes from scanning. ", "content.p_8296A7AD80674FF7970E55EA005D7C": "Follow these instructions:", "step.step_92CE07285DF7443BB0C9CB32B99C2E": "Select Root on the Domain tree.", "step.step_E9DF82A333C14326A0CA79313EB15E": "Go to the Settings tab and select Windows > Real-time scanning.", "step.step_AFE626080D594F6781249FA4D0A7C6": "Select Do not scan the following processes.", "content.p_B601B701F506476F8AFB3430FEEA27": "Enter the full path for each process, for example C:\\Program Files\\Application\\app1.exe. You can also use system environment variables in the path, for example %ProgramFiles%\\Application\\app1.exe.", "content.note_046AB589C7DA45AEA18B606B914F44": "Note: Any files that the excluded processes access are also excluded from scanning.", "step.step_A769567B81294F66B738179ABB005F": "Enter each process to exclude on its own line in Excluded processes.", "step.step_44E5C50F847B4520A590970A879CA4": "Click the following icon to distribute the policy:
", "desc": [ "content.p_8296A7AD80674FF7970E55EA005D7C", { "steps.steps_0359330CBE084CAB9C8B4088301987": [ "step.step_92CE07285DF7443BB0C9CB32B99C2E", "step.step_E9DF82A333C14326A0CA79313EB15E", "step.step_AFE626080D594F6781249FA4D0A7C6", "step.step_A769567B81294F66B738179ABB005F", "content.p_B601B701F506476F8AFB3430FEEA27", "content.note_046AB589C7DA45AEA18B606B914F44", "step.step_44E5C50F847B4520A590970A879CA4" ] } ] }, "task_scanning_content_network_drives-16.10-en.json": { "title": "title_09394F6DDFA7464FAD514681A741A76C", "title_09394F6DDFA7464FAD514681A741A76C": "Scanning content on network drives", "shortdesc": "shortdesc_59CCD2119AE94C62B554AA61A08F839A", "shortdesc_59CCD2119AE94C62B554AA61A08F839A": "You can set real-time scanning to check network drive files when they are run or whenever they are accessed. ", "step.step_503AF21A62F04FAFBA04C96CD6D5C6": "Select Root on the Domain tree.", "step.step_2BF299B3DF40479DA8E5631AEB08A3": "Go to the Settings tab and select Windows > Real-time scanning.", "cell.choptionhd_scanning_content_network_0D67C": "Option", "cell.chdeschd_scanning_content_network_0372F": "Description", "cell.choption_scanning_content_network_01EB1": "Scan executed files", "cell.chdesc_scanning_content_network_079CD": "Real-time scanning checks files on a network drive only when they are run or opened.", "cell.choption_scanning_content_network_0776E": "Scan all accessed files", "cell.chdesc_scanning_content_network_0D6C1": "Real-time scanning checks files on a network drive whenever they are accessed.", "step.step_2301182D763C4DCD8B35AAB2D44D64": "Select Scan network drives and choose the scan mode:", "step.step_D1CA756534CF4618B55B3F034872A3": "Click the following icon to distribute the policy:
", "desc": [ { "steps.steps_8296CAA091DC4854B1D7BE1A41B5D5": [ "step.step_503AF21A62F04FAFBA04C96CD6D5C6", "step.step_2BF299B3DF40479DA8E5631AEB08A3", "step.step_2301182D763C4DCD8B35AAB2D44D64", { "table.table_C29D2D7C980C4DB78FB56704F594FE": [ { "thead.chhead_scanning_content_network_07A20": [ "cell.choptionhd_scanning_content_network_0D67C", "cell.chdeschd_scanning_content_network_0372F" ] }, { "row.choice_EF30BEFC8D784BABAF509DF27CC77C": [ "cell.choption_scanning_content_network_01EB1", "cell.chdesc_scanning_content_network_079CD" ] }, { "row.choice_01CACD0CB2A64531995DDFF31D1524": [ "cell.choption_scanning_content_network_0776E", "cell.chdesc_scanning_content_network_0D6C1" ] } ] }, "step.step_D1CA756534CF4618B55B3F034872A3" ] } ] }, "task_using_security_cloud-16.10-en.json": { "title": "title_7DB0E656440342BCBE7FB2496774E154", "title_7DB0E656440342BCBE7FB2496774E154": "Using Security Cloud for malware scanning", "shortdesc": "shortdesc_F51B42C7BD4C4AE18A9130A5E845F52A", "shortdesc_F51B42C7BD4C4AE18A9130A5E845F52A": "WithSecure's Security Cloud is a cloud network that houses the various databases and automated analysis systems, which support and enhance the performance of WithSecure security products. ", "content.p_7DA6EFAFB7EE497592CBAD5039BD23": "Services connect to Security Cloud to retrieve the most up-to-date details of threats seen in the wild by other protected machines, which makes the response more efficient and effective. The service queries the reputation details of all objects, such as files and URLs. These queries contain anonymous metadata about the object, such as file size and anonymized path, and are sent to the Security Cloud for combined data analysis. Security Cloud does not collect IP addresses or other private information, queries are completely anonymous to maintain privacy.", "content.p_4BBB7B6212F043B9BC4AD29F7165FA": "By evaluating the combined metadata with information drawn from the in-house databases and various other sources, the automated analysis systems provide a fully-informed, up-to-date risk assessment for the object, immediately blocking threats that have been seen before by any other service or device that is connected to Security Cloud. This also removes the need to perform any further analysis of the object, which reduces the impact on the system resources that the service uses.", "content.p_60FB68036E014C90828B47C2A41D74": "Follow these instructions:", "step.step_87CE3D211E734656B1CF1F215036F3": "Select the target domain.", "step.step_9AB7EE66F2A947788F81474A5C379B": "Go to the Settings tab and select Windows > Real-time scanning.", "content.note_84B88206CAAA4A7887A4DAC92DCF4D": "Note: The Security Cloud setting applies to all scanning types, not just real-time scanning.", "step.step_88CBE9D0DB9B4E04B740611FDF9CD4": "Select Use Security Cloud.", "step.step_90D5A566B7D04EC7A681D560202C99": "Click the following icon to distribute the policy:
", "desc": [ "content.p_7DA6EFAFB7EE497592CBAD5039BD23", "content.p_4BBB7B6212F043B9BC4AD29F7165FA", "content.p_60FB68036E014C90828B47C2A41D74", { "steps.steps_E32BA2CE9AFC45438DEBC5A4D9561B": [ "step.step_87CE3D211E734656B1CF1F215036F3", "step.step_9AB7EE66F2A947788F81474A5C379B", "step.step_88CBE9D0DB9B4E04B740611FDF9CD4", "content.note_84B88206CAAA4A7887A4DAC92DCF4D", "step.step_90D5A566B7D04EC7A681D560202C99" ] } ] }, "task_configuring_scheduled_scanning-16.10-en.json": { "title": "title_53C856EEA78145079E23888133F10773", "title_53C856EEA78145079E23888133F10773": "Configuring scheduled scanning", "shortdesc": "shortdesc_D21B299DF4B7459E83C5B025DC18C948", "shortdesc_D21B299DF4B7459E83C5B025DC18C948": "You can add scheduled scanning tasks.", "content.p_EA29F31009F24B099A06EEFB016637": "In this example, a scheduled scanning task is added in a policy for the whole policy domain. The scan is to be run weekly, every Monday at 8 p.m, starting from August 24, 2020.", "content.p_AB49F847C93D436CAC9CCC6D041C90": "Follow these instructions:", "step.step_20078B9853684110816628FF667C47": "Select Root on the Domain tree.", "content.p_9A92EEAD36C44E7A821EDE42EEDA42": "The currently set scheduled tasks are displayed on the Scheduled scanning table. Now you can add scheduled scanning as a new task.", "step.step_7B050D36AD204E178147AA2E2F152B": "On the Settings tab, select Windows > Manual scanning.", "content.p_1C7C07CC97F84E8A86D069989E2C88": "This adds a new row to the Scheduled scanning table.", "step.step_437A0C1EA0454FD18513350BA869B1": "Click Add.", "step.step_F65C09DC83ED42E783B5D2B021FB8E": "Click the Name cell on the row you just created and then click Edit.", "content.p_DFDDB44A529449459B32B4F94E6A4A": "For example, Scheduled scanning for all hosts.", "step.step_2BF0E2DEC5354BAE940532B9B0B94E": "The Name cell is now activated and you can enter a name for the new task.", "step.step_64F471DE22434786A89EAE125553F0": "Next click the Scheduling parameters cell, and then click Edit.", "content.p_758DCFC67E9E4B00887DB6CD8C47D6": "A scheduled scan that is to be run weekly, every Monday starting at 8 p.m, from August 24, 2020 onwards, is configured as follows: /t20:00 /b2020-08-24 /rweekly", "content.note_F0080C908C7D4864B5B6F65CE60FFE": "Note: When the Scheduling parameters cell is selected, the parameters that you can use and their formats are displayed as a help text in the Messages pane (below the Scheduled tasks table).", "step.step_7ACEBC79D82F46148C6CB7690B2B69": "Now you can enter the parameters for the scheduled scan.", "step.step_13273EF2F6B54FE4AC0960CFC1A903": "Select the task type by clicking the Task type cell and then clicking Edit.", "content.p_CF3FD90A94E942EDA670ADFD112461": "The scanning task is now ready for distribution.", "step.step_5D9D78FE488D4D8F87509B7F9190C5": "From the drop-down list that opens select Scan local drives.", "step.step_18F780659B18409EAEB31E26E128C2": "Click the following icon to distribute the policy:
", "content.p_B51C6CCF801A4275B0F7337B601C0C": "Running scheduled scans on specific weekdays and days of the month:", "content.p_3F6CB0A365A84D56BF2CE51F8CEB6D": "When you are configuring a weekly scheduled scan, you can also define specific weekdays when the scan is to be run. Similarly, when you are configuring a monthly scheduled scan, you can define specific days of the month when the scan is to be run. For both of these, you can use the /Snn parameter:", "content.p_EF926A2D1C934D20B2707D7FBF162B": "For example, /t18:00 /rweekly /s2 /s5 means that the scan is run every Tuesday and Friday at 6 p.m.", "choice.choice_B5101A0C311C4D0EB0AD8011A496B2": "For weekly scheduled scans you can use /rweekly together with parameters /s1 - /s7. /s1 means Monday and /s7 means Sunday.", "content.p_20CC4B115FD14AF991734B4C933981": "For example, /t18:00 /rmonthly /s5 /s20 means that the scan is run on the 5th and 20th of each month at 6 p.m.", "choice.choice_66450213077942D39E03C2C2302337": "For monthly scheduled scans you can use /rmonthly together with parameters /s1 - /s31.", "content.note_2B9F6AD3ADC441DAABDB742CA011AF": "Note: If you do not define a weekday, weekly scheduled scans are run on each Monday by default. Monthly scheduled scans are run on the first day of each month by default, if you have not defined a specific day.", "desc": [ "content.p_EA29F31009F24B099A06EEFB016637", "content.p_AB49F847C93D436CAC9CCC6D041C90", { "steps.steps_6AAE3E47C7EC4E6A8C150060C71004": [ "step.step_20078B9853684110816628FF667C47", "step.step_7B050D36AD204E178147AA2E2F152B", "content.p_9A92EEAD36C44E7A821EDE42EEDA42", "step.step_437A0C1EA0454FD18513350BA869B1", "content.p_1C7C07CC97F84E8A86D069989E2C88", "step.step_F65C09DC83ED42E783B5D2B021FB8E", "step.step_2BF0E2DEC5354BAE940532B9B0B94E", "content.p_DFDDB44A529449459B32B4F94E6A4A", "step.step_64F471DE22434786A89EAE125553F0", "step.step_7ACEBC79D82F46148C6CB7690B2B69", "content.p_758DCFC67E9E4B00887DB6CD8C47D6", "content.note_F0080C908C7D4864B5B6F65CE60FFE", "step.step_13273EF2F6B54FE4AC0960CFC1A903", "step.step_5D9D78FE488D4D8F87509B7F9190C5", "content.p_CF3FD90A94E942EDA670ADFD112461", "step.step_18F780659B18409EAEB31E26E128C2" ] }, "content.p_B51C6CCF801A4275B0F7337B601C0C", "content.p_3F6CB0A365A84D56BF2CE51F8CEB6D", { "choices.ul_981F1A8CE1054218969671015B5F20": [ "choice.choice_B5101A0C311C4D0EB0AD8011A496B2", "content.p_EF926A2D1C934D20B2707D7FBF162B", "choice.choice_66450213077942D39E03C2C2302337", "content.p_20CC4B115FD14AF991734B4C933981" ] }, "content.note_2B9F6AD3ADC441DAABDB742CA011AF" ] }, "task_configuring_deepguard-16.10-en.json": { "title": "title_45289270777C40E184A74362848C46A4", "title_45289270777C40E184A74362848C46A4": "Configuring DeepGuard", "shortdesc": "shortdesc_F9785550B0D341BD879F3E9569E1DA00", "shortdesc_F9785550B0D341BD879F3E9569E1DA00": "DeepGuard is a host-based intrusion prevention system that analyzes the behavior of files and programs. ", "content.p_ECD598B9F130405981D6132C8A87B8": "DeepGuard can be used to block intrusive ad pop-ups and to protect important system settings, as well as Internet Explorer settings against unwanted changes.", "content.p_F3A5CD48570C419A8FF3817C179EFF": "If an application tries to perform a potentially dangerous action, it will be checked for trust. Safe applications are allowed to operate, while actions by unsafe applications are blocked.", "content.p_6F83EAB571734456A84B5E027FA4CB": "To turn on DeepGuard:", "step.step_1168FE640EB2407BA4DEA3645B7546": "Go to the Settings tab and select Windows > Real-time scanning.", "step.step_5BD86B1C254B45EF88A42D0F5E9FB6": "Select Enable DeepGuard.", "content.note_C0051BFCFB80422A98A59409687E5C": "Note: This feature is only available for version 15 and newer clients.", "step.step_74B54388910B4D5AAC22FA14434786": "Select Block rare and suspicious files if you want to use DeepGuard's prevalence-based rules to block files that may not be commonly recognized.", "step.step_B164D54E6D5A4FB39DCFF2AF922948": "Click the following icon to distribute the policy:
", "desc": [ "content.p_ECD598B9F130405981D6132C8A87B8", "content.p_F3A5CD48570C419A8FF3817C179EFF", "content.p_6F83EAB571734456A84B5E027FA4CB", { "steps.steps_70BD406325E9445C92F2FD5D6A0546": [ "step.step_1168FE640EB2407BA4DEA3645B7546", "step.step_5BD86B1C254B45EF88A42D0F5E9FB6", "step.step_74B54388910B4D5AAC22FA14434786", "content.note_C0051BFCFB80422A98A59409687E5C", "step.step_B164D54E6D5A4FB39DCFF2AF922948" ] } ] }, "concept_dataguard-16.10-en.json": { "title": "title_E407DC5C4846436EA6670DA2AA3CD7E1", "title_E407DC5C4846436EA6670DA2AA3CD7E1": "DataGuard (a Premium feature)", "shortdesc": "shortdesc_AC77F053B76C4E1E90C775BF2B8F461C", "shortdesc_AC77F053B76C4E1E90C775BF2B8F461C": "DataGuard is a feature that strengthens DeepGuard by monitoring specific folders to prevent untrusted applications from modifying files on managed hosts. ", "content.p_76A3DD937D30432B97BF3DC7D4EB35": "DataGuard is especially useful against any new ransomware that is able to get past other security layers.", "content.p_FF3637C7D0164A0AB4D3687632EEA1": "In Policy Manager, you can set the folders that DataGuard monitors and protects. There are predefined options for the default folders for user content, such as Documents, Music, Pictures, etc. You can also set the trusted applications that are allowed to access the protected folders and modify the files there. Applications that are not considered trusted are stopped if they try to modify any protected files.", "desc": [ "content.p_76A3DD937D30432B97BF3DC7D4EB35", "content.p_FF3637C7D0164A0AB4D3687632EEA1" ] }, "task_setting_up_dataguard-16.10-en.json": { "title": "title_F64BA4F899FE448B81146777AF1AF433", "title_F64BA4F899FE448B81146777AF1AF433": "Setting up DataGuard", "shortdesc": "shortdesc_4903F3D504CC4A709037A89BB9F85DFF", "shortdesc_4903F3D504CC4A709037A89BB9F85DFF": "You can define the folders that DataGuard protects on managed computers, and add trusted applications that you do not want DataGuard to block ", "content.p_468A83BC8F4A4BC681778E09C45E11": "When DataGuard is turned on, untrusted applications and malware (including ransomware) cannot modify files in folders that you define as protected.", "content.p_CFE8F3FEC82B4359A852B6A44B9465": "", "content.note_AFFBF9E139B748AE974741F184D345": "Note: Be careful in selecting the protected folders and trusted applications for DataGuard. Adding a wide range of data (either lots of folders or, for example, C:\\) can cause a lot of unnecessary interruptions. Also, adding a very wide scope of locations to the trusted applications list may allow malware to modify protected files.", "content.p_5F5148F2D2034EF7817AFB39F66BDD": "To use DataGuard:", "step.step_08BD15984AF247C4BDFF10F7220EE7": "Go to the Settings tab and select Windows > DataGuard.", "step.step_566710E59CCF4831A7359D61BF86A8": "Select Turn on DataGuard protection.", "content.p_D24AE33B687F4CDD8104C7423980BE": "To add more protected folders:", "content.p_28E35D805056408DA861F49B1D409B": "You can use environment variables in the path. User environment variables apply to the corresponding paths for each Windows user account on the computer. The supported variables are: %UserProfile%, %HomeDrive%, %HomePath%, %ProgramData%, %WinDir%, %SystemRoot%, %SystemDrive%, %ProgramFiles%, and %ProgramFiles(x86)%.", "substep.substep_7B53FE8839A8413185DC9EF210723E": "Enter the folder path in the Folder field.", "substep.substep_23C69A3D6FBD46D68616750BA781C1": "Add a description for the new folder in the Comments field.", "content.note_0EA8615F177748618EF166226E6660": "Note: Universal Naming Convention (UNC) paths are also supported for the protected folders.", "step.step_71638B22BB554FE8917F9018428C9C": "In the Protected data folders table, select the folders that you want to protect.", "step.step_4C2B973A26D5400A9CA8940D0605FB": "Select the applications that are allowed to modify files that are in protected folders.", "step.step_03236B00A9E546D2B88E0C7C4EFE5B": "Select Discover trusted applications automatically if you want to allow known, trusted system applications to modify the protected folders.", "subchoice.choice_09CDB9CEE9EA4851AFB74A83FB7C5F": "To add a single application, enter the full path to the executable including file name and extension.", "subchoice.choice_A25E0DB17E1245D4BF621DCCECE76B": "To add a folder that may contain several applications, enter the path to the folder.", "content.note_2F2F0DD249BE4EF69515F76213CB8A": "Note: Some applications and standard Windows features may require adding more than one application file to the list of trusted applications. For example, the print-to-PDF functionality in Windows uses the following executable files: <Windows folder>\\System32\\spoolsv.exe and <Windows folder>\\System32\\printfilterpipelinesvc.exe.", "step.step_52C9AD45714B4997A841C9B56A4F0C": "Add more trusted applications to the table if necessary.", "step.step_E548D16506564176964669BE6598F2": "Click the following icon to distribute the policy:
", "content.p_177E8A79133C49D5885C2E2D4A71A9": "We recommend that you apply the common practices and tools for your organization when considering the protected folders and trusted applications for DataGuard. It is also a good idea to apply specific rules for separate policy domains where possible. For example, if your domain tree is structured according to teams or departments, you can apply separate rules for developers and salespeople.", "desc": [ "content.p_468A83BC8F4A4BC681778E09C45E11", "content.note_AFFBF9E139B748AE974741F184D345", "content.p_5F5148F2D2034EF7817AFB39F66BDD", { "steps.steps_9F8A4026B9FF4D5F9E10CE83E3689A": [ "step.step_08BD15984AF247C4BDFF10F7220EE7", "step.step_566710E59CCF4831A7359D61BF86A8", "step.step_71638B22BB554FE8917F9018428C9C", "content.p_D24AE33B687F4CDD8104C7423980BE", { "substeps.substepsalpha_809B1C1EAFD34EBA870EEF0CD8C1FD": [ "substep.substep_7B53FE8839A8413185DC9EF210723E", "content.p_28E35D805056408DA861F49B1D409B", "substep.substep_23C69A3D6FBD46D68616750BA781C1" ] }, "content.note_0EA8615F177748618EF166226E6660", "step.step_4C2B973A26D5400A9CA8940D0605FB", "step.step_03236B00A9E546D2B88E0C7C4EFE5B", "step.step_52C9AD45714B4997A841C9B56A4F0C", { "subchoices.choices_901B870524B34A348ED54644B8CABB": [ "subchoice.choice_09CDB9CEE9EA4851AFB74A83FB7C5F", "subchoice.choice_A25E0DB17E1245D4BF621DCCECE76B" ] }, "content.note_2F2F0DD249BE4EF69515F76213CB8A", "step.step_E548D16506564176964669BE6598F2" ] }, "content.p_177E8A79133C49D5885C2E2D4A71A9" ] }, "concept_managing_quarantined_objects-16.10-en.json": { "title": "title_6935E751C52B4CE0831EE816AA348E4A", "title_6935E751C52B4CE0831EE816AA348E4A": "Managing quarantined objects", "shortdesc": "shortdesc_88E382EC17014878BA76228712A1DFFB", "shortdesc_88E382EC17014878BA76228712A1DFFB": "Quarantine management gives you the possibility to process objects that have been quarantined on host machines in a centralized manner. ", "content.p_C7F4C9F1B07D46429BECACC303DDDA": "All infected files and spyware or riskware that have been quarantined on host machines are displayed on the Settings > Windows > Quarantine management page. From there, you can either release the objects from quarantine, or delete them.", "content.note_636E9D26531A4D41A18034FBB1DF7E": "Note: Quarantine management should be used primarily for troubleshooting purposes. For example, if a business-critical application is considered riskware and it has not yet been included in the virus definition database, you can use quarantine management to allow it to be used. Such cases are relatively rare, and once new virus definition updates that treat the application as normal are available, the problem should be fixed automatically.", "desc": [ "content.p_C7F4C9F1B07D46429BECACC303DDDA", "content.note_636E9D26531A4D41A18034FBB1DF7E" ] }, "task_deleting_quarantined_objects-16.10-en.json": { "title": "title_3D1E3C5DEB36463E88EFA9A538558F26", "title_3D1E3C5DEB36463E88EFA9A538558F26": "Deleting quarantined objects", "shortdesc": "shortdesc_3438E3933B8248E69BC1C26260BA7731", "shortdesc_3438E3933B8248E69BC1C26260BA7731": "Infected files, spyware or riskware that have been quarantined on hosts can be removed from quarantine, in which case they are deleted from the host machine. ", "content.p_C80091209E2641BC94DD3AA074BB14": "Follow these instructions:", "step.step_5F04A1E0AD954971B7AB1233672E1F": "Select the target domain.", "step.step_2A90AE24F3B34430BE318F62058845": "Go to the Settings tab and select Windows > Quarantine management.", "content.p_1CE15F670791461CA665D580CEFA64": "The object is moved to the Actions to perform on quarantined objects table, with Delete given as the Action for the object.", "step.step_0B77B92429734EA09FAFC574498082": "Select the quarantined object you want to delete on the Quarantined objects table, and click Delete.", "step.step_6C2D0656A3074A4A99EC9050A4F3F6": "Click the following icon to distribute the policy:
", "desc": [ "content.p_C80091209E2641BC94DD3AA074BB14", { "steps.steps_E9CCE373B29A419BB972EDC1684448": [ "step.step_5F04A1E0AD954971B7AB1233672E1F", "step.step_2A90AE24F3B34430BE318F62058845", "step.step_0B77B92429734EA09FAFC574498082", "content.p_1CE15F670791461CA665D580CEFA64", "step.step_6C2D0656A3074A4A99EC9050A4F3F6" ] } ] }, "task_releasing_quarantined_objects-16.10-en.json": { "title": "title_3D1E3C5DEB36463E88EFA9A538558F26", "title_3D1E3C5DEB36463E88EFA9A538558F26": "Releasing quarantined objects", "shortdesc": "shortdesc_3438E3933B8248E69BC1C26260BA7731", "shortdesc_3438E3933B8248E69BC1C26260BA7731": "Infected files, spyware or riskware that have been quarantined on hosts can be released from quarantine, in which case they are allowed on the host machines and can be accessed and run normally. ", "content.p_3378E82D3A324BB29476CDBCA1BD10": "Follow these instructions:", "step.step_5F04A1E0AD954971B7AB1233672E1F": "Select the target domain.", "content.p_B372CB8544464C1CBE8542214617BB": "Exclusion rules are required to make sure that the object will not be quarantined again in future. If the object is listed as a virus or infected file:", "substep.substep_C1B9F76300E8435C8BC10962A12B3D": "Go to the Settings > Windows > Quarantine management page and copy the object's file path.", "substep.substep_6D2F16F16CCA435AB521F8404260EC": "Go to the Settings tab and select Windows > Real-time scanning.", "substep.substep_73874494130446578E14BF9D8DBAC3": "Check that Do not scan the following files and applications is selected.", "substep.substep_8E61EBCE1A9B492DA042D1CDFA7212": "Click Add next to the exclusion table.", "substep.substep_21352CC363FB45C3B280AF17636875": "Select All scans as the scope, select File path, and paste the object's file path to the path field.", "substep.substep_2AAA6E4A19AB49B2930BCDA9E65589": "Click OK.", "step.step_62EA265014714B29BCCCABFF9C0EF3": "Create an exclusion rule for the object.", "step.step_2A90AE24F3B34430BE318F62058845": "Go to the Settings tab and select Windows > Quarantine management.", "content.p_1CE15F670791461CA665D580CEFA64": "The object is moved to the Actions to perform on quarantined objects table, with Release given as the Action for the object.", "step.step_0B77B92429734EA09FAFC574498082": "Select the quarantined object you want to allow on the Quarantined objects table, and click Release.", "step.step_6C2D0656A3074A4A99EC9050A4F3F6": "Click the following icon to distribute the policy:
", "desc": [ "content.p_3378E82D3A324BB29476CDBCA1BD10", { "steps.steps_E9CCE373B29A419BB972EDC1684448": [ "step.step_5F04A1E0AD954971B7AB1233672E1F", "step.step_62EA265014714B29BCCCABFF9C0EF3", "content.p_B372CB8544464C1CBE8542214617BB", { "substeps.substepsalpha_9B9F59F2A1E444F780AB68CA03807F": [ "substep.substep_C1B9F76300E8435C8BC10962A12B3D", "substep.substep_6D2F16F16CCA435AB521F8404260EC", "substep.substep_73874494130446578E14BF9D8DBAC3", "substep.substep_8E61EBCE1A9B492DA042D1CDFA7212", "substep.substep_21352CC363FB45C3B280AF17636875", "substep.substep_2AAA6E4A19AB49B2930BCDA9E65589" ] }, "step.step_2A90AE24F3B34430BE318F62058845", "step.step_0B77B92429734EA09FAFC574498082", "content.p_1CE15F670791461CA665D580CEFA64", "step.step_6C2D0656A3074A4A99EC9050A4F3F6" ] } ] }, "concept_configuring_firewall_settings-16.10-en.json": { "title": "title_366D9E8FEF1D461394A37519DA8A7C25", "title_366D9E8FEF1D461394A37519DA8A7C25": "Configuring firewall settings", "shortdesc": "shortdesc_1AF688A40F484AD68D2732DF3E919008", "shortdesc_1AF688A40F484AD68D2732DF3E919008": "This section provides an overview of the firewall settings and how you can configure them to suit your network. ", "content.p_823D38F74DB34231BA690C6172EEBC": "The firewall protects computers against unauthorized access from the internet as well as against attacks originating from inside the LAN.", "content.p_8E2494A0CA5A4B0BA08AC8B69A1FF2": "WithSecure product versions 14.00 and newer use the Windows Firewall component. WithSecure's firewall profiles provide an additional security layer on top of the Windows Firewall user rules and other domain rules. The WithSecure firewall profiles or rules are not applied if Windows Firewall is off. Therefore, we recommend that you always keep the firewall on.", "content.p_8D5DCA7DE557479EBB5BD750FF0020": "Older product versions use WithSecure's own firewall component. This contains predefined security levels, each of which has a set of pre-configured firewall rules associated with them. Different security levels can be assigned to different users based on, for example, company security policy, user mobility, location, and user experience.", "content.p_0007E49C190048FFA995660C4AE6ED": "", "content.note_56A78A1F6FE94DD5859E2328C93B5D": "Note: If you use a GPO or third-party firewall, in most cases you need to turn off firewall profiles to avoid conflicts. If this is the case, make sure that the Enable firewall configuration through Policy Manager setting on the Settings > Windows > Firewall page is not selected.", "desc": [ "content.p_823D38F74DB34231BA690C6172EEBC", "content.p_8E2494A0CA5A4B0BA08AC8B69A1FF2", "content.p_8D5DCA7DE557479EBB5BD750FF0020", "content.note_56A78A1F6FE94DD5859E2328C93B5D" ], "related": [ "concept_firewall_settings_cs14-16.10-en" ] }, "task_turning_firewall_on-16.10-en.json": { "title": "title_BFF2E88191F64044BBC8ACFD660E12F7", "title_BFF2E88191F64044BBC8ACFD660E12F7": "Turning on the firewall", "shortdesc": "shortdesc_493475B5F49843F7BB55CCB8791F6FD7", "shortdesc_493475B5F49843F7BB55CCB8791F6FD7": "Keep the firewall turned on to block intruders from accessing computers in your managed network. ", "step.step_10C900C32E694419A4383F9FE26EA5": "Select Root on the Domain tree.", "step.step_370EEE67A3364F8E9D4DB44A27FA88": "Go to the Settings tab and select Windows > Firewall.", "content.note_117F218A20B742A292B204AD196992": "Note: If you use a GPO or third-party firewall, in most cases you need to make sure that this setting is not selected to avoid conflicts.", "step.step_D96B15B18A434CFB8ECA08B4CC6247": "Select Enable firewall configuration through Policy Manager.", "step.step_33448620089341519734EB6DD3F8C4": "Select Enable firewall.", "step.step_F272A25036034D49AC1037B46E12B5": "Click the following icon to distribute the policy:
", "desc": [ { "steps.steps_B90D602A5CAC4313A49BE0492F8F0B": [ "step.step_10C900C32E694419A4383F9FE26EA5", "step.step_370EEE67A3364F8E9D4DB44A27FA88", "step.step_D96B15B18A434CFB8ECA08B4CC6247", "content.note_117F218A20B742A292B204AD196992", "step.step_33448620089341519734EB6DD3F8C4", "step.step_F272A25036034D49AC1037B46E12B5" ] } ] }, "concept_configuring_network_quarantine-16.10-en.json": { "title": "title_F3A95951429741419BBD24727F0FDEA4", "title_F3A95951429741419BBD24727F0FDEA4": "Configuring network quarantine", "shortdesc": "shortdesc_8DB0B9D656384F1EB1F8FAC902E7B955", "shortdesc_8DB0B9D656384F1EB1F8FAC902E7B955": "Network quarantine is a firewall feature that makes it possible to restrict the network access of hosts that have very old virus definitions and/or that have real-time scanning turned off. ", "content.p_595E30662E0C4756B6B61E2A8B05B5": "The normal access rights of such hosts are automatically restored once the virus definitions are updated and/or real-time scanning is turned on again.", "content.p_F9A1E18B66CE492589D0328A659B77": "This section describes the network quarantine settings and contains an example of how to enable the network quarantine feature in the managed domain. There is also a short description of how to configure the network quarantine security level by adding new firewall rules.", "desc": [ "content.p_595E30662E0C4756B6B61E2A8B05B5", "content.p_F9A1E18B66CE492589D0328A659B77" ] }, "task_enabling_network_quarantine_whole_domain-16.10-en.json": { "title": "title_535CFD7474164690B1082E51A811A419", "title_535CFD7474164690B1082E51A811A419": "Turning network quarantine on in the whole domain", "shortdesc": "shortdesc_5B744229BBFC461696162E1697CD7478", "shortdesc_5B744229BBFC461696162E1697CD7478": "You can enable network quarantine for the whole domain by following the steps given here. ", "content.p_433ED9CD8F884F69808D08CC080C50": "Follow these instructions:", "step.step_2CBFCE97C47644E59BFD181C2C45FB": "Select Root on the Domain tree.", "step.step_82CDB53679A94208AD0BD190D0C471": "Go to the Settings tab and select Windows > Firewall.", "step.step_E87463ACDBDC4BC89FE170CC507BC6": "Select Enable network quarantine.", "step.step_B02D6B4180C74EE1BE312B85512610": "Specify the Virus definitions age to activate network quarantine.", "step.step_BFB5C3AF57714C2FB6A4F463C7DFEC": "If you want to restrict the host from accessing the network when real-time scanning is turned off, select Activate network quarantine on host if real-time scanning is disabled.", "step.step_741502ECF5F146B9B482CC42704C9A": "Click Configure network isolation rules to modify the firewall rules for quarantined hosts.", "step.step_DE6A3073288A4EDF9EE91999A8C784": "Click the following icon to distribute the policy:
", "desc": [ "content.p_433ED9CD8F884F69808D08CC080C50", { "steps.steps_E19EA0C3B8BD4F41B7FA5AB06382C2": [ "step.step_2CBFCE97C47644E59BFD181C2C45FB", "step.step_82CDB53679A94208AD0BD190D0C471", "step.step_E87463ACDBDC4BC89FE170CC507BC6", "step.step_B02D6B4180C74EE1BE312B85512610", "step.step_BFB5C3AF57714C2FB6A4F463C7DFEC", "step.step_741502ECF5F146B9B482CC42704C9A", "step.step_DE6A3073288A4EDF9EE91999A8C784" ] } ] }, "concept_finetuning_network_quarantine-16.10-en.json": { "title": "title_33B495576BF44E8EA8F9DCF6C5923641", "title_33B495576BF44E8EA8F9DCF6C5923641": "Fine-tuning network quarantine", "shortdesc": "shortdesc_AFEAA0D5B6504926A195B4D0D6EFF1D5", "shortdesc_AFEAA0D5B6504926A195B4D0D6EFF1D5": "Network quarantine is implemented by forcing hosts to use a restricted set of firewall rules. ", "content.p_E267660807024F1D98BED6F538DF2B": "You can add new Allow rules to the network isolation rules to allow additional network access to hosts in network quarantine. You should not restrict access further as this may cause hosts to lose network connectivity.", "content.p_430F0C1ACB6344B9A70EF0ECC5EB8E": "", "content.note_BAB7004B10E24461BF68DE6B8CCFCD": "Note: For product versions 13 and older, quarantined hosts are forced to the Network quarantine firewall security level. This security level has a restricted set of firewall rules. Similarly to the network isolation rules for newer product versions, you can add new Allow rules to the security level, but should not restrict access further.", "desc": [ "content.p_E267660807024F1D98BED6F538DF2B", "content.note_BAB7004B10E24461BF68DE6B8CCFCD" ] }, "concept_firewall_settings_cs14-16.10-en.json": { "title": "title_4DE5F2DCC7B04A6C8D5672C9B5941964", "title_4DE5F2DCC7B04A6C8D5672C9B5941964": "Firewall settings for Windows clients", "shortdesc": "shortdesc_F4FAE7F2AC4343FEAD0CD5BD1C05A9DC", "shortdesc_F4FAE7F2AC4343FEAD0CD5BD1C05A9DC": "This section describes the settings that you can configure for WithSecure's firewall profiles, which provide an additional layer of security for Windows Firewall. ", "content.p_CC798770BD5741E3A3F9C7DC907471": "", "content.note_B5D028742BAF4241A083855669C06F": "Note: You must have Windows Firewall turned on for your network via Group Policy Object (GPO) to manage the firewall settings through Policy Manager. If Windows Firewall is turned off via GPO, Policy Manager cannot override those settings and the firewall policies will not be applied.", "desc": [ "content.note_B5D028742BAF4241A083855669C06F" ] }, "task_selecting_firewall_profile-16.10-en.json": { "title": "title_6B320BDA9E8947F7BCEB3094F86EFF11", "title_6B320BDA9E8947F7BCEB3094F86EFF11": "Selecting the active firewall profile for a domain", "shortdesc": "shortdesc_5F993271B7D84509A8D415AD561433CE", "shortdesc_5F993271B7D84509A8D415AD561433CE": "You can set a specific firewall profile for any domain within your managed network. ", "step.step_22A033DA041F4AC0A95E7836214F46": "Select the target domain.", "step.step_FD2B6C0787744796A0D56A2F0AE24D": "Go to the Settings tab and select Windows > Firewall.", "content.note_57388522526240FC9015D0EDE221DA": "Note: The default profile for WithSecure Server Security clients is set to Server.", "step.step_A98C9951C8EF42FDBDE2108D77283B": "Select the firewall profile for the domain from the Workstation host profile and Server host profile drop-down lists.", "step.step_63E0A516A4A449D69E571E1B2579E5": "Click the following icon to distribute the policy:
", "desc": [ { "steps.steps_1D192D8446474FE2B5664EBBFEC340": [ "step.step_22A033DA041F4AC0A95E7836214F46", "step.step_FD2B6C0787744796A0D56A2F0AE24D", "step.step_A98C9951C8EF42FDBDE2108D77283B", "content.note_57388522526240FC9015D0EDE221DA", "step.step_63E0A516A4A449D69E571E1B2579E5" ] } ] }, "task_creating_new_firewall_profile-16.10-en.json": { "title": "title_110CC9ABB3AA4C2CAA93F2175D62B3E1", "title_110CC9ABB3AA4C2CAA93F2175D62B3E1": "Creating a new firewall profile for a domain", "shortdesc": "shortdesc_BAE8ACD2B39D419CADCF80AF72FA9883", "shortdesc_BAE8ACD2B39D419CADCF80AF72FA9883": "You can create a new firewall profile by cloning an existing one. ", "content.p_17459F3330C14A9A90BA7CD89F8A72": "Follow these instructions:", "step.step_77BE4F8738594806801B7E4BC28C3F": "Select the target domain.", "step.step_D664E39E717346C68F0812D5E14621": "Go to the Settings tab and select Windows > Firewall.", "step.step_6B7BB1B7DBB24A94AFF347B4607613": "Click 14.x clients.", "step.step_BFB6611630334F67AD86AC623B060C": "In the Profile being edited drop-down, select the profile that you want to clone.", "step.step_1F94360651DA4740A521C7AFF733C3": "Click Clone.", "step.step_A543A20D66884B6CB53F78FB505BD8": "Enter a name for the new profile, then click OK.", "step.step_6F69EAE62E0047C2AA2E5D0EEC63D9": "Configure the settings and rules for the new profile.", "step.step_ECE125DAD69B415EB8510AE5AC5966": "Click the following icon to distribute the policy:
", "desc": [ "content.p_17459F3330C14A9A90BA7CD89F8A72", { "steps.steps_739A51ADC9AA46EB8478C4439A10E7": [ "step.step_77BE4F8738594806801B7E4BC28C3F", "step.step_D664E39E717346C68F0812D5E14621", "step.step_6B7BB1B7DBB24A94AFF347B4607613", "step.step_BFB6611630334F67AD86AC623B060C", "step.step_1F94360651DA4740A521C7AFF733C3", "step.step_A543A20D66884B6CB53F78FB505BD8", "step.step_6F69EAE62E0047C2AA2E5D0EEC63D9", "step.step_ECE125DAD69B415EB8510AE5AC5966" ] } ] }, "task_adding_firewall_rules-16.10-en.json": { "title": "title_2FF587F4DAE841BA9AAF1AB1B56C55D1", "title_2FF587F4DAE841BA9AAF1AB1B56C55D1": "Adding firewall rules", "shortdesc": "shortdesc_5CFF984AFC1C430FA162FC9D353472B4", "shortdesc_5CFF984AFC1C430FA162FC9D353472B4": "You can add new rules to firewall profiles that have been added within the scope of your domain access. ", "step.step_1DD1C15876324EBE984C08D4B41346": "Select the target domain.", "step.step_6F58D2A849554568ADE05956F63C8F": "Go to the Settings tab and select Windows > Firewall.", "step.step_184E8FD1B4FB49B2999A641B54F52A": "Click 14.x clients.", "step.step_013F7FE769234C8D9FE21E5D1C1ED3": "In the Profile being edited drop-down, select the profile that you want to edit.", "step.step_BB57090C962541759B0A43CA89414B": "Click Add rule.", "content.note_F148239ED8B7472BB6FC4FC51C75D7": "Note: For Block rules, select Send an alert when the rule blocks a connection if you want to receive alerts when the rule is triggered.", "step.step_F9C8F2E64AB94A67A63C6FCFD97D1B": "Enter a name for the rule and select the type (either Allow or Block), then click Next.", "substep.substep_CC47097B68B64EE896560C5A5577E8": "Click Add.", "substep.substep_04079C116D7F435CB698D054787226": "Select the service from the Service drop-down list.", "cell.entry_781D2284F3AB48E4ADB39075A58D25": "Direction", "cell.entry_113D257084BA4F7D9A2713C5B87C63": "Explanation", "cell.entry_31EDCF594AA5450A9C05EA924D7E87": "Both", "cell.entry_68DC38F736B34DC7A3D90265BDB01E": "The service will be allowed/denied to/from your computer in both directions.", "cell.entry_62DB4C3249474602B0844B18E19351": "Inbound", "cell.entry_022274048B9E48719A88540A4A59AE": "The service will be allowed/denied if coming from the defined remote hosts or networks to your computer.", "cell.entry_5979F17CB66D44909A23686CC1ECDD": "Outbound", "cell.entry_155A0A96C3D743FC875CED57CB144C": "The service will be allowed/denied if going from your computer to the defined remote hosts or networks.", "content.p_F513554245634C2F8DA0AB9F3077AC": "", "substep.substep_A8586970450F406EAF32AD4B2BB6BC": "Select the traffic direction from the Direction drop-down list.", "step.step_B3B503F6ACE84539A08EB6989D627E": "For each network service that you want the rule to include:", "step.step_A99501029D754BDA98EB18D7CE5A6C": "Click Next.", "step.step_F83C5196CEB845A6908814B8605230": "Specify the remote addresses that apply for the rule, then click Next.", "content.p_61910E3ACB99493C9B41042947B60E": "The new rule is added to the Firewall rules table for the selected profile.", "step.step_13AAF596D5B341268AEAE4720DC2D8": "Specify the scope for the rule, then click Finish.", "step.step_7FE12751B89944D78DCEE4DCCFFD77": "Click the following icon to distribute the policy:
", "content.note_2A5393E92ED047CAA5D3967DB8A120": "Note: Added firewall rules only apply to the profile that you are editing. If several profiles require the same rule, you have to add it for each profile separately.", "desc": [ { "steps.steps_B153C0A0C60B4186AFE7AAA91B3527": [ "step.step_1DD1C15876324EBE984C08D4B41346", "step.step_6F58D2A849554568ADE05956F63C8F", "step.step_184E8FD1B4FB49B2999A641B54F52A", "step.step_013F7FE769234C8D9FE21E5D1C1ED3", "step.step_BB57090C962541759B0A43CA89414B", "step.step_F9C8F2E64AB94A67A63C6FCFD97D1B", "content.note_F148239ED8B7472BB6FC4FC51C75D7", "step.step_B3B503F6ACE84539A08EB6989D627E", { "substeps.substepsalpha_81D5AC4C3C504FCEBF0148EBB03ED1": [ "substep.substep_CC47097B68B64EE896560C5A5577E8", "substep.substep_04079C116D7F435CB698D054787226", "substep.substep_A8586970450F406EAF32AD4B2BB6BC", "content.p_F513554245634C2F8DA0AB9F3077AC", { "table.table_19A4BA8E821244E2817ECD797A410F": [ { "thead.thead_6F55E17A875440E39C855DC23B0B7F": [ "cell.entry_781D2284F3AB48E4ADB39075A58D25", "cell.entry_113D257084BA4F7D9A2713C5B87C63" ] }, { "row.row_4B6D9446BCC24D908822A38CA22243": [ "cell.entry_31EDCF594AA5450A9C05EA924D7E87", "cell.entry_68DC38F736B34DC7A3D90265BDB01E" ] }, { "row.row_416D045042A24FF7860E1836343A28": [ "cell.entry_62DB4C3249474602B0844B18E19351", "cell.entry_022274048B9E48719A88540A4A59AE" ] }, { "row.row_6583B1DFD72046A7BBCCAA621B29E3": [ "cell.entry_5979F17CB66D44909A23686CC1ECDD", "cell.entry_155A0A96C3D743FC875CED57CB144C" ] } ] } ] }, "step.step_A99501029D754BDA98EB18D7CE5A6C", "step.step_F83C5196CEB845A6908814B8605230", "step.step_13AAF596D5B341268AEAE4720DC2D8", "content.p_61910E3ACB99493C9B41042947B60E", "step.step_7FE12751B89944D78DCEE4DCCFFD77" ] }, "content.note_2A5393E92ED047CAA5D3967DB8A120" ], "related": [ "task_creating_network_service-16.10-en" ] }, "task_creating_network_service-16.10-en.json": { "title": "title_D05D30A5B6E64DACB2F3696E047FEA67", "title_D05D30A5B6E64DACB2F3696E047FEA67": "Creating a new network service for firewall rules", "shortdesc": "shortdesc_B26C7C344E044C78842DE2A264C24ECD", "shortdesc_B26C7C344E044C78842DE2A264C24ECD": "If you need a network service that is missing from the set of default services, you can add it separately for use in custom firewall rules. ", "step.step_C17343342CD54E7B99FA797BBCCC01": "Go to the Settings tab and select Windows > Firewall.", "step.step_23533D9317F34B82A9D3C956916549": "Click 14.x clients.", "step.step_CA48D993EBCC4870853D9F1A194A8A": "Click Configure network services below the Firewall rules list.", "step.step_8708E8B33B8240F8AB1DF2CA459060": "Click Add.", "step.step_41EDF24D7CA24C61AC943069B937E5": "Enter a name for the service.", "step.step_4B40D417122641FA92E8D549F88466": "Select the IP protocol number, then click Next.", "step.step_EDF88890431045359679AAB269DB01": "Enter the initiator ports, then click Next.", "step.step_4CAB2E733F6846B2B3C3822D58B474": "Enter the responder ports, then click Finish.", "content.p_212CDF19142B45C29CD7E055B02AF9": "You can now select the new network service when you add or edit your custom firewall rules.", "desc": [ { "steps.steps_4DA35028B27A4881B7B9494A989819": [ "step.step_C17343342CD54E7B99FA797BBCCC01", "step.step_23533D9317F34B82A9D3C956916549", "step.step_CA48D993EBCC4870853D9F1A194A8A", "step.step_8708E8B33B8240F8AB1DF2CA459060", "step.step_41EDF24D7CA24C61AC943069B937E5", "step.step_4B40D417122641FA92E8D549F88466", "step.step_EDF88890431045359679AAB269DB01", "step.step_4CAB2E733F6846B2B3C3822D58B474" ] }, "content.p_212CDF19142B45C29CD7E055B02AF9" ] }, "task_limiting_firewall_profiles-16.10-en.json": { "title": "title_247CFE9F4CE34A2FAB4AE8666CFEADC2", "title_247CFE9F4CE34A2FAB4AE8666CFEADC2": "Hiding certain firewall profiles from end users", "shortdesc": "shortdesc_BC0F60558AA3492F8299A80D3D66184B", "shortdesc_BC0F60558AA3492F8299A80D3D66184B": "If you do not want end users to have the full set of firewall profiles available for selection, you can hide specific profiles so that they do not appear in the client settings on managed hosts. ", "content.p_1677BAF925C1416A821AD401586D34": "To hide a firewall profile from end users:", "step.step_0AA943C4CC28433A81BB791CBF5835": "Select the target domain.", "step.step_DB46D8F40715499899245136EC2208": "Go to the Settings tab and select Windows > Firewall.", "step.step_A4617DCA576F4B8E8D932BDB39F15C": "Click 14.x clients.", "step.step_B2A4DBD758D84F0299EA7A939A61F6": "Under Changing profiles, click Hide profiles from users.", "step.step_67F08FF3A3C04E35891D347997625F": "In the Hidden firewall profiles view, click Add.", "step.step_D96FF6992F1449E195609156567D4F": "Select the profile that you want to hide, then click OK.", "step.step_02D6CA43DC004097B7E55ED84C6F05": "Click Close.", "step.step_A1490B8EA18D4D6E9556783C3A2A90": "Click the following icon to distribute the policy:
", "desc": [ "content.p_1677BAF925C1416A821AD401586D34", { "steps.steps_EE2640259FA94D80AC823880037603": [ "step.step_0AA943C4CC28433A81BB791CBF5835", "step.step_DB46D8F40715499899245136EC2208", "step.step_A4617DCA576F4B8E8D932BDB39F15C", "step.step_B2A4DBD758D84F0299EA7A939A61F6", "step.step_67F08FF3A3C04E35891D347997625F", "step.step_D96FF6992F1449E195609156567D4F", "step.step_02D6CA43DC004097B7E55ED84C6F05", "step.step_A1490B8EA18D4D6E9556783C3A2A90" ] } ] }, "concept_configuring_web_traffic_scanning-16.10-en.json": { "title": "title_D25299A969BD4FA28571A2F577483245", "title_D25299A969BD4FA28571A2F577483245": "Configuring web traffic (HTTP) scanning", "shortdesc": "shortdesc_2B268E3FF2A64CF9AABC7226184B4728", "shortdesc_2B268E3FF2A64CF9AABC7226184B4728": "Web traffic scanning can be used to protect the computer against viruses in HTTP traffic. ", "content.p_0BF35F1E0DF74C508E4AA14D20F428": "When enabled, web traffic scanning scans HTML files, image files, downloaded applications or executable files and other types of downloaded files. It removes viruses automatically from the downloads. You can also enable a notification flyer that is shown to the end-user every time web traffic scanning has blocked viruses in web traffic and downloads.", "content.p_63B415C6687841A5987FF98F0E342B": "Web traffic scanning uses the following criteria for rating web sites:", "content.dt_0302C209B3814650B85F59AA027A45": "Unknown/unrated ", "content.dd_09C38808857242A98CA3DC6FDA0887": "", "choice.choice_084FCC07CE424718BFE7DA052C62B5": "URLs that have not yet been analyzed", "choice.choice_C879514E5C1E4A20959A2CB164E277": "URLs that are inaccessible at the time of testing", "content.dt_9C26B52F59074343873F38E671ADED": "Safe ", "content.dd_9DB2E2D057F64889A5EC5FA66EBF01": "", "choice.choice_FC2B6E545AC84EB997A02FC2BFE3F4": "URLs that have been analyzed as safe", "choice.choice_2653D43300FB417CBCC07B372E71F5": "URLs where users can knowingly download spyware, riskware, or adware", "content.dt_154D9DC71FBA4E20813196253ADD42": "Suspicious ", "content.dd_A7AC7F49B967490D90339A3D629758": "", "choice.choice_97E59E45621440CEAC9C71D0517644": "URLs that are linked to spamming activities", "choice.choice_B2CF1D754677424DB48A1868D0787C": "URLs that are linked to scam-like activities", "content.dt_52017C3882CF4F38A99B8EC9FF33BF": "Malicious ", "content.dd_FB4DB8D6B8BA416E8B70E13B327D2F": "", "choice.choice_89162654DF384E9B87F3AD1A7FB706": "URLs where the content contains script codes that download or install a malicious file", "choice.choice_D8D112773A2941308D06A8E17DAE1C": "URLs that belong to drive-by download sites", "choice.choice_44E3302DAC8546428388D71BDFA8F1": "URLs where the content exploits browser or system vulnerabilities", "choice.choice_AD73CF5C9FEB465A8D77BA09E659A1": "URLs or content that contain XSS or SQL injections", "choice.choice_E9499DE3AC7D4C95BFD6FB241D7ED3": "URLs where the content contains malicious iframes", "choice.choice_72D4F55567A24A91B85864EF55A826": "URLs that belong to phishing sites", "choice.choice_101819B2FE594B1DA8006D0FA79132": "URLs that are linked to hacking and other malicious activities", "choice.choice_1218603416B84230B800640B4DEF45": "URLs that have been taken down due to malicious behavior", "content.p_8B1E85EC56344B88B2F5C4E80ADA01": "This section describes the web traffic scanning settings and also presents some practical configuration examples.", "desc": [ "content.p_0BF35F1E0DF74C508E4AA14D20F428", "content.p_63B415C6687841A5987FF98F0E342B", { "dl.dl_21FAE4A99A7E4A13A563EA38A9981C": [ { "dlentry.dlentry_168FF455A0BB4F4291D6397D2B65A4": [ "content.dt_0302C209B3814650B85F59AA027A45", "content.dd_09C38808857242A98CA3DC6FDA0887", { "choices.ul_49AC55A95A1C44B583035775962655": [ "choice.choice_084FCC07CE424718BFE7DA052C62B5", "choice.choice_C879514E5C1E4A20959A2CB164E277" ] } ] }, { "dlentry.dlentry_84A69F4AE2894293BC63A4533B7FBE": [ "content.dt_9C26B52F59074343873F38E671ADED", "content.dd_9DB2E2D057F64889A5EC5FA66EBF01", { "choices.ul_F2DB071D16B24D1AAA4C92AB5E4A7F": [ "choice.choice_FC2B6E545AC84EB997A02FC2BFE3F4", "choice.choice_2653D43300FB417CBCC07B372E71F5" ] } ] }, { "dlentry.dlentry_A08CAE52566C4EA08D431517BB3338": [ "content.dt_154D9DC71FBA4E20813196253ADD42", "content.dd_A7AC7F49B967490D90339A3D629758", { "choices.ul_B28F9887FCD3411CB8336B7A48EBDC": [ "choice.choice_97E59E45621440CEAC9C71D0517644", "choice.choice_B2CF1D754677424DB48A1868D0787C" ] } ] }, { "dlentry.dlentry_6CBA6E86911947F4AED9E43E5C9569": [ "content.dt_52017C3882CF4F38A99B8EC9FF33BF", "content.dd_FB4DB8D6B8BA416E8B70E13B327D2F", { "choices.ul_AB41B579CE834CC18629E7DD2F4938": [ "choice.choice_89162654DF384E9B87F3AD1A7FB706", "choice.choice_D8D112773A2941308D06A8E17DAE1C", "choice.choice_44E3302DAC8546428388D71BDFA8F1", "choice.choice_AD73CF5C9FEB465A8D77BA09E659A1", "choice.choice_E9499DE3AC7D4C95BFD6FB241D7ED3", "choice.choice_72D4F55567A24A91B85864EF55A826", "choice.choice_101819B2FE594B1DA8006D0FA79132", "choice.choice_1218603416B84230B800640B4DEF45" ] } ] } ] }, "content.p_8B1E85EC56344B88B2F5C4E80ADA01" ] }, "task_enabling_http_scanning_whole_domain-16.10-en.json": { "title": "title_78B87046F54F41F39D846ED7A847B4D2", "title_78B87046F54F41F39D846ED7A847B4D2": "Enabling web traffic scanning for the whole domain", "shortdesc": "shortdesc_914A2FAACADC4631975149372945289C", "shortdesc_914A2FAACADC4631975149372945289C": "In this example, HTTP scanning is enabled for the whole domain. ", "content.p_7B147672DB404F5DA9ED94E3388FA1": "Follow these instructions:", "step.step_0990614BB1D54B2385BCDE21F166F1": "Select Root on the Domain tree.", "step.step_11FF4DF3F8D54A84B2131BFF7B867E": "Go to the Settings tab and select Windows > Web traffic scanning.", "step.step_92DF3C9699A94438BFA6773F63D158": "Set HTTP scanning enabled to All Content Types.", "step.step_B054F318A50E4BB68AE2FA903861D2": "Check that the other settings on this page are suitable for your system, and modify them if necessary.", "step.step_C1D7617E708C423C91730145488A5E": "Click the following icon to distribute the policy:
", "desc": [ "content.p_7B147672DB404F5DA9ED94E3388FA1", { "steps.steps_EB77696EC98C475A9253AB8995175C": [ "step.step_0990614BB1D54B2385BCDE21F166F1", "step.step_11FF4DF3F8D54A84B2131BFF7B867E", "step.step_92DF3C9699A94438BFA6773F63D158", "step.step_B054F318A50E4BB68AE2FA903861D2", "step.step_C1D7617E708C423C91730145488A5E" ] } ] }, "task_wts_blocking_content_types-16.10-en.json": { "title": "title_28DD113793334B2CA7524880804D51A0", "title_28DD113793334B2CA7524880804D51A0": "Blocking specific content types", "shortdesc": "shortdesc_5D563CD90480456E99592D4B42ED45C8", "shortdesc_5D563CD90480456E99592D4B42ED45C8": "You use the Advanced protection setting for web traffic scanning to block access to content types that may be vulnerable to use for malicious purposes, for example Adobe Flash or Microsoft Silverlight. ", "content.p_432E528A5D344055AF9C0D34974818": "By default, the Advanced protection setting is turned off.", "content.p_790C8DC71B03444C90124D7A5EA2FE": "Web traffic scanning can block the following content types on unknown web sites:", "choice.choice_991B13577CB34ED3A95E4F136FE030": "JAR", "choice.choice_24B64A8515BD4842A14E157CA0D967": "Executables", "choice.choice_44B015389AF14F7B891AD1BFA5EB8F": "Adobe Flash", "choice.choice_402BBB4DFA2443E086E0F0B190023A": "Adobe Acrobat", "choice.choice_CD2EECAAFB854912852310A65E8895": "Microsoft Silverlight", "choice.choice_4E4AD2AF028442DC8B62E6B577169C": "Microsoft Office files", "content.p_8BB7AED104D942559E4450412E728B": "Follow these instructions:", "subchoice.choice_D45A808A8E45440981D4A478872983": "Select Included content types to block only those file types that are on the Included list.", "subchoice.choice_3A08413CEB754542AFCA0CC978FFA3": "Select All except excluded content types to block all file types except those that are on the Excluded list.", "step.step_0D6F5DE4FF374B358D52BBA9955465": "On the Settings > Windows > Web traffic scanning page, go to Advanced protection:", "content.note_9853582C38954BEC8030CF9864BDF1": "Note: Web traffic scanning only blocks content for web sites that have an unknown safety rating.", "step.step_CD400C07FBFB4424BDAD0F0EAE97F2": "On the Included list, add the file types that you want to block.", "step.step_C84985BA1F2F41D18DC87B68E6C648": "On the Excluded list, add any file types that you want to allow even on unknown web sites.", "desc": [ "content.p_432E528A5D344055AF9C0D34974818", "content.p_790C8DC71B03444C90124D7A5EA2FE", { "choices.ul_B9052960216143A9AA1865B6417CF9": [ "choice.choice_991B13577CB34ED3A95E4F136FE030", "choice.choice_24B64A8515BD4842A14E157CA0D967", "choice.choice_44B015389AF14F7B891AD1BFA5EB8F", "choice.choice_402BBB4DFA2443E086E0F0B190023A", "choice.choice_CD2EECAAFB854912852310A65E8895", "choice.choice_4E4AD2AF028442DC8B62E6B577169C" ] }, "content.p_8BB7AED104D942559E4450412E728B", { "steps.steps_9742C1E3909A439BBBC881A98BE959": [ "step.step_0D6F5DE4FF374B358D52BBA9955465", { "subchoices.choices_B29C377B49684850918650317BE039": [ "subchoice.choice_D45A808A8E45440981D4A478872983", "subchoice.choice_3A08413CEB754542AFCA0CC978FFA3" ] }, "step.step_CD400C07FBFB4424BDAD0F0EAE97F2", "content.note_9853582C38954BEC8030CF9864BDF1", "step.step_C84985BA1F2F41D18DC87B68E6C648" ] } ] }, "task_botnet_blocker-16.10-en.json": { "title": "title_B823047A731643128953576A592D180D", "title_B823047A731643128953576A592D180D": "Blocking botnet communication", "shortdesc": "shortdesc_755932BF22274E88B336D993AE2572A1", "shortdesc_755932BF22274E88B336D993AE2572A1": "Botnet Blocker is a security feature that aims to prevent botnet agents from communicating with their command and control servers. ", "content.p_F818BB669309418485921E6B7734D4": "The feature uses DNS reputation data to verify the security of queries when translating DNS requests to IP addresses.", "content.p_DC33DE442CEA4F8C8730224E9B49CE": "To configure Botnet Blocker:", "step.step_48D4293FFCAB4C34ADD548BCDB6CBF": "Go to the Settings tab and select Windows > Web traffic scanning.", "content.p_49C28C52D66344D9BC43902B13EE4D": "By default, this set to Block unsafe queries.", "step.step_15F04E5CDB3043A9B4936FF4B9780A": "Under Botnet blocker, set the filtering to use for DNS queries.", "step.step_D00A078DC67447218D67B85025BE2F": "Set the alert level to use for notifications of blocked DNS queries.", "step.step_F3CBD1BE73E74392980A544446C116": "Click the following icon to distribute the policy:
", "desc": [ "content.p_F818BB669309418485921E6B7734D4", "content.p_DC33DE442CEA4F8C8730224E9B49CE", { "steps.steps_E05F2FA92BCB40AF8DEE0CB7F3B698": [ "step.step_48D4293FFCAB4C34ADD548BCDB6CBF", "step.step_15F04E5CDB3043A9B4936FF4B9780A", "content.p_49C28C52D66344D9BC43902B13EE4D", "step.step_D00A078DC67447218D67B85025BE2F", "step.step_F3CBD1BE73E74392980A544446C116" ] } ] }, "concept_application_control-16.10-en.json": { "title": "title_0669702146FE4438BDCFF6DF78ADB94C", "title_0669702146FE4438BDCFF6DF78ADB94C": "Configuring application control", "shortdesc": "shortdesc_EF2CFCB017654AFA86510B42964F1F2B", "shortdesc_EF2CFCB017654AFA86510B42964F1F2B": "Application control (a Premium feature) prevents execution and installation of applications, and prevents them from running scripts. ", "content.p_3C06F9FAEBF14191AFB1934464FC48": "", "content.note_7BB22FC54A3B44EBA81DC64E294DBA": "Note: Application control is only available for WithSecure product versions 14 and newer.", "content.p_2D58A7BBA25B4B10B1E557FFFB5056": "Application control reduces the risks that malicious, illegal, and unauthorized software pose in the corporate environment. It provides the following features:", "choice.choice_AFE85F0EF98248C9A47CB6D5EB15E9": "Security: Pre-configured security rules designed by WithSecure penetration testers cover attack vectors that are used to breach into corporate environments.", "choice.choice_C7618165D9B547F9904987DD26EBFB": "Policy enforcement: Based on a simple rule editor, policy enforcement helps the administrator define which applications are blocked, allowed, or monitored.", "desc": [ "content.note_7BB22FC54A3B44EBA81DC64E294DBA", "content.p_2D58A7BBA25B4B10B1E557FFFB5056", { "choices.ul_CA91C5ECC28C4E3CB71B0EAC324310": [ "choice.choice_AFE85F0EF98248C9A47CB6D5EB15E9", "choice.choice_C7618165D9B547F9904987DD26EBFB" ] } ] }, "task_turn_on_app_control-16.10-en.json": { "title": "title_1A0C932238CC497BA85519C644378A22", "title_1A0C932238CC497BA85519C644378A22": "Configuring application control", "shortdesc": "shortdesc_78CFAC2E16C6472585E06E0D01A2E033", "shortdesc_78CFAC2E16C6472585E06E0D01A2E033": "Application control prevents execution and installation of applications, and prevents them from running scripts. ", "content.p_857AEE3AE9774FAF8708F4040AF58F": "", "content.note_737CEB1F406E4357B7FF356E15DBAE": "Note: Application control is only available for WithSecure product versions 14 and newer.", "content.p_2D58A7BBA25B4B10B1E557FFFB5056": "Application control reduces the risks that malicious, illegal, and unauthorized software pose in the corporate environment. It provides the following features:", "choice.choice_AFE85F0EF98248C9A47CB6D5EB15E9": "Security: Pre-configured security rules designed by WithSecure penetration testers cover attack vectors that are used to breach into corporate environments.", "choice.choice_C7618165D9B547F9904987DD26EBFB": "Policy enforcement: Based on a simple rule editor, policy enforcement helps the administrator define which applications are blocked, allowed, or monitored.", "content.p_4DDCA5925CA0429B83247E51707274": "Turn on application control to prevent the execution and installation of applications, and to prevent them from running scripts:", "step.step_ACAA5DB4EB8B412999B8471F7D365E": "Select Root on the Domain tree.", "step.step_84465620211E4257B058056C248E66": "Go to the Settings tab and select Windows > Application control.", "step.step_45D2B7EB12204E628DF86C0B75ED91": "Select Enable Application control.", "step.step_1B01F827B7F64CE8A5C69FB7BF4E23": "Select the profile to use in the Host profile drop-down list.", "step.step_2E891380BF714D8EB0E5AF89A548D4": "Click the following icon to distribute the policy:
", "desc": [ "content.note_737CEB1F406E4357B7FF356E15DBAE", "content.p_2D58A7BBA25B4B10B1E557FFFB5056", { "choices.ul_CA91C5ECC28C4E3CB71B0EAC324310": [ "choice.choice_AFE85F0EF98248C9A47CB6D5EB15E9", "choice.choice_C7618165D9B547F9904987DD26EBFB" ] }, "content.p_4DDCA5925CA0429B83247E51707274", { "steps.steps_9351E000501A48E6BD19B39251D2AB": [ "step.step_ACAA5DB4EB8B412999B8471F7D365E", "step.step_84465620211E4257B058056C248E66", "step.step_45D2B7EB12204E628DF86C0B75ED91", "step.step_1B01F827B7F64CE8A5C69FB7BF4E23", "step.step_2E891380BF714D8EB0E5AF89A548D4" ] } ] }, "task_creating_new_app_control_profile-16.10-en.json": { "title": "title_8E8B3A7D0D6D4817B8077949590DDE65", "title_8E8B3A7D0D6D4817B8077949590DDE65": "Creating a new application control profile", "shortdesc": "shortdesc_A8E5317368CA413894903524DC6CAAFD", "shortdesc_A8E5317368CA413894903524DC6CAAFD": "You can create a new application control profile by cloning an existing one. ", "content.p_56B0051C68D8426CA5FC72AA1F18AF": "Follow these instructions:", "step.step_1F12AF3485BC4570B55F1445A51F0B": "Select the target domain.", "step.step_A65CF634DEA741B2A7D4A88CE5F664": "Go to the Settings tab and select Windows > Application control.", "step.step_BBB4272AD5134826B4C631FC03E14D": "Select the profile that you want to clone from the Profile being edited drop-down list.", "step.step_1CF7F250B6B448E0B9C69300D2E556": "Click Clone.", "step.step_853B0A131AC543DAB328109B8DDA4C": "Enter a name for the new profile, then click OK.", "content.p_47D2163DB1774ACB8BF7F9447891E3": "The selected action is applied to any applications that are not covered by the exclusion rules for the profile.", "step.step_E8ED30F8995348AA916EECE4E80692": "Select how you want to handle applications in the Default rule applied to all applications drop-down list.", "step.step_4BA34E71939B4AB2A3C5C31BC2E1A4": "Configure the exclusion rules for the new profile.", "step.step_7BC7775F108F44E7BE35F49D291AAE": "Click the following icon to distribute the policy:
", "desc": [ "content.p_56B0051C68D8426CA5FC72AA1F18AF", { "steps.steps_62FF5C8096B6418BA55E0085A40A31": [ "step.step_1F12AF3485BC4570B55F1445A51F0B", "step.step_A65CF634DEA741B2A7D4A88CE5F664", "step.step_BBB4272AD5134826B4C631FC03E14D", "step.step_1CF7F250B6B448E0B9C69300D2E556", "step.step_853B0A131AC543DAB328109B8DDA4C", "step.step_E8ED30F8995348AA916EECE4E80692", "content.p_47D2163DB1774ACB8BF7F9447891E3", "step.step_4BA34E71939B4AB2A3C5C31BC2E1A4", "step.step_7BC7775F108F44E7BE35F49D291AAE" ] } ] }, "task_adding_exclusion_rules-16.10-en.json": { "title": "title_F1EE06EE1CA0474A8EC075F642CF401B", "title_F1EE06EE1CA0474A8EC075F642CF401B": "Adding exclusion rules", "shortdesc": "shortdesc_A75E17A0D0B746759E025C6C35C1B17B", "shortdesc_A75E17A0D0B746759E025C6C35C1B17B": "Application control's exclusion rules give you a way to define the applications that you want to explicitly allow or block. ", "content.p_6756ECC733B142D5BB7AA0B5345ECF": "Any applications that match the conditions that you set within the rules are excluded from the default rule for the profile. For example, if the default rule is Allow, you can create rules to specify the applications or locations that you want to block. Another example could be that you want to receive a report of any applications that match the triggering conditions, even though they are still allowed or blocked based on the default rule for the profile.", "content.p_D0EAE59096D948A68A0C39EE7A738D": "Follow these instructions:", "step.step_1E4E1FFB2F564CAABB188C81E5239E": "Select the target domain.", "step.step_C36F25C8EA6949989A1C7C4BC0C277": "Go to the Settings tab and select Windows > Application control.", "content.note_DC3B7BB1F7C04FFEA9008B64B423BF": "Note: You cannot edit the exclusion rules for any profiles that are marked as Predefined.", "step.step_C8440A524F88421588D5E55F3A4658": "Select the profile that you want to edit from the Profile being edited drop-down list.", "content.p_A36483260D2B42CC959E551031571D": "This opens the exclusion rule wizard.", "step.step_0B449AC286DD4F9895B1F2596B2C3D": "Click Add rule.", "step.step_C68522DC39E345CB9CCC4D997FBFDC": "Enter a name and description for the rule.", "cell.entry_727FC6325D3B4B6E8B278E6A7D4C34": "Event", "cell.entry_3B73560E5468493A8B974C04701696": "Description", "cell.entry_BACB0C22637D4624B71A03D52A6A4E": "Run application", "cell.entry_52829D6F45C741AFB96F966B147A7D": "A combination of Start process and Load dynamic library. Triggers when an executable file or script is launched and when a DLL is about to get loaded into a process.", "cell.entry_34AFF710009F4B469898902F26A3AF": "Run installation", "cell.entry_8B6CB815550C491B8A100B2C57079B": "Triggers when msiexec.exe is launched with some MSI package as a command line parameter.", "cell.entry_522E8EF6AB8849AF96280A88A81FA3": "Start process", "cell.entry_6D5C2A9AF94A41FDAB13EFD2A5E234": "Triggers when an executable file or script is launched.", "cell.entry_464732060BBD4DFFAA85FC7BDA2309": "Load dynamic library", "cell.entry_76322CCE72AF463DB52975750652DE": "Triggers when a DLL is about to get loaded into a process.", "cell.entry_DAD7C67E5AE7452BB018DB077E6800": "File access", "cell.entry_37E79C9398BC4F24A487A972978399": "Triggers when a file matching the target conditions is opened or accessed by an application.", "content.p_A3A0BAB1C21040E7A832B9A4DB4052": "The following table lists the available event types and when they are triggered.", "content.p_adding_exclusion_rules_000471F": "For example, if you select Run application as the event and Block as the action, the rule prevents applications from running if they match the conditions for the rule.", "step.step_9C95E544D7E1484AA970F0E6B2E703": "Select the Event and Action for the rule.", "content.p_E6A96FC710A44E3DB635684272365C": "You can add multiple conditions to the same rule to get the scope that you want. Note the following when adding conditions to an exclusion rule:", "subchoice.choice_5B9A7912D0C3419F9D6D7BC8416C2F": "If you use attribute Target SHA1 or Parent SHA1 in the exclusion rule condition, you have to use Start process as the event type.", "subchoice.choice_D81B4B36D0BF48FB9D6ABA8527D9B6": "If a dynamic link library (.dll) is blocked and you want it to be allowed by Application Control, you have to use the Load dynamic library event type in the exclusion rule. In a case like this, you cannot therefore use attribute Target SHA1 nor Parent SHA1 in the exclusion rule.", "subchoice.choice_DBC7DF947197479989D7B97547049E": "Attributes Target file names mismatch and Parent file names mismatch kick in when the binary filename is different from the \"Original filename\" found under file Properties > Details.", "subchoice.choice_FF713E311CE5411D8EA0AAFC98788D": "Target certificate hash, Target has trusted signature, Target signer name, Parent certificate hash, Parent has trusted signature, and Parent signer name apply to binaries (applications and dynamic libraries).", "step.step_DEADFAF71AEA460FA6FBDD0688DED4": "Click Add condition.", "cell.entry_8A3C3A029BEA4964B4C9D69D3BF606": "Selected attribute", "cell.entry_9F7B0D66959146FEBA21B7288AD236": "Description", "cell.entry_270466003B274EEDB1858B16CED06C": "Target", "cell.entry_15AD2817405D491A972B5D398A23C9": "Values of the actual application. For example, Target file name is the actual file that you want to block.", "cell.entry_3207EE18092A486FB51F90EF055D19": "Parent", "cell.entry_A9C00929A86743579A42DFDE388CE4": "Values of the process that launches the application. For example, Parent file name is the file that launches the application that you want to block.", "content.p_5EF86AB8295346CF8FDA8EA247FF9C": "The following table explains the attributes that you can select to match the condition values.", "content.p_adding_exclusion_rules_000CE8A": "For example, if you want to block Internet Explorer, iexplore.exe is the target and explorer.exe (Windows Explorer) is the parent.", "cell.entry_B477B9B4CA05448D9E6D688AE2993F": "Selected condition", "cell.entry_3B5214AFF03B401A9C2B13C96BF1A6": "Description", "cell.entry_A526435E28C3482893255E21AE6533": "Equals", "cell.entry_BB8123E410D5472EB8AD9E3A2F35F7": "The value must be exactly the same as the target, for example, iexplore.exe.", "cell.entry_C317F2A2AC33465ABFC5B6171A8EC8": "Not equals", "cell.entry_3A4147096D2245E3A3093EB3A4820B": "The value may be anything except the target.", "cell.entry_A914B861D2E94B029D301CC1FB52C5": "Less, Greater, Less or equals, Greater or equals", "cell.entry_B0531101E14146E6972755BEF0DE1F": "These apply to numeric values, for example if you select Target product version as the attribute.", "cell.entry_9B0C59A568F541E19D39225E656966": "Contains", "cell.entry_3D7419D53D2949A8A4C9C116EE9DD7": "The selected attribute must contain the value, for example, explore.", "cell.entry_FE052FDF75654CEEB6DB79AC9A8070": "Starts with", "cell.entry_E184E6EAAA994C7AAA969EDD6EB97C": "The selected attribute must start with the value, for example, ie.", "cell.entry_4150B373F4F94C01BACC271F97F964": "Ends with", "cell.entry_8451CFEE112F4C4FA21FEC271CE8BC": "The selected attribute must end with the value, for example, explore.exe.", "content.p_DB92D1A4E99F428E98B3A58B78F8C4": "The following table explains how different operators work with the values that you enter.", "step.step_13F23000E0C248F791B74806B07AFA": "Select the attribute, operator, and value for each condition.", "step.step_6A0A882B4166447D9E792EB09EAE33": "Click OK.", "content.p_9A7279D32163467C865EEA70826A2F": "The rules listed for the profile are applied in priority order from the top down.", "step.step_135883C012B0470AA77ADA7773D0DA": "Change the order of the rules if necessary.", "step.step_46ECFB64427241E69EAB1E60408624": "Click the following icon to distribute the policy:
", "content.p_AEE9860C71AA466B97581E82F90FEA": "", "content.note_5322636AF2B2429B8D46B1FAD3DEA6": "Note: If there are any issues with the rule, for example if some information is missing or invalid, the host sends an alert to Policy Manager.", "desc": [ "content.p_6756ECC733B142D5BB7AA0B5345ECF", "content.p_D0EAE59096D948A68A0C39EE7A738D", { "steps.steps_1A04F367565A4617B7F0F6BB5A518D": [ "step.step_1E4E1FFB2F564CAABB188C81E5239E", "step.step_C36F25C8EA6949989A1C7C4BC0C277", "step.step_C8440A524F88421588D5E55F3A4658", "content.note_DC3B7BB1F7C04FFEA9008B64B423BF", "step.step_0B449AC286DD4F9895B1F2596B2C3D", "content.p_A36483260D2B42CC959E551031571D", "step.step_C68522DC39E345CB9CCC4D997FBFDC", "step.step_9C95E544D7E1484AA970F0E6B2E703", "content.p_A3A0BAB1C21040E7A832B9A4DB4052", { "table.table_1FB9EC9A19AA4D0FB0BBE684C9F8BB": [ { "thead.thead_E8C84E12833A47279050F5EF94E30B": [ "cell.entry_727FC6325D3B4B6E8B278E6A7D4C34", "cell.entry_3B73560E5468493A8B974C04701696" ] }, { "row.row_adding_exclusion_rules_0001FDF": [ "cell.entry_BACB0C22637D4624B71A03D52A6A4E", "cell.entry_52829D6F45C741AFB96F966B147A7D" ] }, { "row.row_adding_exclusion_rules_0009733": [ "cell.entry_34AFF710009F4B469898902F26A3AF", "cell.entry_8B6CB815550C491B8A100B2C57079B" ] }, { "row.row_adding_exclusion_rules_0002C5C": [ "cell.entry_522E8EF6AB8849AF96280A88A81FA3", "cell.entry_6D5C2A9AF94A41FDAB13EFD2A5E234" ] }, { "row.row_adding_exclusion_rules_000BD41": [ "cell.entry_464732060BBD4DFFAA85FC7BDA2309", "cell.entry_76322CCE72AF463DB52975750652DE" ] }, { "row.row_adding_exclusion_rules_0004996": [ "cell.entry_DAD7C67E5AE7452BB018DB077E6800", "cell.entry_37E79C9398BC4F24A487A972978399" ] } ] }, "content.p_adding_exclusion_rules_000471F", "step.step_DEADFAF71AEA460FA6FBDD0688DED4", "content.p_E6A96FC710A44E3DB635684272365C", { "subchoices.choices_adding_exclusion_rules_000FE39": [ "subchoice.choice_5B9A7912D0C3419F9D6D7BC8416C2F", "subchoice.choice_D81B4B36D0BF48FB9D6ABA8527D9B6", "subchoice.choice_DBC7DF947197479989D7B97547049E", "subchoice.choice_FF713E311CE5411D8EA0AAFC98788D" ] }, "step.step_13F23000E0C248F791B74806B07AFA", "content.p_5EF86AB8295346CF8FDA8EA247FF9C", { "table.table_E84D2E46382E43109315A154DCDF67": [ { "thead.thead_80CED2CEA328465497E6B57BF919A1": [ "cell.entry_8A3C3A029BEA4964B4C9D69D3BF606", "cell.entry_9F7B0D66959146FEBA21B7288AD236" ] }, { "row.row_adding_exclusion_rules_0007CD4": [ "cell.entry_270466003B274EEDB1858B16CED06C", "cell.entry_15AD2817405D491A972B5D398A23C9" ] }, { "row.row_adding_exclusion_rules_000E6B2": [ "cell.entry_3207EE18092A486FB51F90EF055D19", "cell.entry_A9C00929A86743579A42DFDE388CE4" ] } ] }, "content.p_adding_exclusion_rules_000CE8A", "content.p_DB92D1A4E99F428E98B3A58B78F8C4", { "table.table_EB76CDB2B5EB4B768C0F5785E21A8F": [ { "thead.thead_045214FBD653443785E0091262FB8F": [ "cell.entry_B477B9B4CA05448D9E6D688AE2993F", "cell.entry_3B5214AFF03B401A9C2B13C96BF1A6" ] }, { "row.row_adding_exclusion_rules_000FFBA": [ "cell.entry_A526435E28C3482893255E21AE6533", "cell.entry_BB8123E410D5472EB8AD9E3A2F35F7" ] }, { "row.row_adding_exclusion_rules_0008F5B": [ "cell.entry_C317F2A2AC33465ABFC5B6171A8EC8", "cell.entry_3A4147096D2245E3A3093EB3A4820B" ] }, { "row.row_adding_exclusion_rules_00054F7": [ "cell.entry_A914B861D2E94B029D301CC1FB52C5", "cell.entry_B0531101E14146E6972755BEF0DE1F" ] }, { "row.row_adding_exclusion_rules_0003DD2": [ "cell.entry_9B0C59A568F541E19D39225E656966", "cell.entry_3D7419D53D2949A8A4C9C116EE9DD7" ] }, { "row.row_adding_exclusion_rules_000E159": [ "cell.entry_FE052FDF75654CEEB6DB79AC9A8070", "cell.entry_E184E6EAAA994C7AAA969EDD6EB97C" ] }, { "row.row_adding_exclusion_rules_0005B56": [ "cell.entry_4150B373F4F94C01BACC271F97F964", "cell.entry_8451CFEE112F4C4FA21FEC271CE8BC" ] } ] }, "step.step_6A0A882B4166447D9E792EB09EAE33", "step.step_135883C012B0470AA77ADA7773D0DA", "content.p_9A7279D32163467C865EEA70826A2F", "step.step_46ECFB64427241E69EAB1E60408624" ] }, "content.note_5322636AF2B2429B8D46B1FAD3DEA6" ] }, "task_exclusion_rule_example-16.10-en.json": { "title": "title_4E5D3B456CB345B2917726E6DF07C84F", "title_4E5D3B456CB345B2917726E6DF07C84F": "Example: Preventing a vulnerable version from running", "shortdesc": "shortdesc_CECD600246CC4EAAB000BD82E2672997", "shortdesc_CECD600246CC4EAAB000BD82E2672997": "To use Application control to prevent vulnerable applications from running, for example, to block an unpatched version, use a Target file version attribute. ", "content.p_1DCF504D76664C6D90DBAF36109B75": "For example, a program had a vulnerability that was patched in version 1.2.4. To block any version older than 1.2.4 from running, do the following.", "substep.substep_104D54249C94496088E235C4F3EB73": "Give the rule a name: Block an unpatched program.", "substep.substep_ECB2B5AF67B545FE9715E1EEFB48F8": "From the Event drop-down menu, select Run application.", "substep.substep_BBB6B1C3700D41A5B263FC98483884": "From the Action drop-down menu, select Block.", "step.step_04A5D5A03EA64307ACC54F2DC9FF00": "Create the following exclusion rule:", "content.note_1FA7B1A1FD96418AA50BD104124229": "Note: To find the file description, right-click the file in the File Explorer and select Properties.", "substep.substep_7E39A78D8C664076830C9C4CF9BF66": "From the attribute drop-down menu, select Target file description.", "substep.substep_F25E732A70094B10A69EF220935B4C": "From the operator drop-down menu, select Contains.", "content.note_553E82FCF09E4B3B9A25CF24BBEDA2": "Note: As \"Internet Explorer\" is in the target file description, the program is blocked regardless of the file name or its location.", "substep.substep_35794FB0356C45A8A98A3002A54094": "In the value field, enter the name of the unpatched program as it appears in the file description. For example, \"Internet Explorer\".", "step.step_B5D159C6E91E4A22BE2A1F491EF84D": "Then, add the first condition to the exclusion rule:", "substep.substep_B1F49BC9D5C045B5B8F867B2730714": "From the attribute drop-down menu, select Target file version.", "substep.substep_C011673CF233488F89F275A8906285": "From the operator drop-down menu, select Less or equals.", "content.note_1AC75E08F2EC42BDB715108F78EF07": "Note: The condition for the target file version is \"less or equal to 1.2.3.*.*\" The asterisk indicates that only major and minor fields are used in the comparison.", "substep.substep_6879EE010FEF4E5E897CD080D06D11": "In the value field, enter 1.2.3.*.*.", "step.step_71C16261AF7844689742A93CD9B2E8": "Then, add the second condition to the exclusion rule:", "desc": [ "content.p_1DCF504D76664C6D90DBAF36109B75", { "steps.steps_2BFA824C10E14709893A4947F04CEA": [ "step.step_04A5D5A03EA64307ACC54F2DC9FF00", { "substeps.substepsalpha_D1AF07E1A7B446AA8C87095E8FE687": [ "substep.substep_104D54249C94496088E235C4F3EB73", "substep.substep_ECB2B5AF67B545FE9715E1EEFB48F8", "substep.substep_BBB6B1C3700D41A5B263FC98483884" ] }, "step.step_B5D159C6E91E4A22BE2A1F491EF84D", { "substeps.substepsalpha_2C02A8280C9546339D60BB599448AA": [ "substep.substep_7E39A78D8C664076830C9C4CF9BF66", "content.note_1FA7B1A1FD96418AA50BD104124229", "substep.substep_F25E732A70094B10A69EF220935B4C", "substep.substep_35794FB0356C45A8A98A3002A54094", "content.note_553E82FCF09E4B3B9A25CF24BBEDA2" ] }, "step.step_71C16261AF7844689742A93CD9B2E8", { "substeps.substepsalpha_44F9F627F62D4B85AF0B9A4DC50D37": [ "substep.substep_B1F49BC9D5C045B5B8F867B2730714", "substep.substep_C011673CF233488F89F275A8906285", "substep.substep_6879EE010FEF4E5E897CD080D06D11", "content.note_1AC75E08F2EC42BDB715108F78EF07" ] } ] } ] }, "task_block_download_example-16.10-en.json": { "title": "title_D162C2C7B5F047AE861F121E9C075B3F", "title_D162C2C7B5F047AE861F121E9C075B3F": "Example: Preventing applications from automatically opening downloaded files", "shortdesc": "shortdesc_F8CC22031F344550AA1FC4EF8D2380C5", "shortdesc_F8CC22031F344550AA1FC4EF8D2380C5": "To use Application control to block applications from launching downloaded files automatically, define the application and download folder paths. ", "content.p_76EF2B6D04E245D9BA9B8EC4601A00": "For example, to prevent Microsoft Excel from automatically opening files that are downloaded through your browser or other applications, do the following:", "substep.substep_D4B4C9301BA447EEBA622589284D7E": "Give the rule a name: Block downloaded Excel files.", "substep.substep_ECB2B5AF67B545FE9715E1EEFB48F8": "From the Event drop-down menu, select Start process.", "substep.substep_BBB6B1C3700D41A5B263FC98483884": "From the Action drop-down menu, select Block.", "step.step_053C3E96CA9B4C7FB0CC9534B1EDAF": "Create the following exclusion rule:", "substep.substep_7E39A78D8C664076830C9C4CF9BF66": "From the attribute drop-down menu, select Target path.", "substep.substep_F25E732A70094B10A69EF220935B4C": "From the operator drop-down menu, select Contains.", "substep.substep_35794FB0356C45A8A98A3002A54094": "In the value field, enter the name of the name of the exe file, for example excel.exe.", "step.step_B5D159C6E91E4A22BE2A1F491EF84D": "Then, add the first condition to the exclusion rule:", "substep.substep_B1F49BC9D5C045B5B8F867B2730714": "From the attribute drop-down menu, select Target command line.", "substep.substep_C011673CF233488F89F275A8906285": "From the operator drop-down menu, select Contains.", "substep.substep_6879EE010FEF4E5E897CD080D06D11": "In the value field, enter the path to your default download folder, for example C:\\Users\\default\\Downloads\\.", "step.step_71C16261AF7844689742A93CD9B2E8": "Then, add the second condition to the exclusion rule:", "desc": [ "content.p_76EF2B6D04E245D9BA9B8EC4601A00", { "steps.steps_87660B1D6CB2496292D21A79735411": [ "step.step_053C3E96CA9B4C7FB0CC9534B1EDAF", { "substeps.substepsalpha_F70A8465A91544D88439FB5B62E77D": [ "substep.substep_D4B4C9301BA447EEBA622589284D7E", "substep.substep_ECB2B5AF67B545FE9715E1EEFB48F8", "substep.substep_BBB6B1C3700D41A5B263FC98483884" ] }, "step.step_B5D159C6E91E4A22BE2A1F491EF84D", { "substeps.substepsalpha_2C02A8280C9546339D60BB599448AA": [ "substep.substep_7E39A78D8C664076830C9C4CF9BF66", "substep.substep_F25E732A70094B10A69EF220935B4C", "substep.substep_35794FB0356C45A8A98A3002A54094" ] }, "step.step_71C16261AF7844689742A93CD9B2E8", { "substeps.substepsalpha_44F9F627F62D4B85AF0B9A4DC50D37": [ "substep.substep_B1F49BC9D5C045B5B8F867B2730714", "substep.substep_C011673CF233488F89F275A8906285", "substep.substep_6879EE010FEF4E5E897CD080D06D11" ] } ] } ] }, "concept_protecting_sensitive_data-16.10-en.json": { "title": "title_73A95229FF94412CB2C245124A7ABC22", "title_73A95229FF94412CB2C245124A7ABC22": "How to protect your users' sensitive data", "shortdesc": "shortdesc_B5639AA8473140E8BAAEE7E477A91123", "shortdesc_B5639AA8473140E8BAAEE7E477A91123": "Connection control (a Premium feature) provides additional protection for managed hosts against harmful activity when accessing online banks or making transactions online. ", "content.p_7BA72CF9FA7545D6A1B90B61CE4DCE": "Connection control automatically detects secure connections to online banking web sites, and blocks any connections that do not go to the intended site. When you open a recognized banking site, only connections to sites that are considered safe are allowed.", "content.p_9265FB2BC8DF4454A104F939C79363": "If an end-user needs to access a blocked web site to complete an ongoing transaction, they can temporarily allow access to the blocked page or end the Connection control session.", "content.p_F0C7CFB9AF894D4AB690C7CD7F6B1B": "Connection control currently supports the following browsers on managed Windows hosts:", "choice.choice_97D2D384318541A8B9A8EA22AC534C": "Google Chrome (latest two major versions)", "choice.choice_4F1BFDAD416241F08D34B4A420D5E6": "Mozilla Firefox (latest two major versions)", "choice.choice_9DAB4D43744540B2B99BF37DCCB5EE": "Internet Explorer 11 (Windows 8.1, Windows 7, both 32-bit and 64-bit versions)", "choice.choice_738973EBE7224EC08B12865E75752A": "Internet Explorer 10 (Windows 8, Windows 7, both 32-bit and 64-bit versions)", "choice.choice_73665FAEAD3B4CC6A779B4A8800FFA": "Internet Explorer 8 and 9 (Windows Vista, 32-bit and 64-bit versions)", "desc": [ "content.p_7BA72CF9FA7545D6A1B90B61CE4DCE", "content.p_9265FB2BC8DF4454A104F939C79363", "content.p_F0C7CFB9AF894D4AB690C7CD7F6B1B", { "choices.ul_C9DEB7F6C6684D36BA5386E92BFF1D": [ "choice.choice_97D2D384318541A8B9A8EA22AC534C", "choice.choice_4F1BFDAD416241F08D34B4A420D5E6", "choice.choice_9DAB4D43744540B2B99BF37DCCB5EE", "choice.choice_738973EBE7224EC08B12865E75752A", "choice.choice_73665FAEAD3B4CC6A779B4A8800FFA" ] } ] }, "task_protecting_secure_connections-16.10-en.json": { "title": "title_BBBAD5A63E624107A7DF496965AB088D", "title_BBBAD5A63E624107A7DF496965AB088D": "Protecting secure connections on managed hosts", "shortdesc": "shortdesc_FC1F1BECF48D4BF79603CB00F8642274", "shortdesc_FC1F1BECF48D4BF79603CB00F8642274": "You can turn Connection control on for the policy under the Browsing protection settings. ", "content.p_3EB870B867CE42528BCAAECE715623": "", "content.note_E79641CAD2D345FEB013357457CD79": "Note: Browsing protection must be turned on to use Connection control.", "content.p_A66E03ED57C54D998CB1B09A80E518": "When Connection control is turned on and a user opens a recognized banking site in their browser, a notification appears at the top of their screen to indicate that the Connection control session has started. When they have completed their ongoing transaction, the user can end the session to resume normal browsing.", "content.p_7A1A80F0BCCD46D0BF3AB6BC2EC39C": "", "content.note_AC37EA88458C47BFB88BCDEE03C4B6": "Note: Connection control installs extensions (plug-in applications that provide extra features) on browsers on the managed hosts. If the extensions are not in use, Connection control may not work properly.", "content.p_C20CF23F50834013A41335E569F16A": "To turn on Connection control:", "step.step_BA869D59C4AE4978B3E88AEF62EFE0": "Select the target domain.", "step.step_7A8E6255286A4057A303BF478596D9": "Go to the Settings tab and select Windows > Browsing protection.", "step.step_3B7A3D56887046678B468385EF5C64": "Select Connection control enabled.", "cell.choptionhd_protecting_secure_connec_09CB9": "Option", "cell.chdeschd_protecting_secure_connec_0327B": "Description", "cell.choption_protecting_secure_connec_02236": "Disconnect untrusted apps", "cell.chdesc_protecting_secure_connec_0357B": "This prevents network connections for applications that are not considered trusted for Connection control sessions.", "cell.choption_protecting_secure_connec_069A3": "Disconnect command-line and scripting tools", "cell.chdesc_protecting_secure_connec_05AE0": "This prevents network connections for tools such as PowerShell during Connection control sessions.", "cell.choption_protecting_secure_connec_093EC": "Clear the clipboard after banking sessions", "cell.chdesc_protecting_secure_connec_0DF30": "This resets the clipboard after each Connection control session to prevent access to any sensitive information that may have been copied during the session.", "step.step_DF40E8EE1DBE45A8AF1E40F8D286FA": "Select the additional Connection control settings if necessary:", "content.p_223779B82A7F4559855D47FBDA3512": "For example, if you want extra protection for any secure sites that are commonly used within your organization, you can add them to the list.", "content.note_906D54F52AAF455382C35C1492C60F": "Note: Connection control only supports web sites that use HTTPS.", "step.step_FA22863B18534E16B7F3979F6E4868": "Enter any additional websites that you want to trigger Connection control on managed hosts in the Privacy-protected sites list.", "step.step_1A132D17E11A4EA3A9DEFD0C595786": "Click the following icon to distribute the policy:
", "content.p_6FBDDDB11F294E01BA111EDFD986DC": "If the browser extensions need to be turned on manually:", "choice.choice_C5B5CD9DD7724683B7EF762E35FED8": "On Firefox, select Tools > Add-ons from the menu and click Enable next to the extension.", "choice.choice_C27710198367423D826220CA96F159": "On Chrome, select Settings from the menu, then click Extensions and select Enable next to the extension.", "choice.choice_900FA9BE32D3446F9626AB8986ED38": "On Internet Explorer, select Tools > Manage Add-ons, select the browser extension and click Enable.", "desc": [ "content.note_E79641CAD2D345FEB013357457CD79", "content.p_A66E03ED57C54D998CB1B09A80E518", "content.note_AC37EA88458C47BFB88BCDEE03C4B6", "content.p_C20CF23F50834013A41335E569F16A", { "steps.steps_E46FCBBA487F4E3389F024455EAA10": [ "step.step_BA869D59C4AE4978B3E88AEF62EFE0", "step.step_7A8E6255286A4057A303BF478596D9", "step.step_3B7A3D56887046678B468385EF5C64", "step.step_DF40E8EE1DBE45A8AF1E40F8D286FA", { "table.table_B3F5E658DC1E4A8384583B6797DC5D": [ { "thead.chhead_protecting_secure_connec_0C296": [ "cell.choptionhd_protecting_secure_connec_09CB9", "cell.chdeschd_protecting_secure_connec_0327B" ] }, { "row.choice_83690C87CBFF44DAA5483512CC255C": [ "cell.choption_protecting_secure_connec_02236", "cell.chdesc_protecting_secure_connec_0357B" ] }, { "row.choice_B370A2566B2944B0B17D9D14BA27FA": [ "cell.choption_protecting_secure_connec_069A3", "cell.chdesc_protecting_secure_connec_05AE0" ] }, { "row.choice_626981B2A67E4A17A09E1AE5236013": [ "cell.choption_protecting_secure_connec_093EC", "cell.chdesc_protecting_secure_connec_0DF30" ] } ] }, "step.step_FA22863B18534E16B7F3979F6E4868", "content.p_223779B82A7F4559855D47FBDA3512", "content.note_906D54F52AAF455382C35C1492C60F", "step.step_1A132D17E11A4EA3A9DEFD0C595786" ] }, "content.p_6FBDDDB11F294E01BA111EDFD986DC", { "choices.ul_AD4B960343EC42E49B72D64000293C": [ "choice.choice_C5B5CD9DD7724683B7EF762E35FED8", "choice.choice_C27710198367423D826220CA96F159", "choice.choice_900FA9BE32D3446F9626AB8986ED38" ] } ] }, "concept_blocking_web_content-16.10-en.json": { "title": "title_3ADA4F6CD135457C815044AF86CEB774", "title_3ADA4F6CD135457C815044AF86CEB774": "Blocking unsuitable web content", "shortdesc": "shortdesc_13CF7E8D64C5435AB8BD804E5DEA8EF3", "shortdesc_13CF7E8D64C5435AB8BD804E5DEA8EF3": "You can block managed hosts' access to web sites and pages that contain unsuitable content with Web content control. ", "content.p_6D58E12E951F4BBE89BF754F2D2694": "Web content control (a Premium feature) uses WithSecure's reputation analysis data to categorize web sites and block access to any sites that contain content selected for the policy.", "desc": [ "content.p_6D58E12E951F4BBE89BF754F2D2694" ] }, "reference_content_categories-16.10-en.json": { "title": "title_579303240EF94F549FD02539D78F0A36", "title_579303240EF94F549FD02539D78F0A36": "Web content categories", "shortdesc": "shortdesc_BE23BCD375F1403698973E5697A6660E", "shortdesc_BE23BCD375F1403698973E5697A6660E": "Use the categories listed here to block access to web sites based on the results of WithSecure's Network Reputation Service (NRS) content analysis. ", "content.p_F8EDAD2C79794D058B2D1FFCF3EC89": "", "content.dt_E93172F41ACD48119D5F188E1BCCBE": "Abortion ", "content.dd_CBE3D35D2C7D4F6DA2EA3FD680692C": "Web sites that contain information or images on abortion, abortion clinics and centers, and abortion topics in general. For example, discussion forums that may be pro-life or pro-choice.", "content.dt_016C2FD2BE7640418632BA0175A8AE": "Ad serving ", "content.dd_336637F62807470CB538DBFE41EDEA": "Web links that point to various flash, text, video or image files or other similar files that contain advertisements.", "content.dt_59EA6F65BE814DBFA97F1933ED6ECB": "Adult ", "content.dd_D78F232BE8944814B33043D5681395": "Web sites that are aimed at an adult audience with content that is clearly sexual, or containing sexual innuendo. For example, sex shop sites or sexually-oriented nudity.", "content.dt_26B7EDC42AA141A79F0DDC6C0C7E10": "Alcohol and tobacco ", "content.dd_C606297D235F47D4944264AD7D8276": "Web sites that display or promote alcoholic beverages or smoking and tobacco products, including manufacturers such as distilleries, vineyards, and breweries. For example, sites that promote beer festivals and web sites of bars and night clubs.", "content.dt_1EAC031FA5F04B8E85C6FDC8FD2B86": "Anonymizers ", "content.dd_2438140C914A4FDDBC2FE252413B00": "Web sites that allow or instruct people how to bypass network filters, including web-based translation sites that allow people to do so. For example, sites that provide lists of public proxies that can be used to bypass possible network filters.", "content.dt_34C6680DE50C47F5A50CDC9F2BE418": "Auctions ", "content.dd_6215868C9F424114A1672583C16D6D": "Web sites of online marketplaces where people can buy and sell their products or services. This includes sites that provide lists of products or services even though the actual transaction may happen somewhere else.", "content.dt_AF1E5796BC5348048A450C3E4AC8C5": "Banking ", "content.dd_3B52FD9621E3436784AA0561FA8E6A": "Web sites of banks and other financial institutions, including savings and investment banks, securities trading and foreign exchange trading sites.", "content.dt_D6782A51CAAF4F29A2955D9D20FDC2": "Blogs ", "content.dd_057AF2D4D6E9485498541B0498260F": "Weblogs where people or institutions publish information and can share news, stories, videos, and photos. Due to their individual nature, the themes addressed in blogs can vary widely and they can include any topics.", "content.dt_F1CFD16733024FBCB892772360C80E": "Chat ", "content.dd_A42AF6659FC244CCA2EB5F85962F1D": "Online portals and messengers where people can chat with each other via text, audio, or video. For example, web-based chat and instant messaging applications, and chat sites.", "content.dt_767FCD318C2D45D1994E0F23D25DC4": "Dating ", "content.dd_2DD20EA22617424CB87E99B7FE7814": "Web sites that provide a portal for finding romantic or sexual partners. For example, matchmaking sites or mail-order bride sites.", "content.dt_A118CED2F02C45479066AA62E4C57B": "Drugs ", "content.dd_1DD4B0284F7E4AA88BD64DD8F68F18": "Web sites that promote drug use. For example, sites that provide information on purchasing, growing, or selling any form of these substances.", "content.dt_FDE1552D4B9E403D8D10E32300815C": "Entertainment ", "content.dd_EC6510D9FF174247B625CEEB5A5748": "Web sites related to the entertainment industry, such as television shows, books, comics, movies and theaters, and art galleries. For example, television and radio program guides and music, tv, and movie review sites.", "content.dt_DDE3DC1488AC49AA93552731C675E3": "Gambling ", "content.dd_B19494B6632945FABD621CE6E8140F": "Web sites where people can bet online using real money or some form of credit. For example, online gambling and lottery web sites, and blogs and forums that contain information about gambling online or in real life.", "content.dt_624F5C095A0C4B7F84853665A9247C": "Games ", "content.dd_898EF26B23EE40A09C12D75822BE6E": "Online gaming web sites and web sites where people can play, download, or buy games.", "content.dt_E095EA7CD458400FBD70376F003CA4": "Hacking ", "content.dd_A34479958B3F4989B762B820207451": "Web sites that promote seeking and exploiting weaknesses in computer systems or computer networks for profit, challenge, or enjoyment. For example, sites that contain hacking guides and hacking tools.", "content.dt_572A449B826C4F3DA0F47398E0B6BD": "Hate ", "content.dd_B017F03D3FE146968C4A09FA870B8F": "Web sites that indicate prejudice against a certain religion, race, nationality, gender, age, disability, or sexual orientation. For example, sites that promote damaging humans, animals or institutions, or contain descriptions or images of physical assaults against any of them.", "content.dt_3D8E76FA9ABE4FB0A2B38B046B49B3": "Job search ", "content.dd_882C08BDF6E1440AA1D792EBB4B2F8": "Web sites of employment agencies and contractors, and where people can search and find new jobs. For example, career search engines, career-networking groups and employment web sites.", "content.dt_E7F42DF42A8D499F910239392F0BCE": "Payment service ", "content.dd_CD371E4960464D7A939F3E0B691724": "Web sites that process payments between shopping sites and banks or other financial services, such as credit cards. These include sites that can be used for payments in general.", "content.dt_38D1778CD9454F36BDF3E581C17E5D": "Scam ", "content.dd_518651322377470E842506A902E35D": "Web sites that bait people by promising prizes after they fill in a survey, take a quiz, or perform similar actions. For example, sites that are pretending to be affiliated with a reputable company that is giving away prizes.", "content.dt_309E1E4CB2C240E880617AB00E0E33": "Shopping ", "content.dd_DF42E4150D0A477E9CECCF969F5B9F": "Web sites where people can purchase any products or services, including sites that contain catalogs of items that help with online ordering and purchasing and sites that provide information on ordering and buying items online.", "content.dt_6D1717ACAF504F83AD00D83F096D88": "Social networking ", "content.dd_F6ED0B2EC5F345E08ED54F4F0C010A": "Networking portals that connect people in general or with a certain group of people for socialization, business interactions, and so on. For example, sites where you can create a member profile to share your personal and professional interests. This includes social media sites such as Twitter.", "content.dt_5632B21BF1964CE5AA5720D6473533": "Software download ", "content.dd_20ACB5468CE7405FA2B7970567DBCB": "Online portals for downloading various software.", "content.dt_04A4089F07C8407DB9D35C950A26F7": "Spam ", "content.dd_D6ADB8924E01471F89F92254C6857E": "Web sites that have been collected from spam mails.", "content.dt_9B5404027E7A402DB617186ED4CE85": "Streaming media ", "content.dd_54FE11EC255F482991FCFEA41A4E08": "Web sites that deliver streaming video or audio content either for free or through a subscription model.", "content.dt_F07A9280397D4334A4B35AACFEA523": "Violence ", "content.dd_FAAD5F9D1CF64F58AFA8690A46EB84": "Web sites that may incite violence or contain gruesome and violent images or videos. For example, sites that contain information on rape, harassment, snuff, bomb, assault, murder, and suicide.", "content.dt_77703BED629646A9A26011BE83D434": "Illegal downloads ", "content.dd_638E97929D724F14BABB661B7FD596": "Unauthorized file sharing or software piracy web sites. For example, sites that provide illegal or questionable access to software, and sites that develop and distribute programs that may compromise networks and systems.", "content.dt_76E6BB16385C4EE6A0B643F3F404AF": "Weapons ", "content.dd_08CFC510CD4342C0B604EE652F93D7": "Web sites that contain information, images, or videos of weapons or anything that can be used as a weapon to inflict harm to a human or animal, including organizations that promote these weapons, such as hunting and shooting clubs. This category includes toy weapons such as paintball guns, airguns, and BB guns.", "content.dt_9722018CA7794DAEB51CC3260DF8C0": "Webmail ", "content.dd_111F1CB51FE44BCABCFDB30975C594": "Web sites that allow people to create and access their email accounts through a web browser. For example, this includes Yahoo! Mail and Gmail, and local, ISP-linked web mail services.", "desc": [ { "dl.dl_96109F738E124B77B8E304A3976C54": [ { "dlentry.dlentry_C88DAEF08C7342F58D47492E7CD2A2": [ "content.dt_E93172F41ACD48119D5F188E1BCCBE", "content.dd_CBE3D35D2C7D4F6DA2EA3FD680692C" ] }, { "dlentry.dlentry_8EB37F11A3904069B067410469B31C": [ "content.dt_016C2FD2BE7640418632BA0175A8AE", "content.dd_336637F62807470CB538DBFE41EDEA" ] }, { "dlentry.dlentry_A47B41E441B64A8687D3BF2CAE8000": [ "content.dt_59EA6F65BE814DBFA97F1933ED6ECB", "content.dd_D78F232BE8944814B33043D5681395" ] }, { "dlentry.dlentry_11BAC8E9EAA0465B81F08B166BA9D3": [ "content.dt_26B7EDC42AA141A79F0DDC6C0C7E10", "content.dd_C606297D235F47D4944264AD7D8276" ] }, { "dlentry.dlentry_48B89C9E75D04FAE960BC16BBAB2D7": [ "content.dt_1EAC031FA5F04B8E85C6FDC8FD2B86", "content.dd_2438140C914A4FDDBC2FE252413B00" ] }, { "dlentry.dlentry_FEB5A1DE1F9840D3B72C30117DC39E": [ "content.dt_34C6680DE50C47F5A50CDC9F2BE418", "content.dd_6215868C9F424114A1672583C16D6D" ] }, { "dlentry.dlentry_80ACF0D0AB9E42D8ACFA7ABD46E4EB": [ "content.dt_AF1E5796BC5348048A450C3E4AC8C5", "content.dd_3B52FD9621E3436784AA0561FA8E6A" ] }, { "dlentry.dlentry_3771A32B502148BB800736BDB471A1": [ "content.dt_D6782A51CAAF4F29A2955D9D20FDC2", "content.dd_057AF2D4D6E9485498541B0498260F" ] }, { "dlentry.dlentry_78B8FCBA9FD64A88993ABCC8A59CEE": [ "content.dt_F1CFD16733024FBCB892772360C80E", "content.dd_A42AF6659FC244CCA2EB5F85962F1D" ] }, { "dlentry.dlentry_122BB02D60334F5EAF4178EFDFE178": [ "content.dt_767FCD318C2D45D1994E0F23D25DC4", "content.dd_2DD20EA22617424CB87E99B7FE7814" ] }, { "dlentry.dlentry_397D69646A6245A19609E9C7861336": [ "content.dt_A118CED2F02C45479066AA62E4C57B", "content.dd_1DD4B0284F7E4AA88BD64DD8F68F18" ] }, { "dlentry.dlentry_7255CF0F90954E15A3625D4DA01299": [ "content.dt_FDE1552D4B9E403D8D10E32300815C", "content.dd_EC6510D9FF174247B625CEEB5A5748" ] }, { "dlentry.dlentry_A978DD782CB042B58C79F359CBE2C7": [ "content.dt_DDE3DC1488AC49AA93552731C675E3", "content.dd_B19494B6632945FABD621CE6E8140F" ] }, { "dlentry.dlentry_0A2D5782B38A4DF384095C2C502A83": [ "content.dt_624F5C095A0C4B7F84853665A9247C", "content.dd_898EF26B23EE40A09C12D75822BE6E" ] }, { "dlentry.dlentry_2F2A6FE221364A45AEE4ABC2207F80": [ "content.dt_E095EA7CD458400FBD70376F003CA4", "content.dd_A34479958B3F4989B762B820207451" ] }, { "dlentry.dlentry_DFA6CCDCFCA14920B6395FEE3BE44C": [ "content.dt_572A449B826C4F3DA0F47398E0B6BD", "content.dd_B017F03D3FE146968C4A09FA870B8F" ] }, { "dlentry.dlentry_B874FBB855B34AF1B88ABF9A510C50": [ "content.dt_3D8E76FA9ABE4FB0A2B38B046B49B3", "content.dd_882C08BDF6E1440AA1D792EBB4B2F8" ] }, { "dlentry.dlentry_01D502D14F2D49549DD0DE80153A5E": [ "content.dt_E7F42DF42A8D499F910239392F0BCE", "content.dd_CD371E4960464D7A939F3E0B691724" ] }, { "dlentry.dlentry_4BB3FBF2A99740B7BCC19D74F3E701": [ "content.dt_38D1778CD9454F36BDF3E581C17E5D", "content.dd_518651322377470E842506A902E35D" ] }, { "dlentry.dlentry_16CC6FDB116B4B5FB861E18FE50600": [ "content.dt_309E1E4CB2C240E880617AB00E0E33", "content.dd_DF42E4150D0A477E9CECCF969F5B9F" ] }, { "dlentry.dlentry_6817FB59C2F54CCFA5A70F5AA57DE4": [ "content.dt_6D1717ACAF504F83AD00D83F096D88", "content.dd_F6ED0B2EC5F345E08ED54F4F0C010A" ] }, { "dlentry.dlentry_A5110BE3FA0743E0BB3FC676C95617": [ "content.dt_5632B21BF1964CE5AA5720D6473533", "content.dd_20ACB5468CE7405FA2B7970567DBCB" ] }, { "dlentry.dlentry_394721336B4D4DC5AD12B80303B226": [ "content.dt_04A4089F07C8407DB9D35C950A26F7", "content.dd_D6ADB8924E01471F89F92254C6857E" ] }, { "dlentry.dlentry_D4F11DAD921343EF8DBF8F10CC3BB8": [ "content.dt_9B5404027E7A402DB617186ED4CE85", "content.dd_54FE11EC255F482991FCFEA41A4E08" ] }, { "dlentry.dlentry_843BB4C8B71844C09764BDF1FD0C97": [ "content.dt_F07A9280397D4334A4B35AACFEA523", "content.dd_FAAD5F9D1CF64F58AFA8690A46EB84" ] }, { "dlentry.dlentry_51AD820431CD413CB9019FDA861B75": [ "content.dt_77703BED629646A9A26011BE83D434", "content.dd_638E97929D724F14BABB661B7FD596" ] }, { "dlentry.dlentry_4E4E5D3A7B384682A6391A805C1121": [ "content.dt_76E6BB16385C4EE6A0B643F3F404AF", "content.dd_08CFC510CD4342C0B604EE652F93D7" ] }, { "dlentry.dlentry_C8010337AE73497F98D838C8EB68C3": [ "content.dt_9722018CA7794DAEB51CC3260DF8C0", "content.dd_111F1CB51FE44BCABCFDB30975C594" ] } ] } ] }, "task_selecting_categories-16.10-en.json": { "title": "title_44EAC60E01B7458698D518703444F22F", "title_44EAC60E01B7458698D518703444F22F": "Selecting the content categories to block", "shortdesc": "shortdesc_CD4E834F5BC14139BA41161653FC67AA", "shortdesc_CD4E834F5BC14139BA41161653FC67AA": "You can select the web content categories that you want to block under the Web content control settings. ", "content.p_D5184C555C3E437BAFDC5F466D2D13": "Follow these instructions:", "step.step_0934591479F54F7DAE5DEFEFC6D840": "Select the target domain or host.", "step.step_05EA180D6CAA47C19B7FED5A673F20": "Go to the Settings tab and select Windows > Web content control.", "step.step_1CE609786B8548E5BFF55F9FA27301": "Under Disallowed site categories, select the categories that you want to block for managed hosts.", "content.p_EE116AB9356A4F28954A6F2A950F72": "For example: http://www.myserver.com/", "step.step_4F37485FF2774776A15C9D7491BC0B": "Enter the addresses of any additional web sites that you want to block or allow, regardless of their content category, in the Disallowed sites list and Trusted sites list respectively.", "step.step_5A77926D75F84D88854B4951D39956": "Click the following icon to distribute the policy:
", "desc": [ "content.p_D5184C555C3E437BAFDC5F466D2D13", { "steps.steps_71FD432175DB4F6B908F50ECE705F4": [ "step.step_0934591479F54F7DAE5DEFEFC6D840", "step.step_05EA180D6CAA47C19B7FED5A673F20", "step.step_1CE609786B8548E5BFF55F9FA27301", "step.step_4F37485FF2774776A15C9D7491BC0B", "content.p_EE116AB9356A4F28954A6F2A950F72", "step.step_5A77926D75F84D88854B4951D39956" ] } ] }, "concept_using_device_control-16.10-en.json": { "title": "title_FE017296C74A417EAAE9DC52272FD716", "title_FE017296C74A417EAAE9DC52272FD716": "Using Device Control", "shortdesc": "shortdesc_23D873000782427F97C312F3CB82FE53", "shortdesc_23D873000782427F97C312F3CB82FE53": "Device Control blocks certain hardware devices to protect the network. ", "content.p_C26E37AAA12643EAA4BF4819B79997": "Device Control prevents malware from spreading to the network from external devices such as USB storage devices and DVD/CD-ROM drives. When a blocked device is plugged in to the client computer, Device Control turns it off to prevent access to it.", "desc": [ "content.p_C26E37AAA12643EAA4BF4819B79997" ] }, "task_configuring_device_control-16.10-en.json": { "title": "title_6B068DAD5BC54E44AF5FC83B12165823", "title_6B068DAD5BC54E44AF5FC83B12165823": "Configuring Device control", "shortdesc": "shortdesc_A4041080D3A74766BE7495B6BF954CE6", "shortdesc_A4041080D3A74766BE7495B6BF954CE6": "Device control can be configured with WithSecure Policy Manager. ", "content.p_5FD15A519D384FD18C68D04A7CED3B": "Follow these instructions to configure Device control.", "step.step_4645EE6270404FCCB42577486AD77E": "Go to the Settings tab and select Windows > Device control.", "step.step_B587FB7FF64E4D3BB0FEC9FE266E6C": "To turn on Device control, select Device control enabled.", "step.step_3C48F97EB33A4EBE99F8EF76396007": "Set the type of alert that is sent to the administrator when a device is blocked.", "content.p_4C98B93C2B104F0EA5709C998F4055": "A device that has Access Level set to Blocked cannot be accessed, when the rule is set as active.", "step.step_B2A1C4D9E2C54F178458E6F0D5C3CC": "The Device access rules table contains rules for blocking devices.", "desc": [ "content.p_5FD15A519D384FD18C68D04A7CED3B", { "steps.steps_93C29409CA5242E0A0DDE24D8446D5": [ "step.step_4645EE6270404FCCB42577486AD77E", "step.step_B587FB7FF64E4D3BB0FEC9FE266E6C", "step.step_3C48F97EB33A4EBE99F8EF76396007", "step.step_B2A1C4D9E2C54F178458E6F0D5C3CC", "content.p_4C98B93C2B104F0EA5709C998F4055" ] } ] }, "task_limiting_device_access-16.10-en.json": { "title": "title_C7D1A7D053AF4BAA892A4FB4030AF00F", "title_C7D1A7D053AF4BAA892A4FB4030AF00F": "Limiting access permissions for removable drives", "shortdesc": "shortdesc_CBD9D175E6DF4210B91987E7D3AFAF18", "shortdesc_CBD9D175E6DF4210B91987E7D3AFAF18": "Device Control allows you to specify the access permissions for removable drives, such as USB sticks and portable hard drives. ", "step.step_4645EE6270404FCCB42577486AD77E": "Go to the Settings tab and select Windows > Device control.", "subchoice.choice_D8D55A8087204F719E272A3D244043": "Select Allow write access if you want to allow users to copy files to removable drives. If this is not selected, users will have read-only access to any allowed removable drives.", "subchoice.choice_2E6A6A4D2AD6428EBEDC4CCDA635B8": "Select Allow executables to run if you want to allow users to run executable files, such as .exe or .msi files, that are located on a removable drive.", "step.step_316C63550D4C4A739737462FC1E1F1": "Select the access permissions under Removable storage devices:", "content.note_5989E0A660CE4D1C908EE461F00EAA": "Note: Exceptions are only applicable on version 15.00 and newer client applications.", "substep.substep_381067BDAF354F6086FD81C144664C": "Click Add to include a new exception.", "substep.substep_49C04ACD526742FD9B7E2D52A4BBD2": "Enter the hardware ID for the removable storage device that you want to add.", "content.p_584F3470078647F7B57EBB388DA023": "The new device is added to the table.", "substep.substep_639B687C09804D21BC4CEECA8E7C08": "Click OK.", "content.p_22DE5CA334FD4441B92CE009FCB3A3": "On the devices listed in this table, end users can always run executable files and always have write access to files on the devices, regardless of the other settings for removable storage devices.", "step.step_7E361BBE18194297AADDB07509A382": "To add devices where executable files are allowed to run as exceptions, click Configure removable storage devices where execute and write permissions are allowed.", "desc": [ { "steps.steps_DFFE515C53504EE1B9374568BFF2A3": [ "step.step_4645EE6270404FCCB42577486AD77E", "step.step_316C63550D4C4A739737462FC1E1F1", { "subchoices.choices_6AB57BAF1CD64E1F9C8DEFF4792CD1": [ "subchoice.choice_D8D55A8087204F719E272A3D244043", "subchoice.choice_2E6A6A4D2AD6428EBEDC4CCDA635B8" ] }, "step.step_7E361BBE18194297AADDB07509A382", "content.note_5989E0A660CE4D1C908EE461F00EAA", { "substeps.substepsalpha_1C8C4B3BED594C60909B90C5BAF5E1": [ "substep.substep_381067BDAF354F6086FD81C144664C", "substep.substep_49C04ACD526742FD9B7E2D52A4BBD2", "substep.substep_639B687C09804D21BC4CEECA8E7C08", "content.p_584F3470078647F7B57EBB388DA023" ] }, "content.p_22DE5CA334FD4441B92CE009FCB3A3" ] } ] }, "task_blocking_devices-16.10-en.json": { "title": "title_8493F62B59EC41CE844608D066A552C6", "title_8493F62B59EC41CE844608D066A552C6": "Blocking hardware devices", "shortdesc": "shortdesc_66D67773FB714F649E8F18439CD45C93", "shortdesc_66D67773FB714F649E8F18439CD45C93": "You can block the access to devices with predefined rules. ", "content.p_D04740846EC24EC18C22DB9EE03EA7": "By default, rules do not block any devices. To block devices, follow these instructions.", "step.step_4645EE6270404FCCB42577486AD77E": "Go to the Settings tab and select Windows > Device control.", "step.step_EE69E4B18E044C6192C98CA2FDCD99": "On the Device access rules table, select the row for the device that you want to block, and click Edit.", "content.note_F4984A07A6DC4965872626B8FDB04A": "Note: Some USB Wi-Fi adapters do not use the USB\\Class_E0 hardware ID and need a custom rule to work with Device control.", "step.step_57BE6DF2612242BCA11B1AE67BE694": "Set Access Level to Blocked to block the selected device.", "desc": [ "content.p_D04740846EC24EC18C22DB9EE03EA7", { "steps.steps_70DDA51161ED476BA275A9EB8910B8": [ "step.step_4645EE6270404FCCB42577486AD77E", "step.step_EE69E4B18E044C6192C98CA2FDCD99", "step.step_57BE6DF2612242BCA11B1AE67BE694", "content.note_F4984A07A6DC4965872626B8FDB04A" ] } ] }, "task_adding_exceptions-16.10-en.json": { "title": "title_1D12C539618541398FFD07F88FB395D2", "title_1D12C539618541398FFD07F88FB395D2": "Granting access to specific devices", "shortdesc": "shortdesc_4E1192339445409FAAA3956FE64B6FD3", "shortdesc_4E1192339445409FAAA3956FE64B6FD3": "You can set rules to allow a specific device while all other devices of same class are blocked. ", "content.p_8BE7D9BA2BB7427C987537AB81039D": "You need to know the hardware ID of the device that you want to allow before you can create a rule that grants full access to the device.", "content.p_F8425412AD334D558EADE60AFC4C33": "To add an exception to a rule, follow these instructions.", "content.p_3FA6845559104755AC2D4BB8756AB2": "The hardware ID has to be more specific than the ID which is used to block the device.", "step.step_7B5B48E659A34E4B8C5B8E8DA9BD64": "Get the hardware ID for the device that you want to allow.", "step.step_4645EE6270404FCCB42577486AD77E": "Go to the Settings tab and select Windows > Device control.", "step.step_BC19F62DBFA64630984B3BB332A199": "On the Device access rules table, click Add.", "step.step_245B80A9840B4C1CAE7C9CB1BE4351": "Enter the hardware ID for the device as the Hardware ID in the new rule.", "step.step_DD527A36A60143CEA549384FDDE220": "Set Access Level to Full access to allow the use of the device.", "step.step_D704B032F4604B348E38ED2E7223F2": "Set Active to Yes for the new rule.", "desc": [ "content.p_8BE7D9BA2BB7427C987537AB81039D", "content.p_F8425412AD334D558EADE60AFC4C33", { "steps.steps_A3732E680CCF4E94AE71F461884844": [ "step.step_7B5B48E659A34E4B8C5B8E8DA9BD64", "content.p_3FA6845559104755AC2D4BB8756AB2", "step.step_4645EE6270404FCCB42577486AD77E", "step.step_BC19F62DBFA64630984B3BB332A199", "step.step_245B80A9840B4C1CAE7C9CB1BE4351", "step.step_DD527A36A60143CEA549384FDDE220", "step.step_D704B032F4604B348E38ED2E7223F2" ] } ] }, "task_finding_id-16.10-en.json": { "title": "title_A516F7A404D143BB81F8C45551324A99", "title_A516F7A404D143BB81F8C45551324A99": "Finding hardware ID for a device", "shortdesc": "shortdesc_6F762EEE2AAC472192E87862792BB619", "shortdesc_6F762EEE2AAC472192E87862792BB619": "You can find the hardware ID of the device in multiple ways. You can use this ID with blocking rules. ", "content.p_54972235A8344A6E86A8F36197D393": "Follow these instructions to find the hardware ID either with WithSecure Policy Manager or Windows Device Manager.", "step.step_F1F2E5A63CAE4403890EFB77300DD0": "Select the target host.", "step.step_9F0D4BEE1925474A8BBEC058D49511": "Go to the Settings tab and select Windows > Device control.", "content.p_3718BED28CFC418293D5BB728946AC": "", "content.note_bh5_tbt_xyb": "Note: Report installed devices should be enabled and single device is selected for Report installed devices link to be active", "step.step_8B6BC9CC5AFC4AA8ABD7E662CAF319": "On the General section, click View devices.", "step.step_C3C57FD413664EBEA7F4AC717686DB": "If you cannot find the ID using the reported devices list, open Windows Device Manager in the client computer.", "step.step_377A3F59D135460098CD7577C559BC": "Find the device which ID you want to know in the list of devices.", "step.step_A97D4F4377274D328ED6AC00BA9110": "Right-click the device and select Properties.", "step.step_E1A6D62DD6D1421A97DE5D1F8C2532": "Go to Details tab.", "subchoice.choice_09E5DAADD8DC4A98ACAAAACD04560C": "Hardware IDs", "subchoice.choice_B0CC2C653F474F54BE1B4A9EA169D2": "Compatible IDs", "subchoice.choice_4736FC3B6E644893A686F647947E64": "Device class guid", "content.note_83C5A21057E84F7C8A041E90DCECB4": "Note: For external storage devices, this is the only ID that includes the unique serial number of the device.", "subchoice.choice_6C75C74CFDD14B27A57832D1B2B12C": "Parent ID", "step.step_34B1F464B1564B87BE23ACA02E8006": "Select one of the following IDs from the drop-down menu and write down its value:", "content.p_3118FADE3042493A9C105C39237E0F": "Use Hardware IDs, Compatible IDs and Device Class columns to find the ID of the device to be blocked.", "desc": [ "content.p_54972235A8344A6E86A8F36197D393", { "steps.steps_4A06A236AF7349ABA32264D42A3236": [ "step.step_F1F2E5A63CAE4403890EFB77300DD0", "step.step_9F0D4BEE1925474A8BBEC058D49511", "step.step_8B6BC9CC5AFC4AA8ABD7E662CAF319", "content.p_3718BED28CFC418293D5BB728946AC", "content.note_bh5_tbt_xyb", "step.step_C3C57FD413664EBEA7F4AC717686DB", "step.step_377A3F59D135460098CD7577C559BC", "step.step_A97D4F4377274D328ED6AC00BA9110", "step.step_E1A6D62DD6D1421A97DE5D1F8C2532", "step.step_34B1F464B1564B87BE23ACA02E8006", { "subchoices.choices_9AE6029CFD1A4A4EBBCB8D9CCED361": [ "subchoice.choice_09E5DAADD8DC4A98ACAAAACD04560C", "subchoice.choice_B0CC2C653F474F54BE1B4A9EA169D2", "subchoice.choice_4736FC3B6E644893A686F647947E64", "subchoice.choice_6C75C74CFDD14B27A57832D1B2B12C", "content.note_83C5A21057E84F7C8A041E90DCECB4" ] } ] }, "content.p_3118FADE3042493A9C105C39237E0F" ] }, "concept_managing_software_updates-16.10-en.json": { "title": "title_12BC1FC05278498593C7AEC3C59FD920", "title_12BC1FC05278498593C7AEC3C59FD920": "Managing software updates", "shortdesc": "shortdesc_C2FD404AFF0A4FFCACCA2D003D36E9ED", "shortdesc_C2FD404AFF0A4FFCACCA2D003D36E9ED": "You can manage and install software updates (a Premium feature) for the computers in your network. ", "content.p_F1F497317314499A9D3C9A1AAB67C3": "It is important to have the latest software updates installed on the workstations in your network, because many updates fix security vulnerabilities in installed products.", "content.note_ggw_221_fdc": "Note: You can find the list of vendors included in WithSecure Software Updater here.", "content.p_7A34F3ABC61F4FD18F9F761B118ED5": "You can configure Policy Manager to automatically install security updates to computers. You can also check the status of software updates and install missing software updates manually when needed.", "content.p_E6EBBB74E8CF4E4EBA4499B4E8B0A7": "", "content.note_CAD3F18BA8F94907A35A9AD22DDFBB": "Note: This feature does not support all managed products or versions. Check the release notes for your product to see if your current version is supported.", "content.p_853121AC0B6540C8B225A1692B8122": "", "content.note_EEBF57B892934167830143E71931DE": "Note: Policy Manager only downloads and updates the Software Updater databases if you have hosts that have Software Updater installed.", "desc": [ "content.p_F1F497317314499A9D3C9A1AAB67C3", "content.note_ggw_221_fdc", "content.p_7A34F3ABC61F4FD18F9F761B118ED5", "content.note_CAD3F18BA8F94907A35A9AD22DDFBB", "content.note_EEBF57B892934167830143E71931DE" ] }, "task_automatic_update_installation-16.10-en.json": { "title": "title_2D0EBAFDC01D482B89233599962A73EF", "title_2D0EBAFDC01D482B89233599962A73EF": "Installing software updates automatically", "shortdesc": "shortdesc_A67F55E16EA94558A178CE72333DB7A3", "shortdesc_A67F55E16EA94558A178CE72333DB7A3": "You can configure Policy Manager to automatically install security updates for software to computers in your network. ", "content.p_E685AB241274426CB94EE44E090F61": "Follow these instructions:", "step.step_37DF18C8A62741728475852D2AB448": "Select the target domain.", "step.step_FEE4CE38DC1F44129D0918A7767A72": "Go to the Settings tab and select Windows > Software Updater.", "step.step_D56A3B21878348BC997428862C9B16": "Select Enable Software Updater.", "cell.choptionhd_automatic_update_install_0C581": "Option", "cell.chdeschd_automatic_update_install_05CFB": "Description", "cell.choption_automatic_update_install_071D6": "Always", "cell.chdesc_automatic_update_install_07659": "The managed hosts fetch the updates from Policy Manager Server or Proxy when they are available.", "cell.choption_automatic_update_install_05EB8": "If possible", "cell.chdesc_automatic_update_install_00E83": "The managed hosts fetch the updates from Policy Manager Server or Proxy if they are available, otherwise they download the updates from the internet.", "cell.choption_automatic_update_install_0D8C3": "Never", "cell.chdesc_automatic_update_install_05112": "The managed hosts always fetch the updates from the internet.", "step.step_AA88EED68DA04E2FB1C95AE523FD00": "Select how you want managed hosts to fetch the software updates next to Download software updates from Policy Manager.", "step.step_9A02DED767E0470BBD348E10F557B4": "Under Automatic installation, select the security update categories and schedule that you want to use.", "step.step_21D40B14039846509597AAAA8AEC4A": "Select Run the task even if a scheduled start is missed if you want the updates to be installed as soon as possible on hosts that are not available when the scheduled installation is run.", "step.step_0417442F514C432CB197935927D843": "Select Allow further installation of software updates before restarting if you want to minimize the amount of restarts needed on managed hosts.", "step.step_D058F651F00F4F54BD11A6763B72DF": "Click the following icon to distribute the policy:
", "desc": [ "content.p_E685AB241274426CB94EE44E090F61", { "steps.steps_98ABDDA3E36A46B18BA8AA2774FBB6": [ "step.step_37DF18C8A62741728475852D2AB448", "step.step_FEE4CE38DC1F44129D0918A7767A72", "step.step_D56A3B21878348BC997428862C9B16", "step.step_AA88EED68DA04E2FB1C95AE523FD00", { "table.table_26AA916A59D14433BD3CC029FB451F": [ { "thead.chhead_automatic_update_install_04F22": [ "cell.choptionhd_automatic_update_install_0C581", "cell.chdeschd_automatic_update_install_05CFB" ] }, { "row.choice_B1F7A4645A92403CB89896CEE1CBF3": [ "cell.choption_automatic_update_install_071D6", "cell.chdesc_automatic_update_install_07659" ] }, { "row.choice_5076F2DC689A4E788DB07BF8807F7B": [ "cell.choption_automatic_update_install_05EB8", "cell.chdesc_automatic_update_install_00E83" ] }, { "row.choice_75B8BFAEAAAA4A2AACDCAD3C5AF6F8": [ "cell.choption_automatic_update_install_0D8C3", "cell.chdesc_automatic_update_install_05112" ] } ] }, "step.step_9A02DED767E0470BBD348E10F557B4", "step.step_21D40B14039846509597AAAA8AEC4A", "step.step_0417442F514C432CB197935927D843", "step.step_D058F651F00F4F54BD11A6763B72DF" ] } ] }, "task_handling_manual_software_updates-16.10-en.json": { "title": "title_987C41DA254249A99D44C1180C88816A", "title_987C41DA254249A99D44C1180C88816A": "Handling manually downloaded software updates", "shortdesc": "shortdesc_ED6E59DD92084B09A5E3037825C92BC3", "shortdesc_ED6E59DD92084B09A5E3037825C92BC3": "For software updates that cannot be downloaded automatically, you can import the update packages to Policy Manager for distribution. ", "content.p_53BB6F1AA7864A6ABAB1C0F83B2745": "Some software vendors require a user account or other authentication to access the update packages. This means that they cannot be downloaded automatically. Policy Manager receives notifications of any such software updates from the managed hosts.", "content.p_3F056C294599470CA1D5A883553B5A": "With Policy Manager, you can download the packages manually, import them, and manage their distribution to hosts.", "content.p_1EFC261145FD43F3B6488AA0DACAD7": "Follow these instructions:", "step.step_CC295FA8CCB94F06A687D015A4BEC3": "Select Root on the Domain tree.", "step.step_DBF1A09F5D7F4311BF2F215153BB22": "Select the Software updates tab.", "content.p_9EBCCBDBC4CD41E48CDBA919476B53": "Manual downloads shows you the available updates that need to be downloaded manually.", "step.step_784F14D118D1492893E0E9535B6C04": "Click Manual downloads.", "step.step_437F45C3B63B44608F30673FC737F0": "Click the link shown under Download package or click Copy link and paste it to your browser.", "content.note_30D43CA7DE1F48C682C2704085F9EF": "Note: You can also replace the stored package for an update if necessary, for example if the file did not download fully.", "step.step_5DD449CDD27146D6B4A1A67FAADF5A": "Follow the instructions shown on the vendor's website to download the update package.", "content.p_0F395F685FF94BB6A3F276C49C02DF": "The status for the update changes to Imported and it is ready for distribution.", "step.step_DC57A3DC8A974F98961A76AF6EE0E2": "When the update package is downloaded, click Browse and select the downloaded file.", "step.step_2D523996972142C1A2A830EC856E2D": "Click Close.", "content.p_B334EA66BB8246C2B715AC3E74CD5C": "Policy Manager distributes the software update according to the settings for your network.", "desc": [ "content.p_53BB6F1AA7864A6ABAB1C0F83B2745", "content.p_3F056C294599470CA1D5A883553B5A", "content.p_1EFC261145FD43F3B6488AA0DACAD7", { "steps.steps_F6499C6489624EDE9C2F545D52C558": [ "step.step_CC295FA8CCB94F06A687D015A4BEC3", "step.step_DBF1A09F5D7F4311BF2F215153BB22", "step.step_784F14D118D1492893E0E9535B6C04", "content.p_9EBCCBDBC4CD41E48CDBA919476B53", "step.step_437F45C3B63B44608F30673FC737F0", "step.step_5DD449CDD27146D6B4A1A67FAADF5A", "content.note_30D43CA7DE1F48C682C2704085F9EF", "step.step_DC57A3DC8A974F98961A76AF6EE0E2", "content.p_0F395F685FF94BB6A3F276C49C02DF", "step.step_2D523996972142C1A2A830EC856E2D" ] }, "content.p_B334EA66BB8246C2B715AC3E74CD5C" ] }, "task_exclude_updates-16.10-en.json": { "title": "title_12C6C3D45D544C3E87710CF0118943EA", "title_12C6C3D45D544C3E87710CF0118943EA": "Excluding software updates from automatic installation", "shortdesc": "shortdesc_B1B93478356B4E1195E15922BCDFA291", "shortdesc_B1B93478356B4E1195E15922BCDFA291": "You can enter the name and bulletin ID for any software that you do not want Software Updater to update automatically. ", "content.p_3F0C5EF6B67045E887403FCFD29A31": "Exclusion is based on the update installation status reported by managed hosts. When a host starts installing missing updates, it checks for any excluded updates and reports that they were not installed due to exclusion by the administrator. This also means that excluded updates do not immediately disappear from the list on the Software updates tab, because the hosts only report the installation status once they attempt to install the missing update.", "content.p_A45FA7BE1C3243189A7E8A10478CAC": "Follow these instructions:", "step.step_0AF01CAEE2A34B3DA13338CC1A381B": "Select the target domain.", "substep.substep_D760656148D24146929E03BD67BCD1": "Go to the Settings tab and select Windows > Software Updater.", "substep.substep_003B81FCE3B04C7BA2CB62B71997C3": "Under Exclude software from automatic installation, click Add.", "content.p_AC8A37B11C944C2398E8E08ABEC746": "You can enter both the name of the software and the bulletin ID for the specific update. The software name can include a product name and a service pack name. For example \"windows sp3\" will match all windows updates related to SP3. If you use the bulletin ID for excluding updates, only updates matching the exact bulletin ID will be excluded.", "content.p_61B5581C59F64C9CB4DD24F5E681FF": "You can also select a software vendor to exclude. If you select a vendor and do not enter any other details, all updates for that vendor's software are excluded.", "substep.substep_FD2FD6B78AFF4971B407274DBCC886": "Enter the details for the update that you want to exclude.", "step.step_BD09EA21FD2E4F65930E1A7E931101": "To manually enter the details for the software updates that you want to exclude:", "substep.substep_B95AD80E565C4A0D9F5EB9FAF683C8": "On the Software updates page, right-click the update that you want to exclude.", "content.note_77F053BD832B4D429C30F6535720EB": "Note: If you exclude an update by its software name, any other updates that use the same name are also excluded.", "substep.substep_ECCE780CF689434A9ADB35B17D3EAA": "Select Exclude by Software to use the update name given in the Software column or Exclude by Bulletin ID to use the bulletin ID.", "step.step_65767DC7454B4045A880F963FAC4B2": "To exclude a software update from the current list of available updates:", "step.step_E482B10E23FA4AE5A9631689851F58": "Click the following icon to distribute the policy:
", "content.p_115829BE916144E8A683FAB3DA8165": "Any updates for software matching the entered text, selected software name, or bulletin ID is now excluded from automatic installation. You can click View in the Matching updates column under Exclude software from automatic installation to see a list of the updates currently found for the entered software.", "desc": [ "content.p_3F0C5EF6B67045E887403FCFD29A31", "content.p_A45FA7BE1C3243189A7E8A10478CAC", { "steps.steps_7FE0DBCDFA2E44FD9EF31DA8CE7B23": [ "step.step_0AF01CAEE2A34B3DA13338CC1A381B", "step.step_BD09EA21FD2E4F65930E1A7E931101", { "substeps.substepsalpha_C96D3A071D2946B39F193B695E7868": [ "substep.substep_D760656148D24146929E03BD67BCD1", "substep.substep_003B81FCE3B04C7BA2CB62B71997C3", "substep.substep_FD2FD6B78AFF4971B407274DBCC886", "content.p_AC8A37B11C944C2398E8E08ABEC746", "content.p_61B5581C59F64C9CB4DD24F5E681FF" ] }, "step.step_65767DC7454B4045A880F963FAC4B2", { "substeps.substepsalpha_7BBC1FA793FC4298835AA525A36C63": [ "substep.substep_B95AD80E565C4A0D9F5EB9FAF683C8", "substep.substep_ECCE780CF689434A9ADB35B17D3EAA", "content.note_77F053BD832B4D429C30F6535720EB" ] }, "step.step_E482B10E23FA4AE5A9631689851F58" ] }, "content.p_115829BE916144E8A683FAB3DA8165" ] }, "concept_checking_software_updates-16.10-en.json": { "title": "title_5706900323EC4F6E92E70438BB3D8FE9", "title_5706900323EC4F6E92E70438BB3D8FE9": "Checking the status of software updates in your network", "shortdesc": "shortdesc_A30B3A90E67D4D7AA255476B36C272F8", "shortdesc_A30B3A90E67D4D7AA255476B36C272F8": "On the Software updates page, you can check the status of software updates in your network. ", "content.p_54AD1E4ACF264751B97223A0FDB3C7": "The Software updates page provides a list of updates for the software in use within your network. Each entry on the list includes the software in question, category, ID and description for the update, corresponding knowledge base (KB) number, as well as the update status if a single host is selected. If you select a domain or multiple hosts, you can click View hosts to see the update status. From this page, you can check which computers are missing selected updates, and also install the missing updates to those computers.", "content.p_EB04ADF31FD048C6B2B29875C17A45": "The Status column in the Missing software update view also shows you if you need to download the update package manually, or if the package has already been downloaded manually. These status links open the Manual downloads view.", "content.p_B87E9E8A7AD24B9EBB24AE356077DF": "", "content.note_3DBEDA45581F4369A56FDAC2E307C5": "Tip: You can also use the Search missing updates field on the Software updates page to find hosts that are missing an update. You can use any of the visible criteria for the update as a keyword for your search.", "desc": [ "content.p_54AD1E4ACF264751B97223A0FDB3C7", "content.p_EB04ADF31FD048C6B2B29875C17A45", "content.note_3DBEDA45581F4369A56FDAC2E307C5" ] }, "task_install_missing_updates-16.10-en.json": { "title": "title_E78369B5E79B42E0AFF6F9931CDEA751", "title_E78369B5E79B42E0AFF6F9931CDEA751": "Installing missing software updates", "shortdesc": "shortdesc_226D7C4A1EBC448291A26597A60635F8", "shortdesc_226D7C4A1EBC448291A26597A60635F8": "You can install missing software updates manually. ", "content.p_BC384497CFE24213B0ED361ED3AAE6": "To install the missing software updates:", "step.step_8350DA1CD33942E8ABD94C4420EB97": "Select the target domain.", "step.step_2B817282F4EC4EB6867CC5532DB247": "On the Software updates page, select the updates that you want to install.", "step.step_4ECA34E8D90B4DC2A1DEEA7947D31D": "Click Install.", "desc": [ "content.p_BC384497CFE24213B0ED361ED3AAE6", { "steps.steps_D431AEDD602F436D863729DCEEE109": [ "step.step_8350DA1CD33942E8ABD94C4420EB97", "step.step_2B817282F4EC4EB6867CC5532DB247", "step.step_4ECA34E8D90B4DC2A1DEEA7947D31D" ] } ] }, "task_allow_swup_end_users-16.10-en.json": { "title": "title_A257E42427FB4E43997CD32DF5A06802", "title_A257E42427FB4E43997CD32DF5A06802": "Allowing end users to manage software updates", "shortdesc": "shortdesc_EA941DC7FD9345BBBCD26EA6F466E519", "shortdesc_EA941DC7FD9345BBBCD26EA6F466E519": "You can allow users to see the Software Updater options in the local user interface so that they can install available updates. ", "content.p_8282D9168E8942F98341B8E19D998B": "", "content.note_5B409DC189244BB2AF65236813367C": "Note: This feature is only available for version 15 and newer clients.", "content.p_3FEF8758D6BA4716A6CFF36CEC9C9E": "Follow these instructions:", "step.step_97D0CEF7F24E471DAC899DBA36E3E8": "Select the target domain.", "step.step_352E279A30F540C48F2E588A34EBD4": "Go to the Settings tab and select Windows > Software Updater.", "step.step_5686B64C69414DE98E2D8DFFDED335": "Select Show Software Updater options to users.", "step.step_384101B1A96C41C287AD859312C958": "Click the following icon to distribute the policy:
", "desc": [ "content.note_5B409DC189244BB2AF65236813367C", "content.p_3FEF8758D6BA4716A6CFF36CEC9C9E", { "steps.steps_8FB7A9A4E82340228E504717CBEE9A": [ "step.step_97D0CEF7F24E471DAC899DBA36E3E8", "step.step_352E279A30F540C48F2E588A34EBD4", "step.step_5686B64C69414DE98E2D8DFFDED335", "step.step_384101B1A96C41C287AD859312C958" ] } ] }, "task_configuring_http_proxy-16.10-en.json": { "title": "title_031A5F94C1B845829C0C767F197B71E7", "title_031A5F94C1B845829C0C767F197B71E7": "Configuring a third-party HTTP proxy for Software Updater", "shortdesc": "shortdesc_C3BFFFE5CA1D4F4B8F2E69D03BF390A3", "shortdesc_C3BFFFE5CA1D4F4B8F2E69D03BF390A3": "You can set up Software Updater to receive its updates through an external HTTP proxy. ", "content.p_383896C1824148A2BE11640D0A6ABF": "Policy Manager works as a proxy for the software update packages by default, and the default cache size is set to 10 GB (you can configure this setting in Policy Manager Console). However, some organizations or network setups may require the use of a dedicated third-party proxy.", "content.p_7CA96ACC765840B4A8F643AA8B0B32": "To configure the proxy and caching for Software Updater updates:", "content.p_configuring_http_proxy_0007531": "For example, with Squid, make the following configurations in squid.conf:", "content.p_C75F7CB3A2E44AA19A4CE9CD3F1FB6": "cache_dir ufs /var/spool/squid 100000 16 256", "substep.substep_29403FB82AA44058994C88B6A8D5C7": "Set the disk cache to 100 GB:", "content.p_32763A9BA4B143DF8DC25CD55A2633": "maximum_object_size 2048 MB", "substep.substep_23D200E2DDE84CB3BA40E160C0F75B": "Set the maximum caching file size:", "content.p_C72974B96A684687981268887F7240": "acl FSecSwUp browser F-SecureSoftwareUpdater http_access allow FSecSwUp http_access deny all", "substep.substep_8BBBA6192ACA49B4A41886D737814F": "Configure the proxy to be used for software updates only (Software Updater is identified by its User-Agent name):", "content.p_5F37013BB8FC4383A5F0BDAAFC6331": "Once the caching proxy is up and running, it needs to be added to the Software Updater policy.", "step.step_9E9DF81F9C1841ECBEF6DE88416724": "Install and configure the proxy of your choice.", "substep.substep_27F31DC4723A4FDBB53E1CE44E3176": "Go to the Settings tab and select Windows > Software updater.", "substep.substep_9273210B0C25439EB0E7CA760E0222": "Set Use HTTP Proxy to User-defined.", "substep.substep_328AF056224E4EF98568ABF9CDD292": "In User-defined proxy, enter the address and port for the proxy (http://<proxy_address>:<port_number>).", "step.step_2C5973CD15EA468C9499EFCA694931": "Configure the Software Updater policy.", "desc": [ "content.p_383896C1824148A2BE11640D0A6ABF", "content.p_7CA96ACC765840B4A8F643AA8B0B32", { "steps.steps_B899941E1DF040DF84E56729192A56": [ "step.step_9E9DF81F9C1841ECBEF6DE88416724", "content.p_configuring_http_proxy_0007531", { "substeps.substepsalpha_298684C0752A426E921E0DAAFDBA62": [ "substep.substep_29403FB82AA44058994C88B6A8D5C7", "content.p_C75F7CB3A2E44AA19A4CE9CD3F1FB6", "substep.substep_23D200E2DDE84CB3BA40E160C0F75B", "content.p_32763A9BA4B143DF8DC25CD55A2633", "substep.substep_8BBBA6192ACA49B4A41886D737814F", "content.p_C72974B96A684687981268887F7240" ] }, "content.p_5F37013BB8FC4383A5F0BDAAFC6331", "step.step_2C5973CD15EA468C9499EFCA694931", { "substeps.substepsalpha_mt2alpha_wctalpha_xyb": [ "substep.substep_27F31DC4723A4FDBB53E1CE44E3176", "substep.substep_9273210B0C25439EB0E7CA760E0222", "substep.substep_328AF056224E4EF98568ABF9CDD292" ] } ] } ] }, "concept_rdr_intro-16.10-en.json": { "title": "title_9F8BDFE4C8234D0F9D309D5168E5B9F8", "title_9F8BDFE4C8234D0F9D309D5168E5B9F8": "Endpoint Detection and Response", "shortdesc": "shortdesc_CEFBB52188F9417AB68F87230597761F", "shortdesc_CEFBB52188F9417AB68F87230597761F": "You can manage the distribution and basic operations of WithSecure Endpoint Detection and Response (EDR) sensors with Policy Manager. ", "content.p_FB04F4C25CFB475F9446D8E8E51A91": "", "content.note_6FAAF51DA7764FB58A00D220645A05": "Note: More advanced incident-related information and operations are available in the WithSecure Endpoint Detection and Response portal. See the Endpoint Detection and Response documentation for the portal.", "content.p_25B531A4AEA54D099C3EE829420CB2": "WithSecureEndpoint Detection and Response gives you instant visibility into your IT environment and security status from a single pane of glass. It keeps your business and data safe by detecting attacks fast and responding with expert guidance with the possibility of elevating the hardest cases to our cyber security specialists.", "content.p_951E78C76AFE42ABBE655C233DA0DF": "Organizations can be breached in many ways. Increasingly, the attacks are fileless and do not require attackers to install malware on desktops or laptops. Advanced Persistent Threats (APT) and cyber threats are an extremely costly problem for companies. They are difficult to recognize just using traditional protection methods. Also, these attacks can be difficult to analyze and respond to. Defending against these attacks requires both the latest technological solutions and the expertise to analyze and understand the available data.", "content.p_963E58286AB443D6B20D01B6C603EE": "With its deep bi-directional intelligence and high level of automation, WithSecure Endpoint Detection and Response protects against advanced threats even before breaches happen. It detects incidents with lightweight sensors, which are installed on monitored hosts in the organization. Sensors collect data on behavioral events, such as files being accessed, processes or network connections being created, or something being written into the registry or system log. These events are then further analyzed in the backend. The solution does not just to do real-time detections, but also makes detections based on applying new rules to old data.", "content.p_AA39EEAF78184311A647821F13C9E2": "Often targeted attacks could go unnoticed for months or even years. With WithSecure Endpoint Detection and Response, you can prevent the attack from breaching critical servers through the targeted hosts.", "desc": [ "content.note_6FAAF51DA7764FB58A00D220645A05", "content.p_25B531A4AEA54D099C3EE829420CB2", "content.p_951E78C76AFE42ABBE655C233DA0DF", "content.p_963E58286AB443D6B20D01B6C603EE", "content.p_AA39EEAF78184311A647821F13C9E2" ] }, "task_deploying_rdr_sensors-16.10-en.json": { "title": "title_1CDC3D05575A4AB9BDE8F4EC1E719EB8", "title_1CDC3D05575A4AB9BDE8F4EC1E719EB8": "Activating endpoint sensors", "shortdesc": "shortdesc_37F356CE126146E6967F173E6FBBE430", "shortdesc_37F356CE126146E6967F173E6FBBE430": "Endpoint sensors are lightweight, discreet sensors, which are included in Client Security 14.10 and Server Security 14.00 and newer. These sensors collect behavioral data from endpoint devices and are specifically designed to withstand a wide range of attacks. ", "content.p_00D12A6BAE2E4AF59551125AD2C3AD": "You need an activation keycode for registering the Endpoint Detection and Response (EDR) sensors. Contact your partner to get your EDR for Business Suite keycode.", "content.p_BAB18A822A0E4F778E908728969D61": "Follow these instructions:", "step.step_CD7D7F2ED3DD40E0B0D7C77903B2DF": "Select the target domain.", "step.step_D18B5407949F47DAAF99A1F745CBD8": "Go to the Settings tab and select Windows > Endpoint Detection and Response.", "step.step_B6AF3BFA7BF14D9481A1018692B877": "Enter your sensor activation keycode for the corresponding host type (workstations or servers).", "step.step_3B6DB48781114716899B00F5823994": "Select Activate Endpoint Detection and Response module.", "step.step_2CFF679754324E8C93F8D398033542": "Click the following icon to distribute the policy:
", "desc": [ "content.p_00D12A6BAE2E4AF59551125AD2C3AD", "content.p_BAB18A822A0E4F778E908728969D61", { "steps.steps_5E956A942DA546288B51579AB6460D": [ "step.step_CD7D7F2ED3DD40E0B0D7C77903B2DF", "step.step_D18B5407949F47DAAF99A1F745CBD8", "step.step_B6AF3BFA7BF14D9481A1018692B877", "step.step_3B6DB48781114716899B00F5823994", "step.step_2CFF679754324E8C93F8D398033542" ] } ] }, "task_reactivating_endpoint_sensors-16.10-en.json": { "title": "title_B4F847AE57C24E8EB637C5EAEC2B7418", "title_B4F847AE57C24E8EB637C5EAEC2B7418": "Reactivating endpoint sensors", "shortdesc": "shortdesc_C7C3EC00459A498F800B162DF53D6F9E", "shortdesc_C7C3EC00459A498F800B162DF53D6F9E": "You can reactivate endpoint sensors and register managed hosts as new devices in the background EDR backend. ", "step.step_C9101703A73E41A8865284A77C169E": "Select the target domain.", "step.step_621A0C5D4CBA4CC28D540C1398028D": "Go to the Settings tab, and in Standard view, select Windows > Endpoint Detection and Response.", "step.step_133926678FC743A28BC5331A954000": "Uncheck Activate Endpoint Detection and Response module.", "step.step_18F123F73E804F2E9CC7D354393787": "Click the following icon to distribute the policy:
", "step.step_73E55FACF02B46DD8A05841054705C": "Wait for the sensor status in Policy Manager to become N/A.", "step.step_55F409ED5F2546ABB1AFEB674B47D7": "Select Activate Endpoint Detection & Response module back or clear the policy override.", "desc": [ { "steps.steps_D1741C71CF454E89AC2897BDBBF646": [ "step.step_C9101703A73E41A8865284A77C169E", "step.step_621A0C5D4CBA4CC28D540C1398028D", "step.step_133926678FC743A28BC5331A954000", "step.step_18F123F73E804F2E9CC7D354393787", "step.step_73E55FACF02B46DD8A05841054705C", "step.step_55F409ED5F2546ABB1AFEB674B47D7" ] } ] }, "activating_endoint_sensors_in_vdi-16.10-en.json": { "title": "title_activating_endpoint_sens_0FC24", "title_activating_endpoint_sens_0FC24": "Activating endpoint sensors in VDI", "shortdesc": "shortdesc_activating_endpoint_sens_03E79", "shortdesc_activating_endpoint_sens_03E79": "The endpoint sensors can be deployed to a Virtual Desktop Infrastructure (VDI) environment.", "content.p_activating_endpoint_sens_00509": "Follow these step:", "content.note_dn4_tys_xbc": "Note: Do not activate the endpoint sensor at this point.", "step.step_activating_endpoint_sens_00FA8": "Prepare golden image and install Client Security or Server Security to it.", "step.step_activating_endpoint_sens_0F189": "Create a new policy domain and configure policies to activate the endpoint sensor as instructed in Activating endpoint sensors.", "step.step_activating_endpoint_sens_0D6D6": "Create import rule as instructed in Adding hoststo automatically register clones to the policy domain that you created in the previous step.", "step.step_activating_endpoint_sens_0517B": "Deploy the clones, wait for them to appear in the dedicated policy domain and for the sensor registration status to change from \"N/A\" to \"Registered\".", "desc": [ "content.p_activating_endpoint_sens_00509", { "steps.steps_activating_endpoint_sens_09564": [ "step.step_activating_endpoint_sens_00FA8", "content.note_dn4_tys_xbc", "step.step_activating_endpoint_sens_0F189", "step.step_activating_endpoint_sens_0D6D6", "step.step_activating_endpoint_sens_0517B" ] } ] }, "task_checking_rdr_status-16.10-en.json": { "title": "title_8E59D4840FE44D1884BE3CB1F9F604BD", "title_8E59D4840FE44D1884BE3CB1F9F604BD": "Checking the status of endpoint sensors", "shortdesc": "shortdesc_667D8588CAEE41B78656A48B06ED2213", "shortdesc_667D8588CAEE41B78656A48B06ED2213": "You can see the status of deployed Endpoint Detection and Response endpoint sensors on the Status tab. ", "content.p_D9281AF4D163462A983DD34C544C46": "Policy Manager shows you the connection status of the sensors as well as any errors related to activation, for example if the subscription is not valid or has expired.", "content.p_B262A9D8088B42BF99367683C0B224": "To check the status of endpoint senors:", "content.p_4B790D57C54840C38186D5E2CF4905": "This page shows you basic information on the endpoint sensors in your managed network.", "step.step_20897C263A894204A8252C09B73D48": "Select the Status tab and go to the Endpoint Detection and Response page.", "content.p_75D9DC67C6214D25BF00D91A722E7E": "More details and operations are available in the Endpoint Detection and Response portal. The Status > Endpoint Detection and Response page in Policy Manager has a link that opens the portal in your web browser. You receive access credentials for the portal in connection with your sensor activation keycodes.", "desc": [ "content.p_D9281AF4D163462A983DD34C544C46", "content.p_B262A9D8088B42BF99367683C0B224", { "steps.steps_B0B83F793CE24546B0D73BEBB3FA54": [ "step.step_20897C263A894204A8252C09B73D48", "content.p_4B790D57C54840C38186D5E2CF4905" ] }, "content.p_75D9DC67C6214D25BF00D91A722E7E" ] }, "task_isolating_hosts-16.10-en.json": { "title": "title_272E217C64D347BD8233198CE2151AF4", "title_272E217C64D347BD8233198CE2151AF4": "Isolating hosts from the network", "shortdesc": "shortdesc_7576DA4E97A94B1FA14B9870EAA667EF", "shortdesc_7576DA4E97A94B1FA14B9870EAA667EF": "You can isolate one or more hosts from the network. ", "content.p_409BFE8F00114126951B24F0A031DD": "", "content.note_6AF10D5F3DEA434784A00E72DC007B": "Note: Use network isolation with caution and only in case of a network attack.", "content.p_DF8E22C3920743B9ADC63AA7E114FD": "To isolate a host from the network:", "step.step_7F888CA0760E4843AE1ADC9864E94E": "Select the target host in the policy domain tree.", "step.step_058BBC2AA63C4E949407BC155583F3": "Go to the Operations tab.", "content.p_E2FB260175AB46E2812AB35C241E49": "This isolates the selected host from the network.", "step.step_9D88193B35A84C3FB14540A656A91F": "Click Isolate under Network isolation.", "step.step_0B27FC7C746B4AB0AD98F4C5DE3DE7": "To reconnect an isolated host to the network, click Release on the Operations tab.", "content.p_78005A8C9A76472CAB98C8E6C37CCD": "Isolated hosts are shown on the Host issues section of the dashboard.", "desc": [ "content.note_6AF10D5F3DEA434784A00E72DC007B", "content.p_DF8E22C3920743B9ADC63AA7E114FD", { "steps.steps_B34CBCBA268249B989EC17F201ABEF": [ "step.step_7F888CA0760E4843AE1ADC9864E94E", "step.step_058BBC2AA63C4E949407BC155583F3", "step.step_9D88193B35A84C3FB14540A656A91F", "content.p_E2FB260175AB46E2812AB35C241E49", "step.step_0B27FC7C746B4AB0AD98F4C5DE3DE7" ] }, "content.p_78005A8C9A76472CAB98C8E6C37CCD" ] }, "task_setting_visibility_notifications-16.10-en.json": { "title": "title_C57F616823EC4DB897DA924E2413DFCD", "title_C57F616823EC4DB897DA924E2413DFCD": "Hiding notifications on managed hosts", "shortdesc": "shortdesc_6E31903EEC534E3C9DCF457306C6A44B", "shortdesc_6E31903EEC534E3C9DCF457306C6A44B": "You can hide the security notifications and computer restart prompts from end users. ", "content.p_EDEC2E911D294D8182737C3B9487F5": "Policy Manager includes separate settings for the visibility of notifications on workstations and servers.", "content.p_D298B7DD1C54442ABF510187D9C7B0": "Follow these instructions:", "content.p_987D50BBD25042BB8D10CD723223C1": "To hide security notifications and computer restart prompts from end users:", "substep.substep_304D6C76256749C89289BD08C93EAE": "Go to the Settings tab and select Windows > Centralized management.", "substep.substep_F63FE9B9004D468692A702BBF8A6D1": "Under User notifications, select Administrators only from drop-down lists for workstations and servers.", "step.step_F5B31F39F3614F4C979FA83F0F7946": "Select the target domain.", "step.step_C0568A24DBEC4CECA0595E3C212778": "Click the following icon to distribute the policy:
", "desc": [ "content.p_EDEC2E911D294D8182737C3B9487F5", "content.p_D298B7DD1C54442ABF510187D9C7B0", { "steps.steps_AFA574753CF847B4AF479497548652": [ "step.step_F5B31F39F3614F4C979FA83F0F7946", "content.p_987D50BBD25042BB8D10CD723223C1", { "substeps.substepsalpha_48C0891573B44D87A2711DC53739C9": [ "substep.substep_304D6C76256749C89289BD08C93EAE", "substep.substep_F63FE9B9004D468692A702BBF8A6D1" ] }, "step.step_C0568A24DBEC4CECA0595E3C212778" ] } ] }, "task_hiding_local_ui-16.10-en.json": { "title": "title_9AF39F694F7B4F00B3FEBB671D209248", "title_9AF39F694F7B4F00B3FEBB671D209248": "Hiding the local user interface on managed hosts", "shortdesc": "shortdesc_6B98A8252EB34E56B003E135173573BE", "shortdesc_6B98A8252EB34E56B003E135173573BE": "You can hide the user interface for products so that end users do not see the product and cannot modify its settings. ", "content.p_35A3E2A9AC1E4189A7F35B94F23BE1": "Follow these instructions:", "step.step_4D5A0F2791884CCAB46F1FB5074627": "Select the target domain.", "step.step_FB752CDE29564FE18BCA77CBDBF7F6": "Go to the Settings tab and select Windows > Centralized management.", "step.step_A7274839C44A4A39BB38665EC8AE4E": "Under Local user interface, clear the Enable local user interface checkbox.", "step.step_3010D74FBB164DE3A4245C41B1C493": "Click the following icon to distribute the policy:
", "desc": [ "content.p_35A3E2A9AC1E4189A7F35B94F23BE1", { "steps.steps_6532CE683FE4446FA8007A30B77BE4": [ "step.step_4D5A0F2791884CCAB46F1FB5074627", "step.step_FB752CDE29564FE18BCA77CBDBF7F6", "step.step_A7274839C44A4A39BB38665EC8AE4E", "step.step_3010D74FBB164DE3A4245C41B1C493" ] } ] }, "concept_preventing_users_changing_settings-16.10-en.json": { "title": "title_756527E9E6BC450D8C270967A7BF66E3", "title_756527E9E6BC450D8C270967A7BF66E3": "Preventing users from changing settings", "shortdesc": "shortdesc_3B2E4902287B46D1A4ADABB4B6ED0ED2", "shortdesc_3B2E4902287B46D1A4ADABB4B6ED0ED2": "If you want to make sure that the users cannot change some or any of the virus protection settings, you can make these settings final. ", "content.p_3CA3CD4F3E2F4788A1D9D26157E854": "There are different possibilities for doing this:", "choice.choice_9F656950200C415CAC5F4F4C434800": "If you want to prevent users from changing a certain setting, click on the lock symbol beside it.", "choice.choice_57D2F16A248045AD841C7C2ED6906F": "When you are on one of the pages on the Settings tab, you can set all the settings on the page final at once by clicking Disallow user changes. This page-specific shortcut affects only the settings that have an attached lock symbol and it operates all lock symbols on the page at once.", "choice.choice_6FC3E706B832464EBC91101B7319BF": "If you want to make all settings for both virus protection and firewall final, go to the Settings tab and Centralized management page, and click Do not allow users to change any settings....", "desc": [ "content.p_3CA3CD4F3E2F4788A1D9D26157E854", { "choices.ul_664DE3649AA7493B958FECE1B5C99A": [ "choice.choice_9F656950200C415CAC5F4F4C434800", "choice.choice_57D2F16A248045AD841C7C2ED6906F", "choice.choice_6FC3E706B832464EBC91101B7319BF" ] } ] }, "task_settings_vp_settings_final-16.10-en.json": { "title": "title_6C42D77666434AB3B61E029D3936CDC7", "title_6C42D77666434AB3B61E029D3936CDC7": "Setting all virus protection settings as final", "shortdesc": "shortdesc_94F54F8D27A24A4FAB2F5C8FDAD34C39", "shortdesc_94F54F8D27A24A4FAB2F5C8FDAD34C39": "In this example, all the virus protection settings are set as final. ", "content.p_71D8E8227A934722A8DADC1B05B869": "Follow these instructions:", "step.step_1C93016D073E472B9753F005EBB922": "Select Root on the Domain tree.", "step.step_6F419E992D81450B8553A1FAC8DCFD": "Go to the Settings tab and select Windows > Centralized management.", "step.step_6D765386241448EAB6EF4169D2D6F1": "Select Do not allow users to change any settings.", "step.step_277530328C984D768739DBDE9F5BC2": "Click Yes.", "step.step_8486C2E722BB4A62A2A7D00F6F7A31": "Click the following icon to distribute the policy:
", "desc": [ "content.p_71D8E8227A934722A8DADC1B05B869", { "steps.steps_B3D34722FC564BA19C2B6F4D1AA82C": [ "step.step_1C93016D073E472B9753F005EBB922", "step.step_6F419E992D81450B8553A1FAC8DCFD", "step.step_6D765386241448EAB6EF4169D2D6F1", "step.step_277530328C984D768739DBDE9F5BC2", "step.step_8486C2E722BB4A62A2A7D00F6F7A31" ] } ] }, "task_preventing_changes_protected_processes-16.10-en.json": { "title": "title_4B4271F6BDB44A8785141A9276A4F2E2", "title_4B4271F6BDB44A8785141A9276A4F2E2": "Preventing changes to protected WithSecure files and processes", "shortdesc": "shortdesc_AC9D1BD9C54545BE9AC4D929EF2E7EE7", "shortdesc_AC9D1BD9C54545BE9AC4D929EF2E7EE7": "You can switch on tamper protection to make sure that end users cannot make changes to protected WithSecure files even if they have administrator privileges. ", "content.p_EA34282088544F919B1F7DB4BDB178": "Tamper protection protects the WithSecure product installers against end-user and third-party changes and the WithSecure services, processes, files, and registry entries against any controlling attempts.", "content.p_A1BC2295C92A41F88E8AB61A2610FC": "For example, when tamper protection is switched on, it blocks any attempt to modify protected configuration files or registry keys, or to shut down WithSecure services or processes, and sends an alert of the modification attempt to Policy Manager.", "content.p_5CAAAB3A90264BD095679AE3624B5F": "", "content.note_91FEF1B4B68E443E9E1B9B5D0C50C4": "Note: Tamper protection is only supported in Client Security and Server Security versions 15.00 and newer.", "content.p_9CA51F57779B466FA59C2A3AD4575A": "Follow these instructions:", "step.step_64E9CECEF0244AD9BC718EA6934FAD": "Select Root on the Domain tree.", "step.step_3C4D68104C9B4FC0800F38AC7CAFBC": "Go to the Settings tab and select Windows > Centralized management.", "step.step_083D1E3C4178407D8BC630191308D3": "Under Bypassing product security, select Enable Tamper protection.", "step.step_364BD7CE07084677B883556B46CD54": "Click the following icon to distribute the policy:
", "desc": [ "content.p_EA34282088544F919B1F7DB4BDB178", "content.p_A1BC2295C92A41F88E8AB61A2610FC", "content.note_91FEF1B4B68E443E9E1B9B5D0C50C4", "content.p_9CA51F57779B466FA59C2A3AD4575A", { "steps.steps_AB0EB089CACF4B4682BA6288653F77": [ "step.step_64E9CECEF0244AD9BC718EA6934FAD", "step.step_3C4D68104C9B4FC0800F38AC7CAFBC", "step.step_083D1E3C4178407D8BC630191308D3", "step.step_364BD7CE07084677B883556B46CD54" ] } ] }, "concept_monitoring_viruses_network-16.10-en.json": { "title": "title_578A8393AAFC435CBF033F3196A41300", "title_578A8393AAFC435CBF033F3196A41300": "Monitoring viruses on the network", "shortdesc": "shortdesc_6485126FDE6B4C86917B8500EBA27B40", "shortdesc_6485126FDE6B4C86917B8500EBA27B40": "Policy Manager offers different ways and levels of detail for monitoring infections on your network. ", "content.p_D5B64DD3675C4D21B12F4C50974406": "The best way to monitor whether there are viruses on the network is to check the Virus protection for endpoints section of the Summary view on the Dashboard tab. If it displays new infections, you can access more detailed information by clicking View hosts’ infection status. It takes you to the Status tab and Virus protection page, where you can see details of each host’s infection status.", "content.p_0B7BDECDFAD24558B69E8F77AF2F97": "You can also check the Alerts and Scanning reports tabs to see the scanning reports from different hosts.", "desc": [ "content.p_D5B64DD3675C4D21B12F4C50974406", "content.p_0B7BDECDFAD24558B69E8F77AF2F97" ] }, "task_testing_antivirus_protection-16.10-en.json": { "title": "title_2D5362B1727840A590EC200C02E89C15", "title_2D5362B1727840A590EC200C02E89C15": "Testing your antivirus protection", "shortdesc": "shortdesc_334861ECFC524A7CBBA70D440AE5801A", "shortdesc_334861ECFC524A7CBBA70D440AE5801A": "To test that the managed security products operate correctly, you can use a special test file that is detected as though it were a virus. ", "content.p_853992A5DE9C4F7B83CFF46D3249B2": "This file, known as the EICAR Standard Anti-Virus Test File, is also detected by several other antivirus programs. You can also use the EICAR test file to test your email scanning. EICAR is the European Institute of Computer Anti-virus Research. The Eicar info page can be found at EICAR info page.", "content.p_62DC2DE57142475B93C4267F0E49E1": "You can test your antivirus protection as follows:", "content.p_D29FDDCE3AA345208B54146BE410CF": "Alternatively, use any text editor to create the file with the following single line in it:", "content.p_EAE7447677B64EA4AC0383F65D77AF": "X5O!P%@AP[4\\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*", "step.step_EC6C85FFAE864133938F5C54F37F31": "You can download the EICAR test file from EICAR test file.", "content.p_C1C7DEEECD7C47E9A01325F1E9456F": "Make sure that you save the file in the standard MS-DOS ASCII format. Note also that the third character of the extension is an upper-case O, not numeral 0.", "step.step_6F186A17DF4D44BD800E72040D4C10": "Save this file to any name with a .com extension, for example EICAR.COM.", "content.p_5AF2D7204F8246F7A5ED782C60819C": "Naturally, the file is not a virus. When executed without any virus protection, EICAR.COM displays the text EICAR-STANDARD-ANTIVIRUS-TEST-FILE! and exits.", "step.step_8A223FA3DE1E4EFBA2D3B40B4493F4": "Now you can use this file to see what it looks like when the product detects a virus.", "desc": [ "content.p_853992A5DE9C4F7B83CFF46D3249B2", "content.p_62DC2DE57142475B93C4267F0E49E1", { "steps.steps_84467F54F2CC4A88A0240020627355": [ "step.step_EC6C85FFAE864133938F5C54F37F31", "content.p_D29FDDCE3AA345208B54146BE410CF", "content.p_EAE7447677B64EA4AC0383F65D77AF", "step.step_6F186A17DF4D44BD800E72040D4C10", "content.p_C1C7DEEECD7C47E9A01325F1E9456F", "step.step_8A223FA3DE1E4EFBA2D3B40B4493F4", "content.p_5AF2D7204F8246F7A5ED782C60819C" ] } ] }, "concept_virus_information-16.10-en.json": { "title": "title_A2EDC857242840F4A46FD461347BA485", "title_A2EDC857242840F4A46FD461347BA485": "Virus information", "shortdesc": "shortdesc_2A15B6572F45413195E12D8C52C3DF74", "shortdesc_2A15B6572F45413195E12D8C52C3DF74": "This section contains useful general information about viruses and virus handling. ", "desc": [] }, "concept_malware_information_tools_fs_website-16.10-en.json": { "title": "title_BC0DC08CE7EF4791825ABB0A64971331", "title_BC0DC08CE7EF4791825ABB0A64971331": "Malware information and tools on the WithSecure web pages", "shortdesc": "shortdesc_7A7BC1CAB7E64A7CB450952EA02B961B", "shortdesc_7A7BC1CAB7E64A7CB450952EA02B961B": "You can find a list of sources of information about malware and useful tools on the WithSecure web site. ", "content.p_B284E976A0804B8893A1786A766FA7": "For information of the latest security threats you can check these sources:", "choice.choice_8F9B8DE03E6A4856B18E750277718F": "WithSecure™ Labs: WithSecure Labs", "choice.choice_7F05540999CA4315A2C67C7633D773": "Latest Advisories: Security advisories", "choice.choice_B49F596513F3423194A304F1252842": "Labs tools: Research tools", "desc": [ "content.p_B284E976A0804B8893A1786A766FA7", { "choices.ul_hvw_pft_xyb": [ "choice.choice_8F9B8DE03E6A4856B18E750277718F", "choice.choice_7F05540999CA4315A2C67C7633D773", "choice.choice_B49F596513F3423194A304F1252842" ] } ] }, "concept_send_virus_sample_fs-16.10-en.json": { "title": "title_E4C7ACBF80DA4E188262D6882FA14B10", "title_E4C7ACBF80DA4E188262D6882FA14B10": "How to send a virus sample to WithSecure", "shortdesc": "shortdesc_B6EE970D26E34D1CAD5AEF8362C16F59", "shortdesc_B6EE970D26E34D1CAD5AEF8362C16F59": "This section covers information on sending a virus sample to the WithSecure Labs. ", "desc": [] }, "concept_package_virus_sample-16.10-en.json": { "title": "title_66EB2C5EDE684BB6AA9CEC1275913BA6", "title_66EB2C5EDE684BB6AA9CEC1275913BA6": "How to package and send a virus sample", "shortdesc": "shortdesc_B4C9A23BDDDE4753A4E20C5C7ECFD0BD", "shortdesc_B4C9A23BDDDE4753A4E20C5C7ECFD0BD": "All files should be sent in ZIP archive only. ", "content.p_82B22463C5E24352A1AF90B7038D35": "To package the virus samples you can download a trial version of WinZip at WinZip website. A free InfoZIP utility is also available at Info-ZIP website.", "content.p_68542D1B56FA4EFEAA170F099A0086": "All ZIP packages should be named using only English letters and numbers. You can use long file names.", "content.p_66B927BCCD164ED8A5BDF2E279A03E": "To be sure that we receive the ZIP archive, protect the ZIP file with the password infected. Otherwise any malware sample you attempt to send to us may be removed by an intermediary server as a safety measure. Using the \"infected\" password is an industry standard, and content scanning gateways that scan HTTPS traffic usually let it through.", "content.p_1D4FD8BED58D4119984BEEEF584885": "Submit the packaged sample through the WithSecure sample submission portal.", "desc": [ "content.p_82B22463C5E24352A1AF90B7038D35", "content.p_68542D1B56FA4EFEAA170F099A0086", "content.p_66B927BCCD164ED8A5BDF2E279A03E", "content.p_1D4FD8BED58D4119984BEEEF584885" ] }, "task_virus_outbreak-16.10-en.json": { "title": "title_9FF3CC3441584C1CA804DB8317BF1050", "title_9FF3CC3441584C1CA804DB8317BF1050": "Finding new malware", "shortdesc": "shortdesc_2BA097F139F14373B8931C9C2EBD91D7", "shortdesc_2BA097F139F14373B8931C9C2EBD91D7": "If you suspect that your computer has an unknown infection that is not detected by your antivirus software, you can use this checklist to get more information. ", "step.step_26D9572180A54597B5BE1026870FCA": "Check the root of %PROGRAMFILES%, %APPDATA%, %PROGRAMDATA% for any exe files or directory names that look randomly generated.", "content.note_70C32E8C0FC3441FBF6A2791ADD0E0": "Note: You should do this on a separate system and rename the tools, as malware quite often self-terminates when it detects Sysinternals tools and knows that it is being investigated.", "step.step_43546BFA70E24C21824A6E7247E098": "Download Autoruns, Process Explorer, and Sigcheck from Microsoft Sysinternals (Sysinternals website).", "content.p_54CB8882CD514117A5F70A0F35DD33": "To get more readable results, use filtering options to hide signed and Microsoft files. However, some malware uses stolen certificates or install a fake root certificate, so use this approach with caution.", "content.p_45331B7383764F1FBE88541604DA28": "Entries with \"(verified)\" in the publisher column are unlikely to be malware.", "step.step_CDF7B529D73941C0997AA87EE3F84D": "Check all automatically starting programs with Autoruns.", "step.step_890FD6701AA346CEB68935086A0466": "If Autoruns did not find anything, check your system with Process Explorer.", "content.p_7AC491F4F013427A9F1D137E6A9586": "Anything with a broken signature is either infected with a virus or indicates a disk problem.", "step.step_03BE6F3CE27B4CA091CAA8F4007B7B": "Use Sigcheck to check the integrity of file signatures.", "step.step_182FE012C3C641E28198F010CF3455": "Check your system with GMER rootkit detector (GMER website).", "desc": [ { "steps.steps_454BE5487A534D6AA736B284470B25": [ "step.step_26D9572180A54597B5BE1026870FCA", "step.step_43546BFA70E24C21824A6E7247E098", "content.note_70C32E8C0FC3441FBF6A2791ADD0E0", "step.step_CDF7B529D73941C0997AA87EE3F84D", "content.p_54CB8882CD514117A5F70A0F35DD33", "content.p_45331B7383764F1FBE88541604DA28", "step.step_890FD6701AA346CEB68935086A0466", "step.step_03BE6F3CE27B4CA091CAA8F4007B7B", "content.p_7AC491F4F013427A9F1D137E6A9586", "step.step_182FE012C3C641E28198F010CF3455" ] } ] }, "concept_what_to_send-16.10-en.json": { "title": "title_A1292DF01C2D4D57B2718C1889C0FBE0", "title_A1292DF01C2D4D57B2718C1889C0FBE0": "What should be sent", "shortdesc": "shortdesc_A43F202353A34793B304D590EEB2C69F", "shortdesc_A43F202353A34793B304D590EEB2C69F": "Here you will find what files and details to send, as viruses are not all of the same type, so they cannot all be sent in one specific way. ", "content.p_8F1945A853054599A786D192D1B8AD": "", "content.note_5712D7C16A5C49D5AB244012AB4835": "Note: As a rule of thumb, if a file is already detected and is not a false alarm, there is no need to send us a sample.", "content.p_98CE60241D1D4379BB32AAA4D6143B": "The following lists what to send according to the virus types:", "content.p_EE1C30016E5C42CB88BDE3CA425B2D": "If you are sending a sample of a suspected standalone malware (worm, backdoor, trojan, dropper), specify the location of the file on the infected system and the way it was started (registry, .ini files, Autoexec.bat, etc.). A description of the source of the file is also useful.", "step.step_C21F67DE84F4420A93B8C2B6910E2E": "Malware (malicious programs):", "subchoice.choice_98601DD3DEEE44349272157C3BC3B1": "the file in question,", "subchoice.choice_FC7A1478247145128E23FFD86F4052": "the Client Security version number,", "subchoice.choice_896AA50B3D7846D4AA827C4462A840": "the last virus definition updates date,", "subchoice.choice_A5B3752DE2DC4737919339BC60974C": "a description of the system configuration,", "subchoice.choice_E74737ABD1F24E2C83CB4B106A2380": "a description of how to reproduce the problem, and", "subchoice.choice_89FE0C5CEA00401C8FB63FB4BFB0CC": "the Client Security scanning report file.", "content.p_BDC0AC986C0E4542B819788F07CB0F": "If you receive a missed or incorrect detection, or a false alarm with Client Security, check that you have the latest virus definition databases in use. If you still get a false alarm even with the latest databases in use, try to send us the following:", "step.step_C1D3A36DFB97454FA79CC8D5D815B2": "A false alarm from one of our antivirus products:", "desc": [ "content.note_5712D7C16A5C49D5AB244012AB4835", "content.p_98CE60241D1D4379BB32AAA4D6143B", { "steps.ol_FA5F163C591A461F8D07F1E98C10C8": [ "step.step_C21F67DE84F4420A93B8C2B6910E2E", "content.p_EE1C30016E5C42CB88BDE3CA425B2D", "step.step_C1D3A36DFB97454FA79CC8D5D815B2", "content.p_BDC0AC986C0E4542B819788F07CB0F", { "subchoices.ul_66D13E4CA40644D99438AEE824D8E0": [ "subchoice.choice_98601DD3DEEE44349272157C3BC3B1", "subchoice.choice_FC7A1478247145128E23FFD86F4052", "subchoice.choice_896AA50B3D7846D4AA827C4462A840", "subchoice.choice_A5B3752DE2DC4737919339BC60974C", "subchoice.choice_E74737ABD1F24E2C83CB4B106A2380", "subchoice.choice_89FE0C5CEA00401C8FB63FB4BFB0CC" ] } ] } ] }, "concept_rmm-16.10-en.json": { "title": "title_5B7FA3E4E67E4570A5362BC1A7DEB8F1", "title_5B7FA3E4E67E4570A5362BC1A7DEB8F1": "Windows Management Instrumentation", "shortdesc": "shortdesc_670F2EF562DA4D05BAF20B86304A1913", "shortdesc_670F2EF562DA4D05BAF20B86304A1913": "Policy Manager provides Windows Management Instrumentation (WMI) integration, which you can use, for example, to integrate Remote Monitoring and Management (RMM) tools with Client Security. ", "content.p_21C55FCDC0634FCC81DBC6BA8E2BD9": "On a service provider level, WMI integration is often used to provide better management of several functions, such as asset discovery and management, configuration, process and service automation, security services, and backups.", "desc": [ "content.p_21C55FCDC0634FCC81DBC6BA8E2BD9" ] }, "concept_rmm_integration-16.10-en.json": { "title": "title_25B9D53E3C7445D88101161E2F402F6D", "title_25B9D53E3C7445D88101161E2F402F6D": "WMI integration", "shortdesc": "shortdesc_0801AE7457574CF5B4D81D88645C7971", "shortdesc_0801AE7457574CF5B4D81D88645C7971": "Policy Manager uses a Windows Management Instrumentation (WMI) interface to collect read-only status information on client applications. ", "content.p_86371336C6954EE79A89026A909869": "The WMI interface uses a vendor-specific agent installed on the host to forward the collected information to the management console server. No configuration options or general security management functionality are exposed through the WMI interface.", "content.p_1D2E0CF8FA414C29AC3A6A53053FC6": "Administrators can also use the WMI interface to remotely start a full scan of the host computers.", "content.p_4A055A498C9945E8A1C5AFCAD79F41": "", "content.p_3DCAAEB9F56241BA9DCBA796B57793": "The following classes can be retrieved from Client Security clients through the WMI interface:", "choice.choice_E672E07F41744B4ABEA611E28A75D2": "Product version", "choice.choice_1830FD333C73446CB46E19E9AEA964": "Real-time scanning status", "choice.choice_CBC2C517FA8A4823B62529D8AB4617": "Virus definition database information", "choice.choice_1AC449D4FEE14C1F839FA3B80FE56A": "Firewall status", "choice.choice_10DF0816E7344BDE877FDCB375692F": "Firewall security level (profile)", "choice.choice_967EAB831C12436F8588865C7476C5": "Firewall versions", "choice.choice_FB05819005254C1698A8CAEF14DEF9": "Application Control status", "choice.choice_DE217EDD278947A5A02CFF9A2B4C4A": "Time of last connection to Policy Manager", "choice.choice_963962130CFE49F585AAA2EE87D180": "Time of last policy update from Policy Manager", "choice.choice_2602B53B06BC40D1AAC2FA74E87D6A": "Name of Policy Manager profile in use", "choice.choice_9213DA5049B045EFBDFFCC4F4D3419": "DeepGuard status", "choice.choice_0C896E0B15DA4B8BA759E98A7B401A": "Browsing protection status", "choice.choice_751ADDA018EC474FB91ADB8DB47548": "Email filtering status", "choice.choice_37D50A46CD3E42A29F2DED2BDF11A7": "Software Updater status (status of automatic installation of security updates, counts for missing updates split by type; critical, important, and other)", "desc": [ "content.p_86371336C6954EE79A89026A909869", "content.p_1D2E0CF8FA414C29AC3A6A53053FC6", "content.p_4A055A498C9945E8A1C5AFCAD79F41", "content.p_3DCAAEB9F56241BA9DCBA796B57793", { "choices.ul_A22377656B5A4866AD03316E3E5236": [ "choice.choice_E672E07F41744B4ABEA611E28A75D2", "choice.choice_1830FD333C73446CB46E19E9AEA964", "choice.choice_CBC2C517FA8A4823B62529D8AB4617", "choice.choice_1AC449D4FEE14C1F839FA3B80FE56A", "choice.choice_10DF0816E7344BDE877FDCB375692F", "choice.choice_967EAB831C12436F8588865C7476C5", "choice.choice_FB05819005254C1698A8CAEF14DEF9", "choice.choice_DE217EDD278947A5A02CFF9A2B4C4A", "choice.choice_963962130CFE49F585AAA2EE87D180", "choice.choice_2602B53B06BC40D1AAC2FA74E87D6A", "choice.choice_9213DA5049B045EFBDFFCC4F4D3419", "choice.choice_0C896E0B15DA4B8BA759E98A7B401A", "choice.choice_751ADDA018EC474FB91ADB8DB47548", "choice.choice_37D50A46CD3E42A29F2DED2BDF11A7" ] } ] }, "task_obtaining_properties_via_wmi-16.10-en.json": { "title": "title_87B6FE8D3809482497958304C2E67DD7", "title_87B6FE8D3809482497958304C2E67DD7": "Obtaining properties via WMI", "shortdesc": "shortdesc_A2CDAF02C730400AA575F8E58BE81396", "shortdesc_A2CDAF02C730400AA575F8E58BE81396": "Instructions on how to obtain properties via WMI. ", "substep.substep_6D99E0310F9B44AAA1537F492630A7": "Go to Windows > Centralized management.", "substep.substep_7E26BECACD9E4FBEA176C1D0575A36": "Enable WMI Provider.", "substep.substep_86929706602A4A31BC9286910DF3C0": "Distribute policies.", "step.step_4A59937084494D34BD875039AE56E0": "Turn on the WMI Provider setting in Policy Manager Console settings as follows:", "step.step_AA91CD29745D4659BC9BB32F0B290A": "Open Windows PowerShell with the administrator rights.", "content.p_0BF6048CE713429EAABCB61BFC9ED4": "Get-WmiObject -Namespace root/fsecure -List | where { $_.Qualifiers[\"Singleton\"].Value }", "subchoice.choice_851E961614B54095BA9C8DA99F9ECC": "Requesting a listing of all singleton instances", "content.p_64A530528BE7465099A9CF224211AF": "$product = Get-WmiObject -Namespace \"root/fsecure\" -Class Product
Write-Host Version: $product.Version", "content.p_15C9EC4F5FF041CEB8C1BC4C5B612C": "Result:", "content.p_obtaining_properties_via_0FCB9": "Version: 18.15", "subchoice.choice_C8FBA8D611234F8B84EA1081480387": "Retrieving product version", "content.p_81B13A9CFC8B401B90B192AF35FE79": "$av = Get-WmiObject -Namespace \"root/fsecure\" -Class AntiVirus2
Write-Host \"Is real-time scanning enabled: \" $av.RealTimeScanningEnabled", "content.p_5D0E92CAD59B486D8D0797A47F9A1A": "Result:", "content.p_obtaining_properties_via_023AA": "Is real-time scanning enabled: True", "subchoice.choice_352B894480674801AB2B4270DC0C0E": "Retrieving real-time scanning status", "content.p_E1D852197CF04B44ACCFEDFA200279": "$av = Get-WmiObject -Namespace \"root/fsecure\" -Class AntiVirus2
$status = if ($av.AvDefinitionsAgeInHours -lt 7*24){
\"up to date\" } else { \"outdated\" }
Write-Host \"AV definitions are\" $status", "content.p_600B8BE453534201A6C47718F67F6C": "Result:", "content.p_obtaining_properties_via_0C972": "Av definitions are up to date", "subchoice.choice_A45DF5D2BA82497794575ADEA7221F": "AvDefinitions", "content.p_116FD7702E254943A32EC0EA39CCD4": "$fw = Get-WmiObject -Namespace \"root\\fsecure\" -Class Firewall
Write-Host \"Is firewall enabled: \" $fw.Enabled", "content.p_326B4D36622249C7BFC3EA78D30B3A": "Result:", "content.p_obtaining_properties_via_0EB6A": "Is firewall enabled: True", "subchoice.choice_FE6913E50F9540BAA1C6B7AA8FA53B": "Firewall status", "content.p_0ABAEDE3526A4F5BA517C1334C7F8C": "$cm = Get-WmiObject -Namespace \"root\\fsecure\" -Class CentralManagement
Write-Host \"PolicyUpdateTime: \" $cm.PolicyUpdateTime", "content.p_B5D45DEC5F6B467988D7B45FD7D7A1": "Result:", "content.p_obtaining_properties_via_0AE4D": "PolicyUpdateTime: 20181001144235.000000+000", "subchoice.choice_D78124D96A4C43CC904878D0CEDE21": "Time of last policy update from Policy Manager", "content.p_E8CB8F61599546D5BB6A41E382C980": "$av = Get-WmiObject -Namespace \"root\\fsecure\" -Class AntiVirus2
Write-Host \"Is DeepGuard enabled:\" $av.DeepGuardEnabled", "content.p_AA6B0E934BDD4D7E9723258F405223": "Result:", "content.p_obtaining_properties_via_08379": "Is DeepGuard enabled: True", "subchoice.choice_325EC394EB42410A8303B603BF9FE5": "DeepGuard status:", "content.p_298806D1D91E433D9DFC158DE29B8A": "$inet = Get-WmiObject -Namespace \"root\\fsecure\" -Class Internet
Write-Host \"Is Browsing Protection enabled:\" $inet.BrowsingProtectionEnabled", "content.p_C691C6D6B2314382AB304E096E1EF4": "Result:", "content.p_obtaining_properties_via_0B1F8": "Is Browsing Protection enabled: True", "subchoice.choice_6845D3E0733C48A58AF055FC93285C": "Browsing protection status:", "content.p_6F5FAED0011E473EAECFB9DA41A7FC": "$su = Get-WmiObject -Namespace \"root\\fsecure\" -Class SoftwareUpdater
Write-Host \"Enabled: \" $su.Enabled
Write-Host \"InstallSecurityUpdatesAutomatically: \" $su.InstallSecurityUpdatesAutomatically
Write-Host \"MissingCriticalUpdatesCount: \" $su.MissingCriticalUpdatesCount
Write-Host \"MissingImportantUpdatesCount: \" $su.MissingImportantUpdatesCount
Write-Host \"MissingOtherUpdatesCount: \" $su.MissingOtherUpdatesCount", "content.p_EAB2E84D4AEB4086997C675D76800D": "Result:", "content.p_obtaining_properties_via_04B3A": "Enabled: True", "content.p_obtaining_properties_via_05A0F": "InstallSecurityUpdatesAutomatically : 0", "content.p_obtaining_properties_via_0E89F": "MissingCriticalUpdatesCount : 2", "content.p_obtaining_properties_via_02EF8": "MissingImportantUpdatesCount : 1", "content.p_obtaining_properties_via_0AABA": "MissingOtherUpdatesCount : 1", "subchoice.choice_B9053CD9274047B4BA19FDC206F5C2": "Software Updater status (status of automatic installation of security updates, counts for missing updates split by type; critical, important, and other)", "content.p_81BDC604F32E491080BF53D975C2BD": "$license = Get-WmiObject -Namespace \"root\\fsecure\" -Class LicenseStatus
Write-Host \"License status: \" $license.Valid \"; End date: \" $license.EndDate", "content.p_EE3FE56528F948CB99CF514C1C8702": "Result:", "content.p_obtaining_properties_via_086E0": "License status: True ; End date: 20191231235959.000000+000", "subchoice.choice_539B9A53D3384436842F9C37479690": "subscription status:", "content.p_25EB26C41D554F9ABB6585A738AB15": "$report = Get-WmiObject -Namespace \"root\\fsecure\" -Class LastManualScanReport
Write-Host \"HarmfulItemsFound: \" $report.HarmfulItemsFound", "content.p_51B476DD27704255A4801362F98208": "Result: HarmfulItemsFound: False", "subchoice.choice_C4953C7E72A349B0A45A2E6A439F14": "Last manual scan report information:", "content.p_700B137DCAF04E4F8FB6F81AC00D7C": "$report = Get-WmiObject -Namespace \"root\\fsecure\" -Class LastScheduledScanReport
Write-Host \"HarmfulItemsFound: \" $report.HarmfulItemsFound", "content.p_A65BD25C4C524E6E9ECADB8ADDB89D": "Result: HarmfulItemsFound: True", "subchoice.choice_26F0BBAFF5AC4F3ABB6A873901BE2A": "Last scheduled scan report information:", "step.step_C0FFE502E49F46A8B132272A901116": "At the command prompt, enter commands as shown below to retrieve, for example, the following classes and properties:", "desc": [ { "steps.steps_41E70CDDB0FE452CAC858ECE38AFCB": [ "step.step_4A59937084494D34BD875039AE56E0", { "substeps.substepsalpha_259F179A21E1456CBF8893C33E3294": [ "substep.substep_6D99E0310F9B44AAA1537F492630A7", "substep.substep_7E26BECACD9E4FBEA176C1D0575A36", "substep.substep_86929706602A4A31BC9286910DF3C0" ] }, "step.step_AA91CD29745D4659BC9BB32F0B290A", "step.step_C0FFE502E49F46A8B132272A901116", { "subchoices.choices_1AEEC312FC264B0B8FB69D6AFFF5EC": [ "subchoice.choice_851E961614B54095BA9C8DA99F9ECC", "content.p_0BF6048CE713429EAABCB61BFC9ED4", "subchoice.choice_C8FBA8D611234F8B84EA1081480387", "content.p_64A530528BE7465099A9CF224211AF", "content.p_15C9EC4F5FF041CEB8C1BC4C5B612C", "content.p_obtaining_properties_via_0FCB9", "subchoice.choice_352B894480674801AB2B4270DC0C0E", "content.p_81B13A9CFC8B401B90B192AF35FE79", "content.p_5D0E92CAD59B486D8D0797A47F9A1A", "content.p_obtaining_properties_via_023AA", "subchoice.choice_A45DF5D2BA82497794575ADEA7221F", "content.p_E1D852197CF04B44ACCFEDFA200279", "content.p_600B8BE453534201A6C47718F67F6C", "content.p_obtaining_properties_via_0C972", "subchoice.choice_FE6913E50F9540BAA1C6B7AA8FA53B", "content.p_116FD7702E254943A32EC0EA39CCD4", "content.p_326B4D36622249C7BFC3EA78D30B3A", "content.p_obtaining_properties_via_0EB6A", "subchoice.choice_D78124D96A4C43CC904878D0CEDE21", "content.p_0ABAEDE3526A4F5BA517C1334C7F8C", "content.p_B5D45DEC5F6B467988D7B45FD7D7A1", "content.p_obtaining_properties_via_0AE4D", "subchoice.choice_325EC394EB42410A8303B603BF9FE5", "content.p_E8CB8F61599546D5BB6A41E382C980", "content.p_AA6B0E934BDD4D7E9723258F405223", "content.p_obtaining_properties_via_08379", "subchoice.choice_6845D3E0733C48A58AF055FC93285C", "content.p_298806D1D91E433D9DFC158DE29B8A", "content.p_C691C6D6B2314382AB304E096E1EF4", "content.p_obtaining_properties_via_0B1F8", "subchoice.choice_B9053CD9274047B4BA19FDC206F5C2", "content.p_6F5FAED0011E473EAECFB9DA41A7FC", "content.p_EAB2E84D4AEB4086997C675D76800D", "content.p_obtaining_properties_via_04B3A", "content.p_obtaining_properties_via_05A0F", "content.p_obtaining_properties_via_0E89F", "content.p_obtaining_properties_via_02EF8", "content.p_obtaining_properties_via_0AABA", "subchoice.choice_539B9A53D3384436842F9C37479690", "content.p_81BDC604F32E491080BF53D975C2BD", "content.p_EE3FE56528F948CB99CF514C1C8702", "content.p_obtaining_properties_via_086E0", "subchoice.choice_C4953C7E72A349B0A45A2E6A439F14", "content.p_25EB26C41D554F9ABB6585A738AB15", "content.p_51B476DD27704255A4801362F98208", "subchoice.choice_26F0BBAFF5AC4F3ABB6A873901BE2A", "content.p_700B137DCAF04E4F8FB6F81AC00D7C", "content.p_A65BD25C4C524E6E9ECADB8ADDB89D" ] } ] } ] }, "concept_rmm_namespaces-16.10-en.json": { "title": "title_7A713D6092394EC8BEFD246B107D0D20", "title_7A713D6092394EC8BEFD246B107D0D20": "WMI classes for integration", "shortdesc": "shortdesc_CFF75942077F40EEB2B59CE1C03D1A32", "shortdesc_CFF75942077F40EEB2B59CE1C03D1A32": "This appendix provides details on the classes used for Windows Management Instrumentation (WMI) integration in Policy Manager. ", "desc": [] }, "WMI_classes-16.10-en.json": { "title": "title_E8F6AA093B9749BEA526149232B28AAF", "title_E8F6AA093B9749BEA526149232B28AAF": "WMI classes", "shortdesc": "shortdesc_6A69709261C64082BCDCEF2088C216BF", "shortdesc_6A69709261C64082BCDCEF2088C216BF": "This section provides details on the classes used for WMI integration in the product. ", "content.title_F5A48477138B4DB58773968BB74E3569": "AvDefinition", "content.p_C220933B40E94869976AECF3A04E9E": "Provides information on the Anti-Virus engine.", "cell.entry_363D12CC4E6142A3A4BFA15FEF569F": "Property Name", "cell.entry_C51598594B53464ABBC445C3AB2A64": "Description", "cell.entry_1F89F60F61054BB094D05FA8640258": "Type", "cell.entry_DCFD1CA052BE48C09E18D525D6012D": "EngineId", "cell.entry_3CFB17EE13674EAE99DEEB5B0B0E82": "Unique identifier of the corresponding engine", "cell.entry_EE3A6EBFF0454582967B6AEBCCCFB9": "uint32", "cell.entry_080DDC4170A34B818A65044A9DC6C2": "EngineName", "cell.entry_01A8021767FF411EA1739BBCC01F86": "User-friendly name of the corresponding engine", "cell.entry_CA56C7C699E048EDAB2DBE02051A05": "string", "cell.entry_0F98695C4AF249979550D7FAB07950": "EngineVersion", "cell.entry_30A2F0073DE646689E943922F280B4": "Version of the corresponding engine", "cell.entry_E7FB4A430F5244E8B4FED0944EA2E3": "string", "cell.entry_9E1B4EC80DB5445185D8EB465A5472": "UpdateSerialNumber", "cell.entry_95D184F2B2E3489F85E4EEEFA084D6": "Unique identifier of the installed update", "cell.entry_65CB0B1F7E944F5B89AB54E6D56A88": "string", "cell.entry_A303AAE9E9EB4E8B90EBF121BD28C1": "UpdateTime", "cell.entry_ACF3BE578E294B8888E8B8399E9136": "Time when the update was installed", "cell.entry_77C7ACB83D2D48F9A0E8FDCC9BB70F": "datetime", "content.title_A658951157E940F6BECE8D9A8AC6E430": "AvScanResult", "content.p_3F3292268A0247E5ACEE81E21A1758": "Result of the scan for viruses.", "cell.entry_FA25694384D94F2A939DF6A5DAFA95": "Property Name", "cell.entry_FF09901E8CD8429CBC66542BFD75A6": "Description", "cell.entry_F75D8BDDE8974C67BD2ABB265D5718": "Type", "cell.entry_AA5EB6CC398246F49A4BF72CFF437F": "StartTime", "cell.entry_6E5664E43AD94D00BFCB0BA46BF71D": "Time when scan was started", "cell.entry_94FF643846E34A0F9B12204BDD5415": "datetime", "cell.entry_1A85E17A6D774088875727C516FA86": "EndTime", "cell.entry_6C482D3BE86C410D90C92EB718E94E": "Time when scan finished", "cell.entry_3FD085FC5F6E4C699E67EF77E874C2": "datetime", "cell.entry_152308633DE84DB6A394F912416E58": "InfectedFilesCount", "cell.entry_0DAB94B6FBAB48728CFE978C4585AE": "Number of infected files found in the scan", "cell.entry_0F1F983C3E8143A3B8BEEEA58431DD": "uint32", "cell.entry_8E65E85189C34B1AA929DB9B09CBA5": "InfectedSectorsCount", "cell.entry_B968BDC02D1B4A428F4AE3C0E26A25": "Number of infected sectors found in the scan", "cell.entry_3DB500E51DF94B808D57886E10F738": "uint32", "cell.entry_A8A5AD0207BB483AAA00F6E0E7618B": "ScanningReportFilePath", "cell.entry_17EFF986609E4E79B77A7BFAC85DD3": "File path to the scan report", "cell.entry_9968CBCB1BAF4F5EAD2F8D24193D1E": "string", "content.title_0105FD2ED97246C6A0559FFEE363F111": "API", "content.p_B249B21010E24373AB3CFDBFE9C2C6": "Provides basic information on the WMI namespace API.", "cell.entry_B1C32319B71F4DF7A5F69AF4A1D61F": "Property Name", "cell.entry_75F8EF34E3EA4A42A96E8B823426FB": "Description", "cell.entry_1532B27A97074420ACD89C4F868EAC": "Type", "cell.entry_3839808F60254A98B86B6F26C47BD3": "Version", "cell.entry_3B1F0C7A2B8E44C89597F9C5A07238": "Actual version of this API", "cell.entry_CFF611A2F8AE42B2888E9AAADF325B": "string", "content.title_CC7CA561FED8462C92EFCE2599F2C4E0": "Product", "content.p_C6D4C2B93EED49A082F7A6F29C9161": "Provides information on the currently installed security product.", "cell.entry_87EB3B7C046743E88194F274A7C531": "Property Name", "cell.entry_2422C48D05E84CDD85AC86DF60A070": "Description", "cell.entry_65597F13F7384ED8AD858D429093F1": "Type", "cell.entry_6CCFFEFF47DB4756898E98869250DE": "Name", "cell.entry_CE33C484BB804F55B6EC47BEEA8FDB": "Name of the product", "cell.entry_F67146EA1DC74E88BCE6C3D5AA30B7": "string", "cell.entry_E106CD8E48C1449D9095CF883D340E": "Version", "cell.entry_92AA96CCD49D4F6BBF41776404F5E0": "Version of the product", "cell.entry_59609684A1D143B7B98857D72988C2": "string", "cell.entry_D6337000271D4874B38813268B224D": "Build", "cell.entry_2FE9415506174772A7477335E54B3E": "Build of the product", "cell.entry_F4D39EEDD4D8445BBBD2E2D9B4F791": "string", "content.title_FF5B7F5E761B4F33BE0ED5F5085C8D97": "AntiVirus", "content.p_D60AE77BF0D440E7B8D72840DA1A94": "Provides information on anti-virus modules and allows running a full computer scan.", "cell.entry_E0F498F3E3E9442AAFC12E9D7CCBD6": "Property Name", "cell.entry_02EFE0A78D03435BA39A25EC4FA8C2": "Description", "cell.entry_15CE1029ACF94068BFDBB123478816": "Type", "cell.entry_7C5CCADE498B4B5E9E3A7C5B755DEE": "RealTimeScanning", "cell.entry_FD17B42C812D4E75887B4AE04087E8": "Status information for real-time scanning", "cell.entry_4A6749D7131B4A20B36807AB2D6EBE": "component", "cell.entry_1B0E40D7E42C43EDA18443718904A6": "DeepGuard", "cell.entry_63E63208085748A8801F5A55E54ABD": "Status information for DeepGuard", "cell.entry_9910E3ED1E2048B5A24BCCFBE8B3AD": "component", "cell.entry_5353B3CD29914CA5BC0DDD343B6E7B": "AvDefinitionsUpdateTime", "cell.entry_458995443960444D85235970025243": "Time of latest update to Anti-Virus definitions", "cell.entry_A6198F9190964F2FB50EBEAE0309C0": "datetime", "cell.entry_016BA383C5CD477BA3838EA49CB208": "AvDefinitions", "cell.entry_07F312DFA87E447B9F94055E017334": "List of installed Anti-Virus engines", "cell.entry_EFD1F603DC2144BA8A21CA15800119": "AvDefinition", "cell.entry_12E1A3E328DB4C2BB1F4C218E9DDD6": "Method Name", "cell.entry_1E825624D93643F7AB5F4A26B7E811": "Description", "cell.entry_75EE7B5242D447D0BFB3939A7C3612": "Return Type", "cell.entry_CB86F6CE603446179F09995D449543": "ScanComputer", "cell.entry_DBEB00BF737A4C71B1D6854BF9CCB1": "Starts a full computer scan and waits for completion", "cell.entry_35A28FC629094E0A8FDAEF8489785E": "AvScanResult", "content.title_10919C0B15B8431C806E6BA048C9C7B6": "Firewall : Component", "content.p_8F216E39AD7B4F5483F36F850AE42F": "Provides information on Firewall.", "cell.entry_CD446B3EE6434F2F9C87B5197E6DF6": "Property Name", "cell.entry_C31ED01803DC41F38EDF9ACA66E4EA": "Description", "cell.entry_5C332AE37F7E424A8B4CC1FA6C0A14": "Type", "cell.entry_01F922684605497DBEA0EEF66C0C30": "Enabled", "cell.entry_AB21BA12FE244E4BA8C61480FD2780": "Current state of Firewall", "cell.entry_3CE15468E3BA470C942514039EDC2E": "boolean", "cell.entry_1CFE7A1397F748EAB2FE5966CE8FEB": "SecurityLevel", "cell.entry_9FCC43A9E8524ACF91C0E689DDE7B8": "Current security level of Firewall", "cell.entry_B7FB9321A47541D2B70D9E8C86ACD1": "string", "cell.entry_270EDDF1E6F9442F9DCA72D9EE08A2": "ApplicationControl", "cell.entry_D2DB798A926E40E09F3C4E9539D0E9": "Current state of Application Control", "cell.entry_7BA3EAAA589C4DB2A313A5460156CC": "component", "cell.entry_A12A354E1B98449794DD8CAA676D76": "Version", "cell.entry_E5EB2DE1663D4A20B60C2D5E62BA5F": "Version of Firewall", "cell.entry_1A9FBE1544164F308DF938AAD189FB": "string", "cell.entry_2637797E1BD84784996A5F1B9897AF": "Build", "cell.entry_FA543B9816FB457AB5A760F12AAF23": "Build of Firewall", "cell.entry_7CDCFBDCEEB9460D8E4A551B9D594D": "string", "content.title_0C5DE4D46B5040649BB4DD9A3545045D": "CentralManagement", "content.p_2B7FFDDF9CA14C73B8B3C2F13562F2": "Provides information on interaction with the protection service.", "cell.entry_9B364F6E4DEF4B24A683A02ADA159D": "Property Name", "cell.entry_0232D00AB2664018A7DE48A9AE4A1F": "Description", "cell.entry_073DFFFA646E426D91791DFF482206": "Type", "cell.entry_5A22DBB4DB9B4F6F81C7BE3701CBB0": "LastConnectionTime", "cell.entry_7DD80BC3C1E3462BBF41D7183B5EC8": "Time of the last connection to the protection service", "cell.entry_6B6BAB612D6F4831BD74F2F3CAD154": "datetime", "cell.entry_93DD9718D0FC429C98504AF090A832": "PolicyUpdateTime", "cell.entry_2081AF14C5E748F3A85C188A1A2698": "Time of latest policy update", "cell.entry_C8FEBB8484444B16B0C67AF5AE3966": "datetime", "cell.entry_AA28265B178A4B2AA6D81CB94D1B75": "Profile", "cell.entry_7BC96C820785414D8AF307039ED7F7": "Currently installed profile", "cell.entry_AC1F3113A744475995BAB299EEB6FD": "Profile", "content.title_5FBB98CB443B4C9893BCB506F521BE9F": "SoftwareUpdater : Component", "content.p_5B0F29D8AD804C658D3DD5D5AC9871": "Provides information on Software Updater.", "cell.entry_E4C8F930A8424A96962795120302AA": "Property Name", "cell.entry_63F3D8C7BFF147C4ADE3CC111E12E6": "Description", "cell.entry_28648FB377BA405A940E34B0895499": "Type", "cell.entry_233E7BF3F23C46A2A383398F4FE9D9": "Enabled", "cell.entry_249BB596924F409F986FAA870B023F": "State of Software Updater", "cell.entry_EA08E5AD7DB9488B9F7DD8C5944012": "boolean", "cell.entry_45528BEA3ECF47DA9B86DCF0341A4F": "InstallSecurityUpdatesAutomatically", "choice.choice_ClassSoftwareUpdaterProperDB93": "0: None", "choice.choice_ClassSoftwareUpdaterProper7C17": "1: Critical", "choice.choice_ClassSoftwareUpdaterProperA2BF": "2: Critical and important", "choice.choice_ClassSoftwareUpdaterProper8B77": "3: All", "cell.entry_2CB21962B28E44D8A9A1E834210232": "Type of updates installed automatically by Software Updater:", "cell.entry_09EFA57B485042CDAC1C8243538E70": "uint32", "cell.entry_A92F70B946404280AC862212987BB4": "MissingCriticalUpdatesCount", "cell.entry_11D9480725DF4F27ACA5B64BF6B704": "Number of missing critical updates", "cell.entry_5A522896E403489AB20583BFA6F8BF": "uint32", "cell.entry_DC2EDBD2A25C4C7B984DC2F082CB47": "MissingImportantUpdatesCount", "cell.entry_9E837204BF8444BE990E7008388882": "Number of missing important updates", "cell.entry_89E0AACD954148A688FD4E358FF794": "uint32", "cell.entry_0DC712CB50AE4C0F91960271F86D4E": "MissingOtherUpdatesCount", "cell.entry_83A59F20F9624E2D8B6CD54BF233FA": "Number of missing updates other than critical and important", "cell.entry_88C9F986CACE4C6AAEDC88F29D0871": "uint32", "content.title_84EE6185CBB249AC9AC57CB7C27786D6": "Internet", "content.p_02D9DE36A3644A5D9EC274DE269126": "Provides information on Internet security components.", "cell.entry_9C8764E77BEE4443A975D5F6125C33": "Property Name", "cell.entry_66FE0770687545C6A961809E02D8E6": "Description", "cell.entry_A57C37AFCB0A49FAB9B371446E4C7F": "Type", "cell.entry_1A9B299B32C747F6BFDA0808341240": "BrowsingProtection", "cell.entry_2E592B4BDA4C4F889B8E142F69062B": "State of browsing protection", "cell.entry_378A91C7148842CF845FD99B122CC1": "component", "cell.entry_136F5EBE1A9D4B929AC401D35997EE": "EmailFiltering", "cell.entry_CC782B10EC0946F3BEA47754209239": "State of email filtering", "cell.entry_0413952A073344B5A68638FFCD3493": "component", "content.title_E0425B5B20824B4CA147C73B05E05E5B": "subscriptionStatus", "content.p_9802A17849CD40D2A2D87A9CAEC032": "Provides information on the currently used subscription.", "cell.entry_1BAB1B1583694ACD90DA521CED247A": "Property Name", "cell.entry_E7D4B67A97484BF9AAD190B4DEEA13": "Description", "cell.entry_66EAB75888604FB9B7B413A91B2998": "Type", "cell.entry_BE68F7B198484F58AC1FB63F3D111D": "Valid", "cell.entry_7C0F00425C854CFB869B164CD6EF1C": "Validity status of the subscription", "cell.entry_79D293C823814A059A4F1D9FBC6F8A": "boolean", "cell.entry_08ED70B3E9854813B76F9C844F509A": "EndDate", "cell.entry_086647FCE561436A94741FC0F1ABD9": "The end date of the subscription", "cell.entry_3169D18E180D4E7D81801D05465BE7": "datetime", "content.title_345A90E610F244869E1CA096FCC1C145": "AntiVirus2", "content.p_BA6897E7B5CF4CC6A414E331B0EC1B": "Simplified class for providing information on anti-virus modules.", "cell.entry_E234D0C97DE44821910FE4CA1006FE": "Property Name", "cell.entry_1BC9B2B236134182BA680408FDC9A3": "Description", "cell.entry_CBFC5FA5B50A42B4BE9C711673BE9D": "Type", "cell.entry_725B160183614BF0A8BA69A63C547C": "RealTimeScanningEnabled", "cell.entry_176E104D0E384E60AC29198A9115BE": "Status information for real-time scanning", "cell.entry_30C39E3E39A54D398A2988BAE62941": "boolean", "cell.entry_5FF0A2DDCBF64E23BB9E282D1D7300": "DeepGuardEnabled", "cell.entry_C735B44934A64F28A2584F19DA997F": "Status information for DeepGuard", "cell.entry_BD5DC6F8531D4580A5119A12B2BC72": "boolean", "cell.entry_A102DD471EE044BEBD27953183EA5F": "AvDefinitionsAgeInHours", "cell.entry_5B7E4A3B7A454D2CBC0BA8D940060E": "Age of Anti-Virus definitions in hours", "cell.entry_384BD1F92EBA468192755D457AD492": "uint32", "content.title_143C3BC7403F4617ACD3F51CC85EE5A9": "LicenseStatus", "content.p_D928312064F645418E1459E2BD11C3": "Provides information on the current subscription status.", "cell.entry_D7F7A40346224E7E8BBF69D961D4F9": "Property Name", "cell.entry_A7CEF6DAEB5A4E8AA61CC5E0996048": "Description", "cell.entry_208B4A28182940FF824B52B3909247": "Type", "cell.entry_3D44EF07B36B429F8ABA306A404F13": "Valid", "cell.entry_2683731D07384F4788E9C8CA15D21C": "Validity status of the license", "cell.entry_7739EE2F99D64500B1338B27B8AB74": "boolean", "cell.entry_F625D7149A97437EA2DCDE6AF04B37": "EndDate", "cell.entry_63B399B9B263441B86A75831994DE5": "The end date of the subscription", "cell.entry_17B4545CBBD642C68E8EF73D31CEB8": "boolean", "cell.entry_FC153C2745324EA4B7E42E6B5232CD": "DaysTillEndDate", "cell.entry_D9C3D6F7E90240CEB051BB60A91DBA": "The number of days till the end date of the subscription", "cell.entry_4E2F4B9D418443A2AFE573935EF11A": "uint32", "content.title_C1EBCA5B243444BA91F3A21C7E74364F": "LastManualScanReport ", "content.p_BA1F1FFB4B05419B87A644EEC5C466": "Provides information on the last manual scan run by a user.", "cell.entry_B12F0D7AECF24889B52F54B43DC754": "Property Name", "cell.entry_06BE9F5DCEC04E739DC236117AF9DF": "Description", "cell.entry_0794E64F91AA49EFB4D93C2DB9909F": "Type", "cell.entry_EF1D37FE37EB46108DF942A3A57EDE": "Valid", "cell.entry_E517E38A4ACA4CD19D029CBCCB9304": "Indicates whether the report was successfully found and loaded", "cell.entry_3D0E98C08F4147BBBA8DAE8A80F6D8": "boolean", "cell.entry_A4E8A8B9EA4C4B99BC3128E28E1078": "StartTime", "cell.entry_0BCF1F7D520D455AADB0B8DBF62DDA": "The time when the scan was started", "cell.entry_7FF397E50C134889B67C8C9D8AA683": "datetime", "cell.entry_27570ED8294A4F6181AE11E0639E22": "Endtime", "cell.entry_7C103C66E59D4F55AE3F4AB725AE3C": "The time when the scan finished", "cell.entry_546510B1A8594ACB9B9CA7D435B9E4": "datetime", "cell.entry_F518FCE5B2A34C19BC295E3F238D6E": "StartTimeInHoursAgo", "cell.entry_DE4FE337B7974255B5F1360F67B945": "The time when the scan was started (in hours ago)", "cell.entry_CA574DDF8FC44AC6AAE16C87483E71": "uint32", "cell.entry_56A2C422845A42D0A03F896BA34E99": "EndTimeInHoursAgo", "cell.entry_4ED551E8AC9F4D9BAD1FE6B105D79B": "The time when the scan finished (in hours ago)", "cell.entry_7B5BFD54786A4404B373ABA8984825": "uint32", "cell.entry_A32318FFF239454A8D77252FB1FA0A": "InfectedFilesCount", "cell.entry_5213F000CF9349C996E84C982CED6B": "The number of infected files found in the scan", "cell.entry_9FCCE9F0D4434614AF25B31C6FA0C4": "uint32", "cell.entry_D17FCF25BC154C9A91CF1F77080CEE": "TotalScannedFilesCount", "cell.entry_41722674B3A742B78E5893EB79113A": "The total number of files scanned", "cell.entry_D842449A64054E9B90C202E89A5209": "uint32", "cell.entry_29A687725B444C4F90B4707B85067F": "HarmfulItemsFound", "cell.entry_697327BE0A2446D0BF42A9A1B5AD58": "Indicates whether harmful items were found", "cell.entry_39DB66F125B049C58A609809E959FF": "boolean", "cell.entry_13A89107837F4D7D82B98E6A587DB9": "ScanningReportFilePath", "cell.entry_A90534CFE49D470A935101573DD88C": "The file path to the scan report", "cell.entry_E39985E95310468B93ACD1FE7A1F93": "string", "content.title_3BDB50CBDDB54458B872E47FCAE3F02E": "LastScheduledScanReport ", "content.p_3F51349421694C4DA3A419E24A052A": "Provides information on the last scheduled scan.", "cell.entry_72BB437085AE44C1A8E6013EF7D533": "Property Name", "cell.entry_EA90BB90251D4F26885EF611483D32": "Description", "cell.entry_FB29F6D9AD9B4E27B1E7EBF7869DA2": "Type", "cell.entry_8BD6B0A7044E488ABAA215A6528BE6": "Valid", "cell.entry_D2FACF5736D040FC9837052E7663EA": "Indicates whether the report was successfully found and loaded", "cell.entry_C3E52305B74E4E3686C4865B2F5B71": "boolean", "cell.entry_67A3537EF97D4B23B2E1BB079AE520": "StartTime", "cell.entry_C93850EDC2EC43FE80EEF78DBFAFCC": "The time when the scan was started", "cell.entry_2BE99457E4D346FEAECEFBC324328D": "datetime", "cell.entry_6386A0B5F8E34B8889CB2C900CF6FE": "Endtime", "cell.entry_FB4929A4F91545C4B0F16CDBD91B78": "The time when the scan finished", "cell.entry_6CC4BE2EACB243F4B4DF38F4CAD4A2": "datetime", "cell.entry_D84A66F710CE4BAF92A2267D7878E9": "StartTimeInHoursAgo", "cell.entry_31FE6CADAD7E45589F00AD6001CCA7": "The time when the scan was started (in hours ago)", "cell.entry_6950CD8532E549609227AA4B71BCBA": "uint32", "cell.entry_55C74F5F38494140A1F17D26192B3C": "EndTimeInHoursAgo", "cell.entry_847F9DDB5F084E1BB019983D136547": "The time when the scan finished (in hours ago)", "cell.entry_FCBF8B4C495345DEA93259AB8E63B9": "uint32", "cell.entry_E334EFED2C914CB69E29760B2FF1D1": "InfectedFilesCount", "cell.entry_0FF9A3A30A2443B5A4398E35157527": "The number of infected files found in the scan", "cell.entry_772F254652B440509EEA0A4324A653": "uint32", "cell.entry_862AE7AB607145A096B66FC792DEB5": "TotalScannedFilesCount", "cell.entry_0C4BCF7AC01749E2938871107212F2": "The total number of files scanned", "cell.entry_360DB2A2CBBF4FA988B2BF732B604F": "uint32", "cell.entry_5CD63B2D19394D89BAFE266B687DA6": "HarmfulItemsFound", "cell.entry_0FE281A729A341D0B932A6B67A3BFB": "Indicates whether harmful items were found", "cell.entry_4A64D385A14246B984F901016B0A37": "boolean", "cell.entry_BBC02E13409D490FB819E8BDC71B9F": "ScanningReportFilePath", "cell.entry_9DF34DAF516743949F658F3B404D3C": "The file path to the scan report", "cell.entry_21524B11044A4333925EE66831EDD9": "string", "content.title_FEC18022AD73442286D5E283157EBD6A": "Host identifier", "content.p_2FF91BDAD2FE4515B5EB7D15802423": "Provides information on the managed host.", "cell.entry_AB132E636977434082CB4EF2178FDA": "Property Name", "cell.entry_9D4997A859F84E5781D3DAE8DB393C": "Description", "cell.entry_B03C776E9D194CE192CF0B63834960": "Type", "cell.entry_5FBCAB63E1574BBEB9DE6D52C22C41": "HostIdentity", "cell.entry_37A327E78994433DA305B647D0C32F": "Unique identifier for the host.", "cell.entry_0FF0B5793FDA4AACBA431888782F57": "string", "cell.entry_E52B9FF81CBA42C3AA47CEB7D03AE7": "HostIdentityType", "cell.entry_7186670D5B5B4626A6FF3DDB5D3FFE": "Type of the host's unique identifier (for example SMBIOSGUID, RANDOMGUID, WINS, or MAC).", "cell.entry_5837A216F8C3488C89DFC53ED16943": "string", "desc": [ "content.title_F5A48477138B4DB58773968BB74E3569", "content.p_C220933B40E94869976AECF3A04E9E", { "table.table_ClassAvDefinitionProperties": [ { "thead.thead_2A99E46D9B7E4941A340E3F73A3DFA": [ "cell.entry_363D12CC4E6142A3A4BFA15FEF569F", "cell.entry_C51598594B53464ABBC445C3AB2A64", "cell.entry_1F89F60F61054BB094D05FA8640258" ] }, { "row.row_9C4EA392439143C6B10D43F8567810": [ "cell.entry_DCFD1CA052BE48C09E18D525D6012D", "cell.entry_3CFB17EE13674EAE99DEEB5B0B0E82", "cell.entry_EE3A6EBFF0454582967B6AEBCCCFB9" ] }, { "row.row_71FCD550EE6C4A0C9E6CFAB9891248": [ "cell.entry_080DDC4170A34B818A65044A9DC6C2", "cell.entry_01A8021767FF411EA1739BBCC01F86", "cell.entry_CA56C7C699E048EDAB2DBE02051A05" ] }, { "row.row_5292B584DD6A4603B4DFE172F6D528": [ "cell.entry_0F98695C4AF249979550D7FAB07950", "cell.entry_30A2F0073DE646689E943922F280B4", "cell.entry_E7FB4A430F5244E8B4FED0944EA2E3" ] }, { "row.row_60533B1F3D754836AC67F1A4D3D5AA": [ "cell.entry_9E1B4EC80DB5445185D8EB465A5472", "cell.entry_95D184F2B2E3489F85E4EEEFA084D6", "cell.entry_65CB0B1F7E944F5B89AB54E6D56A88" ] }, { "row.row_3659CB050A344A32A7A0E0C0723925": [ "cell.entry_A303AAE9E9EB4E8B90EBF121BD28C1", "cell.entry_ACF3BE578E294B8888E8B8399E9136", "cell.entry_77C7ACB83D2D48F9A0E8FDCC9BB70F" ] } ] }, "content.title_A658951157E940F6BECE8D9A8AC6E430", "content.p_3F3292268A0247E5ACEE81E21A1758", { "table.table_ClassAvScanResultProperties": [ { "thead.thead_1EE82B4E5DAD49FB84DD499CC61AE9": [ "cell.entry_FA25694384D94F2A939DF6A5DAFA95", "cell.entry_FF09901E8CD8429CBC66542BFD75A6", "cell.entry_F75D8BDDE8974C67BD2ABB265D5718" ] }, { "row.row_23CFAC18E38F48CDB51A4A105614D0": [ "cell.entry_AA5EB6CC398246F49A4BF72CFF437F", "cell.entry_6E5664E43AD94D00BFCB0BA46BF71D", "cell.entry_94FF643846E34A0F9B12204BDD5415" ] }, { "row.row_E65C60359F5043BA837FEBBF8DA7B5": [ "cell.entry_1A85E17A6D774088875727C516FA86", "cell.entry_6C482D3BE86C410D90C92EB718E94E", "cell.entry_3FD085FC5F6E4C699E67EF77E874C2" ] }, { "row.row_F17CED936B7B4CA284522D8ED7F7EA": [ "cell.entry_152308633DE84DB6A394F912416E58", "cell.entry_0DAB94B6FBAB48728CFE978C4585AE", "cell.entry_0F1F983C3E8143A3B8BEEEA58431DD" ] }, { "row.row_4D333FBCD9BC443C937F89D7D5D0C1": [ "cell.entry_8E65E85189C34B1AA929DB9B09CBA5", "cell.entry_B968BDC02D1B4A428F4AE3C0E26A25", "cell.entry_3DB500E51DF94B808D57886E10F738" ] }, { "row.row_A58624994ACD49D2A291F74E1C1DA1": [ "cell.entry_A8A5AD0207BB483AAA00F6E0E7618B", "cell.entry_17EFF986609E4E79B77A7BFAC85DD3", "cell.entry_9968CBCB1BAF4F5EAD2F8D24193D1E" ] } ] }, "content.title_0105FD2ED97246C6A0559FFEE363F111", "content.p_B249B21010E24373AB3CFDBFE9C2C6", { "table.table_ClassAPIProperties": [ { "thead.thead_937A30FE82214EFEB8D04A44C0FD7A": [ "cell.entry_B1C32319B71F4DF7A5F69AF4A1D61F", "cell.entry_75F8EF34E3EA4A42A96E8B823426FB", "cell.entry_1532B27A97074420ACD89C4F868EAC" ] }, { "row.row_D606642CC5C94B89BCE6BAC7C9A518": [ "cell.entry_3839808F60254A98B86B6F26C47BD3", "cell.entry_3B1F0C7A2B8E44C89597F9C5A07238", "cell.entry_CFF611A2F8AE42B2888E9AAADF325B" ] } ] }, "content.title_CC7CA561FED8462C92EFCE2599F2C4E0", "content.p_C6D4C2B93EED49A082F7A6F29C9161", { "table.table_ClassProductProperties": [ { "thead.thead_3F05DF578D754D438DC14BD675BFF5": [ "cell.entry_87EB3B7C046743E88194F274A7C531", "cell.entry_2422C48D05E84CDD85AC86DF60A070", "cell.entry_65597F13F7384ED8AD858D429093F1" ] }, { "row.row_F8FDA474E62D42939B961A94B75009": [ "cell.entry_6CCFFEFF47DB4756898E98869250DE", "cell.entry_CE33C484BB804F55B6EC47BEEA8FDB", "cell.entry_F67146EA1DC74E88BCE6C3D5AA30B7" ] }, { "row.row_48334D8BD2D640FC9759C3FD1549BD": [ "cell.entry_E106CD8E48C1449D9095CF883D340E", "cell.entry_92AA96CCD49D4F6BBF41776404F5E0", "cell.entry_59609684A1D143B7B98857D72988C2" ] }, { "row.row_BDFDA878F8C74D6E9AB9B2FB5970C1": [ "cell.entry_D6337000271D4874B38813268B224D", "cell.entry_2FE9415506174772A7477335E54B3E", "cell.entry_F4D39EEDD4D8445BBBD2E2D9B4F791" ] } ] }, "content.title_FF5B7F5E761B4F33BE0ED5F5085C8D97", "content.p_D60AE77BF0D440E7B8D72840DA1A94", { "table.table_ClassAntiVirusProperties": [ { "thead.thead_F3904D087E6A40CFAA49BD4C52DD27": [ "cell.entry_E0F498F3E3E9442AAFC12E9D7CCBD6", "cell.entry_02EFE0A78D03435BA39A25EC4FA8C2", "cell.entry_15CE1029ACF94068BFDBB123478816" ] }, { "row.row_167BE003E74B44A284E98CE7111CB6": [ "cell.entry_7C5CCADE498B4B5E9E3A7C5B755DEE", "cell.entry_FD17B42C812D4E75887B4AE04087E8", "cell.entry_4A6749D7131B4A20B36807AB2D6EBE" ] }, { "row.row_9275C2B5C9BB4C53B22AC47978D097": [ "cell.entry_1B0E40D7E42C43EDA18443718904A6", "cell.entry_63E63208085748A8801F5A55E54ABD", "cell.entry_9910E3ED1E2048B5A24BCCFBE8B3AD" ] }, { "row.row_3183618A25D6452D8D42756DB2CD11": [ "cell.entry_5353B3CD29914CA5BC0DDD343B6E7B", "cell.entry_458995443960444D85235970025243", "cell.entry_A6198F9190964F2FB50EBEAE0309C0" ] }, { "row.row_E2F276C5F8214B9BA3EB262E5AB488": [ "cell.entry_016BA383C5CD477BA3838EA49CB208", "cell.entry_07F312DFA87E447B9F94055E017334", "cell.entry_EFD1F603DC2144BA8A21CA15800119" ] } ] }, { "table.table_ClassAntiVirusMethods": [ { "thead.thead_29EFA5D60A1B474DB95BC53A9BA5F3": [ "cell.entry_12E1A3E328DB4C2BB1F4C218E9DDD6", "cell.entry_1E825624D93643F7AB5F4A26B7E811", "cell.entry_75EE7B5242D447D0BFB3939A7C3612" ] }, { "row.row_4B745FE76F9C4A93AA15FD928BA958": [ "cell.entry_CB86F6CE603446179F09995D449543", "cell.entry_DBEB00BF737A4C71B1D6854BF9CCB1", "cell.entry_35A28FC629094E0A8FDAEF8489785E" ] } ] }, "content.title_10919C0B15B8431C806E6BA048C9C7B6", "content.p_8F216E39AD7B4F5483F36F850AE42F", { "table.table_ClassFirewallProperties": [ { "thead.thead_F521690B055C447ABB902DE641A96E": [ "cell.entry_CD446B3EE6434F2F9C87B5197E6DF6", "cell.entry_C31ED01803DC41F38EDF9ACA66E4EA", "cell.entry_5C332AE37F7E424A8B4CC1FA6C0A14" ] }, { "row.row_E00C5798ED7A42ADB10B6DE7857922": [ "cell.entry_01F922684605497DBEA0EEF66C0C30", "cell.entry_AB21BA12FE244E4BA8C61480FD2780", "cell.entry_3CE15468E3BA470C942514039EDC2E" ] }, { "row.row_43534E4BD0E74380B3FF0B04746DC0": [ "cell.entry_1CFE7A1397F748EAB2FE5966CE8FEB", "cell.entry_9FCC43A9E8524ACF91C0E689DDE7B8", "cell.entry_B7FB9321A47541D2B70D9E8C86ACD1" ] }, { "row.row_62D0FBCC96214F5EA31543A3B1F449": [ "cell.entry_270EDDF1E6F9442F9DCA72D9EE08A2", "cell.entry_D2DB798A926E40E09F3C4E9539D0E9", "cell.entry_7BA3EAAA589C4DB2A313A5460156CC" ] }, { "row.row_E0BE824B48A54757A8F7699A801AAB": [ "cell.entry_A12A354E1B98449794DD8CAA676D76", "cell.entry_E5EB2DE1663D4A20B60C2D5E62BA5F", "cell.entry_1A9FBE1544164F308DF938AAD189FB" ] }, { "row.row_458B648B79EB4AFF8773728120CA31": [ "cell.entry_2637797E1BD84784996A5F1B9897AF", "cell.entry_FA543B9816FB457AB5A760F12AAF23", "cell.entry_7CDCFBDCEEB9460D8E4A551B9D594D" ] } ] }, "content.title_0C5DE4D46B5040649BB4DD9A3545045D", "content.p_2B7FFDDF9CA14C73B8B3C2F13562F2", { "table.table_ClassCentralManagementProp7A69": [ { "thead.thead_AE9FCFE5735A4D56B9DD42BD0ABE64": [ "cell.entry_9B364F6E4DEF4B24A683A02ADA159D", "cell.entry_0232D00AB2664018A7DE48A9AE4A1F", "cell.entry_073DFFFA646E426D91791DFF482206" ] }, { "row.row_B19E24A805C94A75B24FE99A37CB6C": [ "cell.entry_5A22DBB4DB9B4F6F81C7BE3701CBB0", "cell.entry_7DD80BC3C1E3462BBF41D7183B5EC8", "cell.entry_6B6BAB612D6F4831BD74F2F3CAD154" ] }, { "row.row_B40ACDE042EC44DEB0E23918F3E069": [ "cell.entry_93DD9718D0FC429C98504AF090A832", "cell.entry_2081AF14C5E748F3A85C188A1A2698", "cell.entry_C8FEBB8484444B16B0C67AF5AE3966" ] }, { "row.row_00358E2FD08A4D1B9D1E2C0690B0DB": [ "cell.entry_AA28265B178A4B2AA6D81CB94D1B75", "cell.entry_7BC96C820785414D8AF307039ED7F7", "cell.entry_AC1F3113A744475995BAB299EEB6FD" ] } ] }, "content.title_5FBB98CB443B4C9893BCB506F521BE9F", "content.p_5B0F29D8AD804C658D3DD5D5AC9871", { "table.table_ClassSoftwareUpdaterProperties": [ { "thead.thead_56ABA4D602904D629A42DCFF21DEC8": [ "cell.entry_E4C8F930A8424A96962795120302AA", "cell.entry_63F3D8C7BFF147C4ADE3CC111E12E6", "cell.entry_28648FB377BA405A940E34B0895499" ] }, { "row.row_030D5DC2C16844929066AD580E407A": [ "cell.entry_233E7BF3F23C46A2A383398F4FE9D9", "cell.entry_249BB596924F409F986FAA870B023F", "cell.entry_EA08E5AD7DB9488B9F7DD8C5944012" ] }, { "row.row_AA23D05EC7064141968E05DFB4BEAB": [ "cell.entry_45528BEA3ECF47DA9B86DCF0341A4F", "cell.entry_2CB21962B28E44D8A9A1E834210232", { "choices.ClassSoftwareUpdaterProperB5EA": [ "choice.choice_ClassSoftwareUpdaterProperDB93", "choice.choice_ClassSoftwareUpdaterProper7C17", "choice.choice_ClassSoftwareUpdaterProperA2BF", "choice.choice_ClassSoftwareUpdaterProper8B77" ] }, "cell.entry_09EFA57B485042CDAC1C8243538E70" ] }, { "row.row_3839E8B90D36483C9D9F4075EF25C5": [ "cell.entry_A92F70B946404280AC862212987BB4", "cell.entry_11D9480725DF4F27ACA5B64BF6B704", "cell.entry_5A522896E403489AB20583BFA6F8BF" ] }, { "row.row_2B200C11985B4C5E8BF385EAE0A98A": [ "cell.entry_DC2EDBD2A25C4C7B984DC2F082CB47", "cell.entry_9E837204BF8444BE990E7008388882", "cell.entry_89E0AACD954148A688FD4E358FF794" ] }, { "row.row_799FE3F0F75A4ECDAC534D3660DF4C": [ "cell.entry_0DC712CB50AE4C0F91960271F86D4E", "cell.entry_83A59F20F9624E2D8B6CD54BF233FA", "cell.entry_88C9F986CACE4C6AAEDC88F29D0871" ] } ] }, "content.title_84EE6185CBB249AC9AC57CB7C27786D6", "content.p_02D9DE36A3644A5D9EC274DE269126", { "table.table_ClassInternetProperties": [ { "thead.thead_23CF7757A6F141ED99AB63E7975A1C": [ "cell.entry_9C8764E77BEE4443A975D5F6125C33", "cell.entry_66FE0770687545C6A961809E02D8E6", "cell.entry_A57C37AFCB0A49FAB9B371446E4C7F" ] }, { "row.row_79F6C2B75C8E4D4FA9CF95B798C95B": [ "cell.entry_1A9B299B32C747F6BFDA0808341240", "cell.entry_2E592B4BDA4C4F889B8E142F69062B", "cell.entry_378A91C7148842CF845FD99B122CC1" ] }, { "row.row_0ACB6D7BE67B44109EB3BF1AC5741C": [ "cell.entry_136F5EBE1A9D4B929AC401D35997EE", "cell.entry_CC782B10EC0946F3BEA47754209239", "cell.entry_0413952A073344B5A68638FFCD3493" ] } ] }, "content.title_E0425B5B20824B4CA147C73B05E05E5B", "content.p_9802A17849CD40D2A2D87A9CAEC032", { "table.table_749AB8F0AB3A4B9CB7F7899CA2AF80": [ { "thead.thead_B51277C81BBF44C7AF4097D8C7E6D9": [ "cell.entry_1BAB1B1583694ACD90DA521CED247A", "cell.entry_E7D4B67A97484BF9AAD190B4DEEA13", "cell.entry_66EAB75888604FB9B7B413A91B2998" ] }, { "row.row_3DAF4DD0017F48CCBD342B38DDCAF9": [ "cell.entry_BE68F7B198484F58AC1FB63F3D111D", "cell.entry_7C0F00425C854CFB869B164CD6EF1C", "cell.entry_79D293C823814A059A4F1D9FBC6F8A" ] }, { "row.row_70F7FCE61AEA47549FF5273293515E": [ "cell.entry_08ED70B3E9854813B76F9C844F509A", "cell.entry_086647FCE561436A94741FC0F1ABD9", "cell.entry_3169D18E180D4E7D81801D05465BE7" ] } ] }, "content.title_345A90E610F244869E1CA096FCC1C145", "content.p_BA6897E7B5CF4CC6A414E331B0EC1B", { "table.table_3BBCB0D699C54086B7C23ED05D4447": [ { "thead.thead_56148E854ED54A16ABDFB131F2FE34": [ "cell.entry_E234D0C97DE44821910FE4CA1006FE", "cell.entry_1BC9B2B236134182BA680408FDC9A3", "cell.entry_CBFC5FA5B50A42B4BE9C711673BE9D" ] }, { "row.row_A12FCE494A9D40E28777C9DBB5CEFF": [ "cell.entry_725B160183614BF0A8BA69A63C547C", "cell.entry_176E104D0E384E60AC29198A9115BE", "cell.entry_30C39E3E39A54D398A2988BAE62941" ] }, { "row.row_03E054AA56E64BE182B55484BB0A39": [ "cell.entry_5FF0A2DDCBF64E23BB9E282D1D7300", "cell.entry_C735B44934A64F28A2584F19DA997F", "cell.entry_BD5DC6F8531D4580A5119A12B2BC72" ] }, { "row.row_1B37F538E58F44788ED7793B44D175": [ "cell.entry_A102DD471EE044BEBD27953183EA5F", "cell.entry_5B7E4A3B7A454D2CBC0BA8D940060E", "cell.entry_384BD1F92EBA468192755D457AD492" ] } ] }, "content.title_143C3BC7403F4617ACD3F51CC85EE5A9", "content.p_D928312064F645418E1459E2BD11C3", { "table.table_5B5072B14E554182A2C621E72BFF85": [ { "thead.thead_9CEC796ADA1242EF885658D3B8D6B8": [ "cell.entry_D7F7A40346224E7E8BBF69D961D4F9", "cell.entry_A7CEF6DAEB5A4E8AA61CC5E0996048", "cell.entry_208B4A28182940FF824B52B3909247" ] }, { "row.row_C4B36BED25CF4B78978D0DCA139FFA": [ "cell.entry_3D44EF07B36B429F8ABA306A404F13", "cell.entry_2683731D07384F4788E9C8CA15D21C", "cell.entry_7739EE2F99D64500B1338B27B8AB74" ] }, { "row.row_5A8E6B7DAA5D4D39837B0DB97C1E1A": [ "cell.entry_F625D7149A97437EA2DCDE6AF04B37", "cell.entry_63B399B9B263441B86A75831994DE5", "cell.entry_17B4545CBBD642C68E8EF73D31CEB8" ] }, { "row.row_23B9CA4FBB4F45A197D14C17722A8E": [ "cell.entry_FC153C2745324EA4B7E42E6B5232CD", "cell.entry_D9C3D6F7E90240CEB051BB60A91DBA", "cell.entry_4E2F4B9D418443A2AFE573935EF11A" ] } ] }, "content.title_C1EBCA5B243444BA91F3A21C7E74364F", "content.p_BA1F1FFB4B05419B87A644EEC5C466", { "table.table_41BAAC3B20BA4F1291938B9DF27E77": [ { "thead.thead_7852F4AD3CB94E6CBE64F2115B0FA9": [ "cell.entry_B12F0D7AECF24889B52F54B43DC754", "cell.entry_06BE9F5DCEC04E739DC236117AF9DF", "cell.entry_0794E64F91AA49EFB4D93C2DB9909F" ] }, { "row.row_3A981BF2D0494CE987B413AA583AFE": [ "cell.entry_EF1D37FE37EB46108DF942A3A57EDE", "cell.entry_E517E38A4ACA4CD19D029CBCCB9304", "cell.entry_3D0E98C08F4147BBBA8DAE8A80F6D8" ] }, { "row.row_147014B4E3154FE4A0B4744B62AF0A": [ "cell.entry_A4E8A8B9EA4C4B99BC3128E28E1078", "cell.entry_0BCF1F7D520D455AADB0B8DBF62DDA", "cell.entry_7FF397E50C134889B67C8C9D8AA683" ] }, { "row.row_51E60A83101E440C90FC2A8679E66A": [ "cell.entry_27570ED8294A4F6181AE11E0639E22", "cell.entry_7C103C66E59D4F55AE3F4AB725AE3C", "cell.entry_546510B1A8594ACB9B9CA7D435B9E4" ] }, { "row.row_0E433EDE69DC446EA7FBB02C2D3308": [ "cell.entry_F518FCE5B2A34C19BC295E3F238D6E", "cell.entry_DE4FE337B7974255B5F1360F67B945", "cell.entry_CA574DDF8FC44AC6AAE16C87483E71" ] }, { "row.row_E08291785A4F41D088CD34838B8FD5": [ "cell.entry_56A2C422845A42D0A03F896BA34E99", "cell.entry_4ED551E8AC9F4D9BAD1FE6B105D79B", "cell.entry_7B5BFD54786A4404B373ABA8984825" ] }, { "row.row_4BD55EB0E3B0407AB889C4416191B5": [ "cell.entry_A32318FFF239454A8D77252FB1FA0A", "cell.entry_5213F000CF9349C996E84C982CED6B", "cell.entry_9FCCE9F0D4434614AF25B31C6FA0C4" ] }, { "row.row_1598F435622B4097B1A051E7AA6D56": [ "cell.entry_D17FCF25BC154C9A91CF1F77080CEE", "cell.entry_41722674B3A742B78E5893EB79113A", "cell.entry_D842449A64054E9B90C202E89A5209" ] }, { "row.row_66B39B9BA78C4974B645D5065500A2": [ "cell.entry_29A687725B444C4F90B4707B85067F", "cell.entry_697327BE0A2446D0BF42A9A1B5AD58", "cell.entry_39DB66F125B049C58A609809E959FF" ] }, { "row.row_0E17E4E9A9A84A719D1DB1B75173CA": [ "cell.entry_13A89107837F4D7D82B98E6A587DB9", "cell.entry_A90534CFE49D470A935101573DD88C", "cell.entry_E39985E95310468B93ACD1FE7A1F93" ] } ] }, "content.title_3BDB50CBDDB54458B872E47FCAE3F02E", "content.p_3F51349421694C4DA3A419E24A052A", { "table.table_DA31E12777364F3092127BDF850F84": [ { "thead.thead_9F0A727714D94EFE82E332D749D1D7": [ "cell.entry_72BB437085AE44C1A8E6013EF7D533", "cell.entry_EA90BB90251D4F26885EF611483D32", "cell.entry_FB29F6D9AD9B4E27B1E7EBF7869DA2" ] }, { "row.row_7BB4DE9B867343CAAA109F845A1AEE": [ "cell.entry_8BD6B0A7044E488ABAA215A6528BE6", "cell.entry_D2FACF5736D040FC9837052E7663EA", "cell.entry_C3E52305B74E4E3686C4865B2F5B71" ] }, { "row.row_C9008DE42BD745A8913952C574FDFF": [ "cell.entry_67A3537EF97D4B23B2E1BB079AE520", "cell.entry_C93850EDC2EC43FE80EEF78DBFAFCC", "cell.entry_2BE99457E4D346FEAECEFBC324328D" ] }, { "row.row_555FA08C3CC44F2394887E167F105D": [ "cell.entry_6386A0B5F8E34B8889CB2C900CF6FE", "cell.entry_FB4929A4F91545C4B0F16CDBD91B78", "cell.entry_6CC4BE2EACB243F4B4DF38F4CAD4A2" ] }, { "row.row_A6C904B78D4342BF86DDDB30D9196E": [ "cell.entry_D84A66F710CE4BAF92A2267D7878E9", "cell.entry_31FE6CADAD7E45589F00AD6001CCA7", "cell.entry_6950CD8532E549609227AA4B71BCBA" ] }, { "row.row_339DBA163C27468C9A2817E9735754": [ "cell.entry_55C74F5F38494140A1F17D26192B3C", "cell.entry_847F9DDB5F084E1BB019983D136547", "cell.entry_FCBF8B4C495345DEA93259AB8E63B9" ] }, { "row.row_F094169E0CAD4003862AEDC6B34EF8": [ "cell.entry_E334EFED2C914CB69E29760B2FF1D1", "cell.entry_0FF9A3A30A2443B5A4398E35157527", "cell.entry_772F254652B440509EEA0A4324A653" ] }, { "row.row_BE8158BCE0DD4B66A1C3EBF661A924": [ "cell.entry_862AE7AB607145A096B66FC792DEB5", "cell.entry_0C4BCF7AC01749E2938871107212F2", "cell.entry_360DB2A2CBBF4FA988B2BF732B604F" ] }, { "row.row_7F1F2430958C46A08C4132A90ADB8B": [ "cell.entry_5CD63B2D19394D89BAFE266B687DA6", "cell.entry_0FE281A729A341D0B932A6B67A3BFB", "cell.entry_4A64D385A14246B984F901016B0A37" ] }, { "row.row_9024392C611748C78753393AFE8AAA": [ "cell.entry_BBC02E13409D490FB819E8BDC71B9F", "cell.entry_9DF34DAF516743949F658F3B404D3C", "cell.entry_21524B11044A4333925EE66831EDD9" ] } ] }, "content.title_FEC18022AD73442286D5E283157EBD6A", "content.p_2FF91BDAD2FE4515B5EB7D15802423", { "table.table_ClassHostIdentity": [ { "thead.thead_19D5EDDDBEB44E848EDF16E9146E63": [ "cell.entry_AB132E636977434082CB4EF2178FDA", "cell.entry_9D4997A859F84E5781D3DAE8DB393C", "cell.entry_B03C776E9D194CE192CF0B63834960" ] }, { "row.row_3D6A0F09038A4A7E8BD7C8F93F20B0": [ "cell.entry_5FBCAB63E1574BBEB9DE6D52C22C41", "cell.entry_37A327E78994433DA305B647D0C32F", "cell.entry_0FF0B5793FDA4AACBA431888782F57" ] }, { "row.row_2348550E76E244DBB93163875ED525": [ "cell.entry_E52B9FF81CBA42C3AA47CEB7D03AE7", "cell.entry_7186670D5B5B4626A6FF3DDB5D3FFE", "cell.entry_5837A216F8C3488C89DFC53ED16943" ] } ] } ] }, "concept_data_in_win_registry-16.10-en.json": { "title": "title_B743BA671F8A43C88619C3A270A0519E", "title_B743BA671F8A43C88619C3A270A0519E": "WMI classes in the Windows registry", "shortdesc": "shortdesc_E8CEA07CB33A417792354F6EAB3985D2", "shortdesc_E8CEA07CB33A417792354F6EAB3985D2": "All the WMI classes described in this section are also reflected to the Windows registry. ", "content.p_9E4CBB7FFE3143D683F2285B0A2304": "The classes can be found under the following path:", "content.p_6DEC37CCEB9843699E0C8CE55DF4EB": "for 64-bit systems: HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\F-Secure\\Monitoring ", "content.p_30461E2AB82C4BC792428D68D0C071": "for 32-bit systems: HKEY_LOCAL_MACHINE\\SOFTWARE\\F-Secure\\Monitoring", "content.note_65CC552D6A184DE09D703A795F91E5": "Note: The WMI Provider setting must be turned on in the Policy Manager Console settings for this registry key to appear.", "desc": [ "content.p_9E4CBB7FFE3143D683F2285B0A2304", "content.p_6DEC37CCEB9843699E0C8CE55DF4EB", "content.p_30461E2AB82C4BC792428D68D0C071", "content.note_65CC552D6A184DE09D703A795F91E5" ] }, "concept_troubleshooting-16.10-en.json": { "title": "title_A6D40771614A485FAE4DE404A01ADF06", "title_A6D40771614A485FAE4DE404A01ADF06": "Troubleshooting", "shortdesc": "shortdesc_6EDB7ADC162441CC92C8DF245BC20333", "shortdesc_6EDB7ADC162441CC92C8DF245BC20333": "If you have problems when using the product, you can find possible solutions in this section. ", "desc": [] }, "concept_fsmps_fspmc_troubleshooting-16.10-en.json": { "title": "title_B66D34FF9D7040D2B90A705DCFDAEBAD", "title_B66D34FF9D7040D2B90A705DCFDAEBAD": "Policy Manager Server and Policy Manager Console", "shortdesc": "shortdesc_889F03F402F24944A4B17B21FC389F76", "shortdesc_889F03F402F24944A4B17B21FC389F76": "Issues about Policy Manager Server and Policy Manager Console. ", "content.p_2FD74BE7D6924EDBBE9CFAADBC9B10": "", "content.dt_98A7B48814E541479925C9CBFC6C09": "Why doesn't Policy Manager Server start? ", "content.p_E7349EEA26A944D09640BE0CD5CE36": "Runtime errors, warnings and other information can be found in the files:
", "content.p_C1AD0E62BEA343CDAE4E847CE0CEB4": "C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\logs\\fspms-webapp-errors.log and C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\logs\\fspms-service.log.
", "content.p_2583BB626CA9443E95D4A6A3E92A46": "Check that the access rights (properties/security/permissions) includes the Local Service user account. If Local Service is not listed as an authorized user, add the user manually, and set the access rights to Full Control. Propagate the access rights to the installation and program data directories (by default C:\\Program Files\\WithSecure\\Policy Manager Server and C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\data\\) and all its subdirectories. After these changes, restart the Policy Manager Server service or reboot the computer.
", "content.p_D32A7749CA4E45C68A50B40B214DBD": "The Local Service account is the Windows system account, and the Policy Manager Server service is started under this user account. With normal installation, the directory access rights for the Management Server 5 directory are automatically set correctly. If the directory is copied by hand or, for example, restored from backup, the access rights might be deleted. In this case execute the steps described in the previous paragraph.", "content.dt_109D6D72012043738ED6A56328CEFC": "Where are the log files and configuration files located for Policy Manager Server? ", "content.p_8B583ECD5D3A4D98B18A176BC31127": "The log files are located in:
", "content.p_244AD4681D584D32B4FD62CEC51160": "C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\log
", "content.p_F98F8063161C4C72A314D17E161EE2": "The configuration files are in:
", "content.p_329543F857A34A658F1B35C21CD6AA": "C:\\Program Files\\WithSecure\\Policy Manager\\Policy Manager Server\\config\\", "content.dt_1F375CF0E3044BFBBCF61A444F7A34": "Where are the Policy Manager Console log files located? ", "content.p_8EFD5B7B833048AD8C3406383CF0E8": "The log file is:
", "content.p_CCF173CDE028491D8293A93E937EED": "C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Console\\log\\Administrator-error.log
", "content.p_9262F2D893E2499498B5C78614DC2E": "Policy changes applied with the Distribute policy operation are logged to:
", "content.p_551799B7C5534A6D90782D436FE59A": "C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\log\\fspms-policy-audit.log.", "content.dt_A43DD4520658489AB6EA77F414C6A1": "I have lost the admin password. Can I retrieve or reset the password? ", "content.p_6217DA5E880D439EA2F47B792FFC90": "If you have lost the password for the admin user, or if the account was accidentally deleted, you can reset the user account for Policy Manager on Windows with the following tool:
", "content.p_F6CF60CEF49E4C658200F7DB19BAA7": "C:\\Program Files\\WithSecure\\Policy Manager\\Policy Manager Server\\bin\\reset-admin-account.bat
", "content.p_CC8EF7CBAB72450FB6F1907F252A64": "For Policy Manager on Linux, use the following script to reset the user account:
", "content.p_3940C92D2E874C0189271BFD52A1F1": "/opt/f-secure/fspms/bin/fspms-reset-admin-account
", "content.p_1A5D1D6BB3484F3DADC2988DCC172C": "", "content.note_DD1433D9A2CE4B86B8F9F4E052072D": "Note: You need to stop Policy Manager Server manually before running the reset tool.
", "content.dt_2E9C221888854111B451BE4E77122D": "How can the server role change stop Policy Manager Server from working? ", "content.p_3283C28149E44020BCB4B4E3620C2D": "The Domain Controller server and Member/Standalone server use different types of accounts: domain accounts on Domain Controller and local accounts on Member server. Because Policy Manager Server uses its own account to run, this account becomes invalid with the role change.
", "content.p_25F9BE8C3F2C462FA90CB2D4262835": "The easiest way to restore Policy Manager Server after a server role change is to re-install Policy Manager Server with the Keep existing settings option selected. This will recreate the Policy Manager Server account and reset all file access rights to the correct ones.", "content.dt_99B38C0196374B029FC18E1B0A1355": "How can Windows security hardening stop Policy Manager Server from working? ", "content.p_58C8F4482B1A4D3B86327F812D7EDF": "Access rights restrictions, especially restrictions under the %SystemRoot% directory (c:\\windows or c:\\winnt) can stop Policy Manager Server from starting, as its own account (Local Service) needs to be able to read the network related DLL and SYS files.
", "content.p_2CB2A47F8AFC4520843B935FB72198": "You must allow the Local Service account to 'read' the following directories:
", "content.p_2C852C307D7E4D6AB6BD4AC3854F84": "%SystemRoot%
", "content.p_FA0EA00470974803B01D0AE895D07C": "%SystemRoot%\\system32
", "content.p_BE42CAA573FE4FE59B4CFA69CD61A5": "%SystemRoot%\\system32\\drivers
", "content.p_F3B095BE251A4258B22B61A094ACF4": "Some service restrictions can also prevent the Policy Manager Server service from starting. For more information on these please consult the Microsoft Windows Server documentation.", "content.dt_A18997C9530F4102A66906C5595B81": "Why does Policy Manager Console lose the connection to Policy Manager Server? ", "content.p_47EDD1DC13AD4D64BF4CC4005FDBF3": "If Policy Manager Console is run on a separate computer from Policy Manager Server, then the connection may be affected by network problems. There have been numerous reports where, for example, a network switch change caused loss-of-connection problems between Policy Manager Console and Policy Manager Server. Usually these problems are fixed by updating the network drivers to the latest version in the affected machines or by reconfiguring the new switch and the network cards on the Policy Manager Console and Policy Manager Server machines.
", "content.p_A342672635664A139223CDA61A2019": "If Policy Manager Console is installed on the same computer as Policy Manager Server, then there is a risk that Policy Manager Server could be under such a heavy network load that it does not have any free network connections available. Policy Manager Console and all hosts are competing for the same network resources.
", "content.p_ADA6181888A5490A9836B573BC99C0": "Possible solutions are to increase the polling intervals of hosts, to change the Windows networking timeouts shorter, or to increase the number of Windows networking ports.
", "content.p_320C39791A444486B9FF60D476D2CD": "Useful Windows networking settings are:
", "content.p_19C71E179A4142F08E5FB0CF4A5AF6": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\MaxUserPort (maximum number of network ports, default = 5000)
", "content.p_6F5529BAA58344AF83712A7471E341": "HKLM\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters\\TcpTimedWaitDelay (time to wait before closing inactive network connection, default = 240 seconds).
", "content.p_3E104335816C472DA3990BFD764655": "The netstat -an command can be used to check whether there are too many connection open to the server.", "content.dt_911D5E006FBF48D294F525A59A8142": "How can I change the ports where the server listens for requests? ", "content.p_CCE606AC40AF463895F69AC8F849D9": "By default, the Policy Manager Server admin module (the component that handles requests coming from Policy Manager Console) listens in port 8080, and the Policy Manager Server host module (the component that handles requests from workstations) listens in port 80. These can be changed during installation.
", "content.p_41CA1020FE5D4CFBB6FD601EB4DF5B": "If you need to change the port numbers after installation:", "step.step_2625777D5B334305B46B74B78F12F1": "Stop Policy Manager Server.", "step.step_A0EB2EF9A3B7459E8352D17E984807": "Open the HKLM\\SOFTWARE\\WithSecure\\Policy Manager\\Policy Manager Server registry key.", "content.p_6C9A84BB321E4AF490DD435FC9CCA8": "Make sure Decimal is selected as the Base option when entering the new port number.", "step.step_0978ACC809AA4912BC43AA43FF4A3F": "Edit the AdminPortNum (admin module), HttpPortNum, and HttpsPortNum (host module) values and enter the new port numbers.", "step.step_81D2D2A4DDA549C5BDF54065CC4142": "Start Policy Manager Server.", "content.note_0DC717BDA220446F8CC8D2074B6303": "CAUTION: If you have workstations already configured to access Policy Manager Server (through the Policy Manager Server host module) you should not change the Policy Manager Server host port where agents communicate, since you might reach a state where the workstations will not be able to contact the server.
", "content.p_fsmps_fspmc_troubleshoot_01D35": "", "content.dt_D26C8AE9AB5D45CF8DAC234954898A": "I'm using either the gateway, load balancer, or other services intercepting TLS traffic in front of Policy Manager (PM) or the Policy Manager Proxy, and the managed clients are refusing to connect. ", "content.p_531DFC6D12724478B9E4480AE99655": "Policy Manager implements its own trust relationship mechanism and managed clients do not trust certificates that are not issued by Policy Manager.
", "content.p_FC08E5290A594DFB919484F93250F3": "To work around this limitation, follow these instructions to import your own certificates to the PM Database:", "step.step_D64F2687F0BC4517B2D67676E684D0": "Export the custom gateway certificate (public part) in DER format (binary encoding for X.509 certificates).", "subchoice.choice_CAEC2AE78FAE460E86518E48712DA8": "To enable the H2 Console, follow the instructions for the h2ConsoleEnabled property here.", "subchoice.choice_DF6667B3F448404CB3633E11489011": "Open the admin port for Policy Manager in the browser (https://localhost:8080 in the default configuration) and enter the administrator's user credentials.", "subchoice.choice_49000D5E16F4408491A14124779E5D": "Select the H2 Console link to open the H2 Console.", "content.p_08FCAEE572ED4A1BAAA40FE971138D": "", "step.step_2C9F2BCDBBED44838D5728E6F36FF5": "Open the H2 Console.", "subchoice.choice_0AD8B8B6B2464A84A257AEC2614894": "SERIAL – serial number of the imported certificate, it must be unique. Using ISSUED_ON as the SERIAL is a good option.", "subchoice.choice_C1C1074F8F02474ABB80CEC9A9916C": "SUBJECT – any string you wish to easily identify the certificate entry in the database.", "subchoice.choice_6D215672758446998FD2CB2127570F": "ISSUED_ON – the certificate creation date as a timestamp in milliseconds.", "subchoice.choice_781653EE1F8F46028F57AD82BB7006": "VALID_UNTIL – the certificate validity date as a timestamp in milliseconds, Policy Manager includes this certificate entry in the list of trusted ones until it reaches the specified date.", "content.p_9B2F9B992B2C4D4EA3857957D14AD9": "where:", "content.p_18DCE40A690A433480484DFE8D8387": "Use this query as reference: INSERT INTO ISSUED_CERTIFICATES VALUES (1639559267000, 'custom cert name', 'TLS', 1639559267000, 'manually imported', 1671095267000, 'FALSE', FILE_READ('c:\\path_to_cert\\certificate.der.cer'))", "step.step_63790B440279475BB9987A85D5E618": "Prepare the query in the following format: INSERT INTO ISSUED_CERTIFICATES VALUES (SERIAL, SUBJECT, 'TLS', ISSUED_ON, 'manually imported', VALID_UNTIL, 'FALSE', FILE_READ('path to the certificate file'))", "step.step_EE8D8998CE3A43829E8DE0094E1BE9": "Run the query in the H2 Console to import the certificate.", "content.p_fsmps_fspmc_troubleshoot_02238": "", "content.p_096340CC0F6C4891B6FEE177954D3E": "The same approach applies to customize the Policy Manager Proxy certificate if it replaces the one issued by Policy Manager.", "desc": [ { "dl.dl_D7D61A57DEEF4721B0F4D8E34B87A5": [ { "dlentry.dlentry_55BCD038A8B34C31AFD741011C8A4A": [ "content.dt_98A7B48814E541479925C9CBFC6C09", "content.p_E7349EEA26A944D09640BE0CD5CE36", "content.p_C1AD0E62BEA343CDAE4E847CE0CEB4", "content.p_2583BB626CA9443E95D4A6A3E92A46", "content.p_D32A7749CA4E45C68A50B40B214DBD" ] }, { "dlentry.dlentry_582C28BD908D4AEF8A038F45D0424A": [ "content.dt_109D6D72012043738ED6A56328CEFC", "content.p_8B583ECD5D3A4D98B18A176BC31127", "content.p_244AD4681D584D32B4FD62CEC51160", "content.p_F98F8063161C4C72A314D17E161EE2", "content.p_329543F857A34A658F1B35C21CD6AA" ] }, { "dlentry.dlentry_5DA7D63719864493AB3F56A32F5216": [ "content.dt_1F375CF0E3044BFBBCF61A444F7A34", "content.p_8EFD5B7B833048AD8C3406383CF0E8", "content.p_CCF173CDE028491D8293A93E937EED", "content.p_9262F2D893E2499498B5C78614DC2E", "content.p_551799B7C5534A6D90782D436FE59A" ] }, { "dlentry.dlentry_1035E13AD4AB4B01B74010E653CD2D": [ "content.dt_A43DD4520658489AB6EA77F414C6A1", "content.p_6217DA5E880D439EA2F47B792FFC90", "content.p_F6CF60CEF49E4C658200F7DB19BAA7", "content.p_CC8EF7CBAB72450FB6F1907F252A64", "content.p_3940C92D2E874C0189271BFD52A1F1", "content.p_1A5D1D6BB3484F3DADC2988DCC172C", "content.note_DD1433D9A2CE4B86B8F9F4E052072D" ] }, { "dlentry.dlentry_8D950B2628FF4F27B780C25BCD3B9D": [ "content.dt_2E9C221888854111B451BE4E77122D", "content.p_3283C28149E44020BCB4B4E3620C2D", "content.p_25F9BE8C3F2C462FA90CB2D4262835" ] }, { "dlentry.dlentry_E6D50B7CD49B4D20B87111F337E3D7": [ "content.dt_99B38C0196374B029FC18E1B0A1355", "content.p_58C8F4482B1A4D3B86327F812D7EDF", "content.p_2CB2A47F8AFC4520843B935FB72198", "content.p_2C852C307D7E4D6AB6BD4AC3854F84", "content.p_FA0EA00470974803B01D0AE895D07C", "content.p_BE42CAA573FE4FE59B4CFA69CD61A5", "content.p_F3B095BE251A4258B22B61A094ACF4" ] }, { "dlentry.dlentry_8BEFD9C4DFAA4ED7BF149DF9317EBC": [ "content.dt_A18997C9530F4102A66906C5595B81", "content.p_47EDD1DC13AD4D64BF4CC4005FDBF3", "content.p_A342672635664A139223CDA61A2019", "content.p_ADA6181888A5490A9836B573BC99C0", "content.p_320C39791A444486B9FF60D476D2CD", "content.p_19C71E179A4142F08E5FB0CF4A5AF6", "content.p_6F5529BAA58344AF83712A7471E341", "content.p_3E104335816C472DA3990BFD764655" ] }, { "dlentry.dlentry_34B51AE3FECF4E11A111DDC0A29F3E": [ "content.dt_911D5E006FBF48D294F525A59A8142", "content.p_CCE606AC40AF463895F69AC8F849D9", "content.p_41CA1020FE5D4CFBB6FD601EB4DF5B", { "steps.ol_56E8B1A8A890414BB96CDDF0AAFBD9": [ "step.step_2625777D5B334305B46B74B78F12F1", "step.step_A0EB2EF9A3B7459E8352D17E984807", "step.step_0978ACC809AA4912BC43AA43FF4A3F", "content.p_6C9A84BB321E4AF490DD435FC9CCA8", "step.step_81D2D2A4DDA549C5BDF54065CC4142" ] }, "content.note_0DC717BDA220446F8CC8D2074B6303", "content.p_fsmps_fspmc_troubleshoot_01D35" ] }, { "dlentry.dlentry_DD4B6BE64D7C402E90E9F552CE757F": [ "content.dt_D26C8AE9AB5D45CF8DAC234954898A", "content.p_531DFC6D12724478B9E4480AE99655", "content.p_FC08E5290A594DFB919484F93250F3", { "steps.ol_0DCBB45B9C244BA9B54518D95E60E0": [ "step.step_D64F2687F0BC4517B2D67676E684D0", "step.step_2C9F2BCDBBED44838D5728E6F36FF5", "content.p_08FCAEE572ED4A1BAAA40FE971138D", { "subchoices.ul_219534332DA449FC900B94D1302980": [ "subchoice.choice_CAEC2AE78FAE460E86518E48712DA8", "subchoice.choice_DF6667B3F448404CB3633E11489011", "subchoice.choice_49000D5E16F4408491A14124779E5D" ] }, "step.step_63790B440279475BB9987A85D5E618", "content.p_9B2F9B992B2C4D4EA3857957D14AD9", { "subchoices.ul_E0278C3F02BE49078CD94E63CF11C4": [ "subchoice.choice_0AD8B8B6B2464A84A257AEC2614894", "subchoice.choice_C1C1074F8F02474ABB80CEC9A9916C", "subchoice.choice_6D215672758446998FD2CB2127570F", "subchoice.choice_781653EE1F8F46028F57AD82BB7006" ] }, "content.p_18DCE40A690A433480484DFE8D8387", "step.step_EE8D8998CE3A43829E8DE0094E1BE9" ] }, "content.p_fsmps_fspmc_troubleshoot_02238", "content.p_096340CC0F6C4891B6FEE177954D3E" ] } ] } ] }, "concept_wr_troubleshooting-16.10-en.json": { "title": "title_047A1CF57C194F27AA7475219C96D796", "title_047A1CF57C194F27AA7475219C96D796": "Policy Manager Web Reporting ", "shortdesc": "shortdesc_7185B53CFF9A4913B50CB57F39C23050", "shortdesc_7185B53CFF9A4913B50CB57F39C23050": "The locations of log and configuration files. ", "content.p_DF5655C2F6754CE8BC25A7055973F1": "The log files are located in: C:\\ProgramData\\WithSecure\\NS\\Policy Manager\\Policy Manager Server\\log", "content.p_4473733F005841098196BE41DC739B": "The configuration files are in: The HKLM\\SOFTWARE\\WithSecure\\Policy Manager\\Policy Manager Server\\ registry key", "content.p_AC5D7FEFD95F47D8916BC6FA007EE0": "See also the Policy Manager Server configuration files: C:\\Program Files\\WithSecure\\Policy Manager Server\\config", "desc": [ "content.p_DF5655C2F6754CE8BC25A7055973F1", "content.p_4473733F005841098196BE41DC739B", "content.p_AC5D7FEFD95F47D8916BC6FA007EE0" ] }, "concept_policy_distribution_troubleshooting-16.10-en.json": { "title": "title_44A90E284A41402E80D760670A5FD2B0", "title_44A90E284A41402E80D760670A5FD2B0": "Policy distribution", "shortdesc": "shortdesc_9D53ACF4DB7A4C5B9A02D8D94EA44C1B", "shortdesc_9D53ACF4DB7A4C5B9A02D8D94EA44C1B": "Information on error messages you may see during policy distribution, and for the reasons and solutions. ", "content.p_49EBC3D42D034B11A6778D3139CFC6": "", "content.dt_C68A727FAA2A4E2C983326255D7B6F": "\"<setting name>\" has value out of restriction ", "content.dt_50F649EB884E4F739F00B40EA91ABD": "\"<setting name>\" has invalid restriction ", "content.dt_0C1F834F609F44518EBA335B003E9E": "\"<setting name>\" has invalid value: \"<value>\" ", "content.p_E23EB5C357824F4D9B18B1664CB39A": "Reason 1:
", "content.p_11004E1D3ADB42D1B82BD3AAAACA12": "The value selected from a choice list is not among the choices on a sub-domain or host, too high or low values are specified as range restriction boundaries, or an empty choice list is specified.
", "content.p_F398A3F993614060BB65FFD2318C2A": "When a domain includes hosts that have different product versions installed, the MIB settings from the newest product version are used for editing the policy values. As result, policy distribution may fail on hosts that have older versions of the software installed, because the older versions do not support the new policy settings or values.
", "content.p_BF97E0EAA28C49DB8B0086F3B3BB9E": "Reason 2:
", "content.p_7A2EAE18D6364F4C91A496A50C59FE": "You entered an integer value that is outside of the range restrictions.
", "content.p_F82E2A10D9D94234B42A787C5ACDE5": "Solution:
", "content.p_95413A633FC146EA90B58F81705F31": "Divide the hosts into subdomains so that it is possible to set the new value for hosts with the new software installed, and to use some older policy values for other hosts. To do this:", "step.step_0EFC6985DDBC44549018A1631E6A07": "Group the hosts into subdomains based on the installed product version. For example, group hosts that have Client Security 6.x installed into one sub-domain, and hosts that have Client Security 7.x installed into another domain.", "step.step_2B9D27C090284765BBD846D4FA3A3B": "Set most of the settings on the root domain and create a sub-domains for exceptions. This is a good solution if you have only a few hosts with the older software versions installed.", "content.dt_34FFBE89699B4A65955D9D5148DEDB": "\"<setting name>\" is required but undefined ", "content.p_83252CCD22BC4911B2A1200BE86D49": "Reason:
", "content.p_B9C2929BD2C64EAAA0B908C97E7B51": "The setting is required but it is currently empty.
", "content.p_8677018E9B414E1EA48415AA266060": "Solution:
", "content.p_C17E205D0134456E8B86C72C15597E": "Enter a value or apply the Clear operation to re-inherit the value from parent domain or MIB. If the value is empty on several domain levels, you may need to apply the Clear operation several times.", "desc": [ { "dl.dl_8F1E9532D2814680BBD83DB06B2C12": [ { "dlentry.dlentry_48EB49CD57034A9F9A678753ECF7EF": [ "content.dt_C68A727FAA2A4E2C983326255D7B6F", "content.dt_50F649EB884E4F739F00B40EA91ABD", "content.dt_0C1F834F609F44518EBA335B003E9E", "content.p_E23EB5C357824F4D9B18B1664CB39A", "content.p_11004E1D3ADB42D1B82BD3AAAACA12", "content.p_F398A3F993614060BB65FFD2318C2A", "content.p_BF97E0EAA28C49DB8B0086F3B3BB9E", "content.p_7A2EAE18D6364F4C91A496A50C59FE", "content.p_F82E2A10D9D94234B42A787C5ACDE5", "content.p_95413A633FC146EA90B58F81705F31", { "steps.ol_48C8C945DBD54A40AA35A0E80D11FE": [ "step.step_0EFC6985DDBC44549018A1631E6A07", "step.step_2B9D27C090284765BBD846D4FA3A3B" ] } ] }, { "dlentry.dlentry_240848A308A4421590CA487E4EAD8D": [ "content.dt_34FFBE89699B4A65955D9D5148DEDB", "content.p_83252CCD22BC4911B2A1200BE86D49", "content.p_B9C2929BD2C64EAAA0B908C97E7B51", "content.p_8677018E9B414E1EA48415AA266060", "content.p_C17E205D0134456E8B86C72C15597E" ] } ] } ] }, "concept_faq-16.10-en.json": { "title": "title_1D55D0056CA34D4DAA58B7546DD7EED9", "title_1D55D0056CA34D4DAA58B7546DD7EED9": "Frequently asked questions for Linux versions", "shortdesc": "shortdesc_03E8C24541C04D4EBFC9FF85F66C5169", "shortdesc_03E8C24541C04D4EBFC9FF85F66C5169": "You can find answers to common problems on Linux platforms here. ", "content.p_1B89A40579A94A6B91E45AC5E96D73": "", "cell.entry_7A854E9609B340BE8D5D56FCF6FA39": "Question", "cell.entry_EBB95DBDD80B4B0FA069F78F9BDAAD": "Answer", "cell.entry_09E7DCE3206F405FBEB8E14AFDF04D": "Where are the log files and configuration files located in the Linux version?", "choice.choice_4DDBDBB970314F8A85014C0F0293BC": "RPM-based distributions: rpm -ql f-secure-<component_name>.", "choice.choice_815332419FDC4A138C3374F60FAE35": "Debian-based distributions: dpkg -L f-secure-<component_name>.", "content.p_faq_00000C_C5CC25B2": "You will find the log files in the following locations:", "choice.choice_AC9C4891773C48CC938487950983AD": "Policy Manager Console: /opt/f-secure/fspmc/lib/Administrator.error.log.", "choice.choice_0353678258174D5BBD5CBC7D08D88D": "Policy Manager Server: /var/opt/f-secure/fspms/logs.", "content.p_faq_00000D_FBA4205A": "You will find the configuration files in the following locations:", "choice.choice_3D1312FEB62244EFA2C049BA152002": "Policy Manager Console: /opt/f-secure/fspmc/lib/Administrator.properties.", "choice.choice_F0E6EF7AFF5F43148DAF63D15B023C": "Policy Manager Server: /etc/opt/f-secure/fspms/fspms.conf.", "cell.entry_EB37B09B755F4B4296145874C959BE": "You can list all files and their places by entering the following commands as a normal user:", "cell.entry_50360B61E7FD493693D535DDB9BA18": "Why are the files located so unusually?", "cell.entry_773EC8DABD13476297169F059E628E": "All files for Policy Manager have their own location according to the File Hierarchy Standard. For more information on FHS, go to Filesystem Hierarchy Standard.", "cell.entry_B81446340B1C4B6182D87FFE0B66D8": "Why doesn't Policy Manager Server start?", "cell.entry_38C81A7959F04B41AFA3B37BBBE8FF": "Make sure you have run the configuration script: /opt/f-secure/fspms/bin/fspms-config. You can also check that the ports configured for Policy Manager Server are active by logging in as root and running the netstat -lnpt command.", "cell.entry_22105843F5CC42A39AD5B1C69B7DD7": "How can I start, stop, restart or check the status of Policy Manager components?", "cell.entry_D3391FDAA2A64C9E843DE2E92D20D6": "Policy Manager Server: systemctl {start|stop|restart|status} fspms", "cell.entry_57CAB8B4A8404B77B8C89326FA1697": "How can I specify an HTTP proxy?", "cell.entry_AE787A7C343548A687B4E75126379E": "The HTTP proxy configuration file is located in the server's data folder /var/opt/f-secure/fspms/data/fspms.proxy.config. Remember to restart Policy Manager Server in order to take the new settings into use.", "cell.entry_494AEE6E94DB4811AC433A550F8C06": "How can I change the default ports (80 and 8080) in which Policy Manager Server listens for requests?", "cell.entry_297845CF84E0403C9BFC36B57E6868": "These ports are configured with the configuration script: /opt/f-secure/fspms/bin/fspms-config.", "cell.entry_9239D51C5719444C89E611F55724F3": "How can I change the default port (8081) in which Web Reporting listens for requests?", "cell.entry_685C6983455D4BE095B0B664E875F7": "The Web Reporting port is configured with the Policy Manager Server configuration script: /opt/f-secure/fspms/bin/fspms-config.", "cell.entry_92DDE2E9831E4DD0A69A46035A157F": "Can I set up my own schedule for updating WithSecure virus definitions?", "cell.entry_680D4162525548CCB058A7A79D2AD2": "The server refreshes metadata for the latest WithSecure updates every 10 minutes by default. To modify the default interval for refreshing the updates metadata, use the following additional Java argument: -DupdatePollingInterval=n, where n is minutes, any integer value >= 1.", "cell.entry_ADCF909EA1344563A4E417346B64BB": "How can I update WithSecure virus definitions manually?", "cell.entry_F180698C58F249F1A0008A2DE342D1": "As of version 13.00, Policy Manager Server does not support manual polling as used for Automatic Update Agent in previous versions. Restart Policy Manager Server to force a virus definitions check or customize the polling interval as described in the previous question.", "cell.entry_B664890C78FB4A3484AAC9FE223658": "How can I publish WithSecure virus definitions manually from the latest fsdbupdate package?", "cell.entry_122E22E786D7408EB4592BF43C2CFB": "As of version 13.00, Policy Manager Server does not support fsdbupdate.run as used for Automatic Update Agent in previous versions. For details on the new solution, see Updating malware definitions in isolated networks.", "cell.entry_235CF2C672684FADA27518A1C63158": "How can I stop downloading some or all 12.x updates?", "cell.entry_327ADC5E706F48AEAA04269C640B45": "The server automatically stops downloading all 12.x updates when all clients are upgraded to newer versions. You can modify the subscription list manually in the /opt/f-secure/fspms/config/channels.json configuration file.", "cell.entry_1A0630A091D044379BF66A1D2B800E": "Is there any diagnostic tool I can use?", "cell.entry_6981D9AF785A48E383297EFFAD3947": "Yes. Please use fsdiag to collect information about your system and related packages. When logged in as root, run:
/opt/f-secure/fspms/bin/fsdiag All relevant information will be stored into the fsdiag.tar.gz archive located in the current directory. You can then send that file to WithSecure Customer Support by request.", "cell.entry_07CC330ECA1948A08B461204B92B1C": "How can I install software to remote hosts from Policy Manager Console on Linux?", "cell.entry_9C6B390947194B888A768A5D0144B8": "You can export installation packages to JAR files and use the ilaunchr.exe tool to install software on hosts, for example by using logon scripts. Please follow the process defined in the manual. You will find the ilaunchr.exe tool in the /opt/f-secure/fspmc/bin directory.", "cell.entry_51EA8830803B4DC1A92083E26F28E6": "How can I configure Policy Manager for use in large environments?", "choice.choice_37DEC128CD294722982099A7898D1B": "Increase the Host polling interval values to 30 - 60 minutes in Policy Manager Console.", "choice.choice_05B100C8F5B847749F6D5482DB56A6": "Use Policy Manager Proxy installation(s) to minimize the load on Policy Manager Server caused by serving policies, database updates, software updates, and installation packages to clients.", "cell.entry_C2C45337F513400090B3FE513F3F06": "", "desc": [ { "table.table_E7FC035EEF9940AE83B3FADE649F54": [ { "thead.thead_DF4DB971C58A4094A70C26DB4538AF": [ "cell.entry_7A854E9609B340BE8D5D56FCF6FA39", "cell.entry_EBB95DBDD80B4B0FA069F78F9BDAAD" ] }, { "row.row_C45F7D239B254537BF55D8A7A5AE87": [ "cell.entry_09E7DCE3206F405FBEB8E14AFDF04D", "cell.entry_EB37B09B755F4B4296145874C959BE", { "choices.ul_AE52DEFF64E94AD69735385F38FECD": [ "choice.choice_4DDBDBB970314F8A85014C0F0293BC", "choice.choice_815332419FDC4A138C3374F60FAE35" ] }, "content.p_faq_00000C_C5CC25B2", { "choices.ul_08655A8FE3B14CDDAA6D2FA9543221": [ "choice.choice_AC9C4891773C48CC938487950983AD", "choice.choice_0353678258174D5BBD5CBC7D08D88D" ] }, "content.p_faq_00000D_FBA4205A", { "choices.ul_0AAB18BD48A847CA96B7CFCD3515D2": [ "choice.choice_3D1312FEB62244EFA2C049BA152002", "choice.choice_F0E6EF7AFF5F43148DAF63D15B023C" ] } ] }, { "row.row_ADDB4980BD304B039A74521F8000DB": [ "cell.entry_50360B61E7FD493693D535DDB9BA18", "cell.entry_773EC8DABD13476297169F059E628E" ] }, { "row.row_EB6474C74F0F44C6852F864742F69E": [ "cell.entry_B81446340B1C4B6182D87FFE0B66D8", "cell.entry_38C81A7959F04B41AFA3B37BBBE8FF" ] }, { "row.row_FD69D9AEDD7641BF9A82C27B9A72FF": [ "cell.entry_22105843F5CC42A39AD5B1C69B7DD7", "cell.entry_D3391FDAA2A64C9E843DE2E92D20D6" ] }, { "row.row_6F5B283CBA20426398C9694C842F7F": [ "cell.entry_57CAB8B4A8404B77B8C89326FA1697", "cell.entry_AE787A7C343548A687B4E75126379E" ] }, { "row.row_C63E362179104D54BE55722A813CBD": [ "cell.entry_494AEE6E94DB4811AC433A550F8C06", "cell.entry_297845CF84E0403C9BFC36B57E6868" ] }, { "row.row_57C292055D6A430B8321FB7754CA56": [ "cell.entry_9239D51C5719444C89E611F55724F3", "cell.entry_685C6983455D4BE095B0B664E875F7" ] }, { "row.row_864B12608B92486EA0DA654D760C15": [ "cell.entry_92DDE2E9831E4DD0A69A46035A157F", "cell.entry_680D4162525548CCB058A7A79D2AD2" ] }, { "row.row_F8DD32DF48F94C2D87E1C7538C9DBF": [ "cell.entry_ADCF909EA1344563A4E417346B64BB", "cell.entry_F180698C58F249F1A0008A2DE342D1" ] }, { "row.row_4C720DC5E31748AAAAC81E513E509D": [ "cell.entry_B664890C78FB4A3484AAC9FE223658", "cell.entry_122E22E786D7408EB4592BF43C2CFB" ] }, { "row.row_faq_000009_968A6EC9": [ "cell.entry_235CF2C672684FADA27518A1C63158", "cell.entry_327ADC5E706F48AEAA04269C640B45" ] }, { "row.row_F43EBC751E0840CE91AD39852918B6": [ "cell.entry_1A0630A091D044379BF66A1D2B800E", "cell.entry_6981D9AF785A48E383297EFFAD3947" ] }, { "row.row_94F4A3E630874CE2A4893D024D020A": [ "cell.entry_07CC330ECA1948A08B461204B92B1C", "cell.entry_9C6B390947194B888A768A5D0144B8" ] }, { "row.row_E2714D36432A4026AEE0F72CC3B00B": [ "cell.entry_51EA8830803B4DC1A92083E26F28E6", "cell.entry_C2C45337F513400090B3FE513F3F06", { "choices.ul_407C03F248304C03B5849F54F21D1D": [ "choice.choice_37DEC128CD294722982099A7898D1B", "choice.choice_05B100C8F5B847749F6D5482DB56A6" ] } ] } ] } ], "related": [ "concept_updates_isolated_networks-16.10-en" ] }, "pm_mysql_database-16.10-en.json": { "title": "title_27CCDFFDD3084F5D8EA8D4DC46BC298D", "title_27CCDFFDD3084F5D8EA8D4DC46BC298D": "Using Policy Manager with a MySQL database", "shortdesc": "shortdesc_00A0032160BC41CEBC3AA3B163A8E436", "shortdesc_00A0032160BC41CEBC3AA3B163A8E436": "You can use a MySQL database to store Policy Manager's data instead of the standard H2 database. ", "content.p_ECC410E76923419A88322009C1A37E": "If you want to use MySQL with Policy Manager, you need to have MySQL installed either on the same machine as Policy Manager or on a different node that it can access.", "content.p_2B64BC4563D74024B7CC8E4763ACC5": "You can migrate your Policy Manager database from H2 to MySQL by running the migration tool, which guides you through the required steps:", "choice.choice_3D3D82AA9E54435EB34AC4741B0F29": "On Windows, run C:\\Program Files\\WithSecure\\Policy Manager Server\\bin\\fspms-db-migrate-to-mysql.exe", "choice.choice_3B84FCE93B01439AA115C14A6F368F": "On Linux, run /opt/f-secure/fspms/bin/fspms-db-migrate-to-mysql", "content.p_1CBFBF3638B241318D8E7256DF8113": "Alternatively, you can follow the steps given under Migrating H2 data to MySQL using the command line to run the migration from the command line.", "content.p_1FBEA16F89E948F48183CB079F47D0": "Policy Manager supports Oracle MySQL 8.0, 8.4", "content.p_7FD7F117AE5D49219A10CA5E41B56A": "", "content.note_67B0F10D665C415E9ED20CA13BCC2C": "Note: If you are using MySQL version 8, you need to select Use Legacy Authentication Method on the Authentication Method page of the MySQL installer wizard.", "content.p_002D0CA7F4AE41FFAD379AA13387F1": "", "content.note_838B3A554C004E2EBCBAD7998E971B": "Note: TLS connections are currently not supported.", "desc": [ "content.p_ECC410E76923419A88322009C1A37E", "content.p_2B64BC4563D74024B7CC8E4763ACC5", { "choices.ul_E8ADE5B5ABC840F3A4E6F5CE645EBD": [ "choice.choice_3D3D82AA9E54435EB34AC4741B0F29", "choice.choice_3B84FCE93B01439AA115C14A6F368F" ] }, "content.p_1CBFBF3638B241318D8E7256DF8113", "content.p_1FBEA16F89E948F48183CB079F47D0", "content.note_67B0F10D665C415E9ED20CA13BCC2C", "content.note_838B3A554C004E2EBCBAD7998E971B" ] }, "task_migrating_h2_mysql-16.10-en.json": { "title": "title_B63DB23761AF49B6A754F8000506C091", "title_B63DB23761AF49B6A754F8000506C091": "Migrating H2 data to MySQL using the command line", "shortdesc": "shortdesc_B535A3C7ABD5428CB8CDCBA7840DF43F", "shortdesc_B535A3C7ABD5428CB8CDCBA7840DF43F": "Follow these steps to configure MySQL and migrate your Policy Manager data from H2 to MySQL from the command line. ", "content.p_058AE95FFB3143069FA5D4542798EF": "", "content.note_FF24956577E94B31967E52962C39C3": "Note: If your setup does not require you to run the migration on the command line, the easiest approach is to use the migration tool (run C:\\Program Files\\WithSecure\\Policy Manager Server\\bin\\fspms-db-migrate-to-mysql.exe on Windows, /opt/f-secure/fspms/bin/fspms-db-migrate-to-mysql on Linux) and follow the instructions given there.", "content.p_877415CB2652411CA17273DFBC660A": "", "content.note_FD0FA7AA061D4B299227CA8D4AEC70": "Note: Depending on the amount of data stored in the database, the migration process can take only a few minutes or up to an hour.", "step.step_FEAEBF8D85FF421DBABECF09E1DD33": "Stop the MySQL service.", "content.p_46E6AB80AF87472FB6F71563992A5F": "Change or add the following entry under the [mysqld] section: max_allowed_packet=100M", "content.note_6DB1683174F04E688115318718C087": "Note: For MySQL version 8, you also need to define the following property in the configuration file: default_authentication_plugin=mysql_native_password", "content.note_wxq_qhr_wgc": "Note: For MySQL version 8.4 you need to add/modify mysql_native_password=ON in the MySQL config file. Once it's done you need to restart MySQL service.", "step.step_C37D8C11980342DC92B91E3EA1CEDB": "Edit the my.ini configuration file.", "step.step_4B9B7ECC31284E54AA9187F5CC26F2": "Start the MySQL service.", "content.p_7916CD14DF724893B2450319F31096": "<schema>: replace this with the database name to be used by Policy Manager to store all its data. The name can be anything distinguishable by the administrator and accepted as a valid database name by MySQL, for example fspms or policy_manager.", "substep.substep_7BE4D9DB1B2F48418F42618BDEF2B4": "CREATE SCHEMA <schema>;", "content.p_62A6229C7B924F0E9537606BD1E557": "<pm_all>: replace this with the name of the MySQL user, which is used by Policy Manager to initialize the database schema, such as creating all the necessary tables. The user name can be any valid name accepted by MySQL.", "content.p_57C8482DA94A4120892B6EC09CDD70": "<all_password>: replace this with the password for the <pm_all> MySQL user.", "substep.substep_04CFBCB30BFF46BFA962EBBF92223F": "CREATE USER <pm_all> IDENTIFIED WITH mysql_native_password BY '<all_password>';", "content.p_847ED420B286408CB13CA3CAEF44CA": "<pm_rw>: replace this with the name of the MySQL user, which is used by Policy Manager to access the database while running. The user name can be any valid name accepted by MySQL.", "content.p_23BAC4CFF5FF4F3D9F8B42DDCB6A45": "<rw_password>: replace this with the password for the <pm_rw> MySQL user.", "substep.substep_7B643B5EEA3F4C0FBBC9C1D1265921": "CREATE USER <pm_rw> IDENTIFIED WITH mysql_native_password BY '<rw_password>';", "substep.substep_6F567CD21560426FB17B80EE7C806E": "GRANT ALTER, ALTER ROUTINE, CREATE, CREATE ROUTINE, CREATE TEMPORARY TABLES, CREATE VIEW, DELETE, DROP, EXECUTE, INDEX, INSERT, LOCK TABLES, REFERENCES, SELECT, UPDATE ON <schema>.* TO <pm_all>@'%';", "substep.substep_59BA14013C314D258209BE49749A8B": "GRANT CREATE TEMPORARY TABLES, DELETE, EXECUTE, INSERT, LOCK TABLES, SELECT, UPDATE ON <schema>.* TO <pm_rw>@'%';", "substep.substep_50518458B1CB4063B2F2F92E50FBC4": "GRANT SUPER ON *.* TO <pm_all>@'%';", "step.step_47CFA1A59F8C482384A72DC8E4A24D": "Open the MySQL Command Line Client and run the following commands to create the database schema and users:", "step.step_0B44FCA6DC9D4F02B11046DD48BDB5": "Stop the Policy Manager service.", "subchoice.choice_9BC6253951524CC8B30A595A785135": "On Windows, run C:\\Program Files\\WithSecure\\Policy Manager\\Policy Manager Server\\bin\\fspms-db-migrate-to-mysql.exe", "subchoice.choice_8E5C574C4C2B4F5C97275B153AD125": "On Linux, run /opt/f-secure/fspms/bin/fspms-db-migrate-to-mysql", "content.note_6B017B09A3504D4D876ECCAE3681FE": "Note: If you are running the migration on Linux in headless mode, then you need to configure the MySQL configuration parameters manually using the /var/opt/f-secure/fspms/data/fspms.db.config config file.

active.db=mysql
mysql.type=mysql
mysql.host=<MySQL server address>
mysql.port=<MySQL server port>
mysql.schema=<schema>
mysql.init.user=<pm_all>
mysql.init.password=<all_password>
mysql.user=<pm_rw>
mysql.password=<rw_password>

", "step.step_2C3485ED920D4088AC938E5C68581E": "Run the following command to start the migration:", "content.p_1CEBEEC4FACA48C5B9EC339E793413": "If your MySQL setup supports replication and you want to take it into use, you need to grant additional permissions for the Policy Manager database users by running the following commands in the MySQL Command Line Client:", "choice.choice_BC60934AB72E4FD0B5B3FE72FE0105": "GRANT REPLICATION CLIENT, SUPER ON *.* TO <pm_all>@'%';", "choice.choice_4354BAB6C9B9401DB033C537F121D5": "GRANT REPLICATION CLIENT ON *.* TO <pm_rw>@'%';", "content.p_0DBF4C17E1EA42978AC3B8DF3DB7F9": "The SUPER privilege is required for the user changing the schema in order to replicate the stored routines.", "content.p_1A1C7CDDD724458CBAF83F3AB32C3A": "", "content.note_4CB1C21B05CE40D997820FB7C4B9EE": "Note: If binlog is enabled, only row-level replication is supported.", "desc": [ "content.note_FF24956577E94B31967E52962C39C3", "content.note_FD0FA7AA061D4B299227CA8D4AEC70", { "steps.steps_5F3B75C3D8A44C26B93D0A10E13136": [ "step.step_FEAEBF8D85FF421DBABECF09E1DD33", "step.step_C37D8C11980342DC92B91E3EA1CEDB", "content.p_46E6AB80AF87472FB6F71563992A5F", "content.note_6DB1683174F04E688115318718C087", "content.note_wxq_qhr_wgc", "step.step_4B9B7ECC31284E54AA9187F5CC26F2", "step.step_47CFA1A59F8C482384A72DC8E4A24D", { "substeps.substepsalpha_6D2A0D8B89D148D98E47AE7A8D8775": [ "substep.substep_7BE4D9DB1B2F48418F42618BDEF2B4", "content.p_7916CD14DF724893B2450319F31096", "substep.substep_04CFBCB30BFF46BFA962EBBF92223F", "content.p_62A6229C7B924F0E9537606BD1E557", "content.p_57C8482DA94A4120892B6EC09CDD70", "substep.substep_7B643B5EEA3F4C0FBBC9C1D1265921", "content.p_847ED420B286408CB13CA3CAEF44CA", "content.p_23BAC4CFF5FF4F3D9F8B42DDCB6A45", "substep.substep_6F567CD21560426FB17B80EE7C806E", "substep.substep_59BA14013C314D258209BE49749A8B", "substep.substep_50518458B1CB4063B2F2F92E50FBC4" ] }, "step.step_0B44FCA6DC9D4F02B11046DD48BDB5", "step.step_2C3485ED920D4088AC938E5C68581E", { "subchoices.choices_6A1230E4F0A14B0C9DC479CEEAEFE9": [ "subchoice.choice_9BC6253951524CC8B30A595A785135", "subchoice.choice_8E5C574C4C2B4F5C97275B153AD125" ] }, "content.note_6B017B09A3504D4D876ECCAE3681FE" ] }, "content.p_1CEBEEC4FACA48C5B9EC339E793413", { "choices.ul_E25A3D202B8944D08F25F89864C218": [ "choice.choice_BC60934AB72E4FD0B5B3FE72FE0105", "choice.choice_4354BAB6C9B9401DB033C537F121D5" ] }, "content.p_0DBF4C17E1EA42978AC3B8DF3DB7F9", "content.note_4CB1C21B05CE40D997820FB7C4B9EE" ] }, "licenseterms-16.10-en.json": { "title": "title_BAFD082F00EB436CB9E5E7698B1FF86C", "title_BAFD082F00EB436CB9E5E7698B1FF86C": "License terms" }, "withsecure_license_terms-16.10-en.json": { "title": "title_A3C78965EB1E45EBAB9DC427D3B82AED", "title_A3C78965EB1E45EBAB9DC427D3B82AED": "WithSecure license terms", "shortdesc": "shortdesc_D0FA9244844C4B6F965E225754E2D6EC", "shortdesc_D0FA9244844C4B6F965E225754E2D6EC": "WithSecure license terms are included in the software setup and available at WithSecure site. You must read and accept them before you can install and use the software." }, "third_party_license_terms-16.10-en.json": { "title": "title_6DAEF09021A64465BBD6313818FD14F0", "title_6DAEF09021A64465BBD6313818FD14F0": "Third-party license terms ", "shortdesc": "shortdesc_91D4C735D591467C919FF25ECF4083A5", "shortdesc_91D4C735D591467C919FF25ECF4083A5": "This software includes and uses third-party code licensed under the following licenses." }, "oracle_binary_code-16.10-en.json": { "title": "title_68976EEF1B5842D78B2ABB6E719E23C5", "title_68976EEF1B5842D78B2ABB6E719E23C5": "Oracle Binary Code License Agreement for the Java SE Platform Products and JavaFX ", "content.p_D4124331704643989C5D0DD2963434": "ORACLE AMERICA, INC. (\"ORACLE\"), FOR AND ON BEHALF OF ITSELF AND ITS SUBSIDIARIES AND AFFILIATES UNDER COMMON CONTROL, IS WILLING TO LICENSE THE SOFTWARE TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS CONTAINED IN THIS BINARY CODE LICENSE AGREEMENT AND SUPPLEMENTAL LICENSE TERMS (COLLECTIVELY \"AGREEMENT\"). PLEASE READ THE AGREEMENT CAREFULLY. BY SELECTING THE \"ACCEPT LICENSE AGREEMENT\" (OR THE EQUIVALENT) BUTTON AND/OR BY USING THE SOFTWARE YOU ACKNOWLEDGE THAT YOU HAVE READ THE TERMS AND AGREE TO THEM. IF YOU ARE AGREEING TO THESE TERMS ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT THAT YOU HAVE THE LEGAL AUTHORITY TO BIND THE LEGAL ENTITY TO THESE TERMS. IF YOU DO NOT HAVE SUCH AUTHORITY, OR IF YOU DO NOT WISH TO BE BOUND BY THE TERMS, THEN SELECT THE \"DECLINE LICENSE AGREEMENT\" (OR THE EQUIVALENT) BUTTON AND YOU MUST NOT USE THE SOFTWARE ON THIS SITE OR ANY OTHER MEDIA ON WHICH THE SOFTWARE IS CONTAINED.", "content.p_3E0934EC9B9C4CE58FAFC2AF735D40": "1. DEFINITIONS. \"Software\" means the software identified above in binary form that you selected for download, install or use (in the version You selected for download, install or use) from Oracle or its authorized licensees and/or those portions of such software produced by jlink as output using a Program’s code, when such output is in unmodified form in combination, and for sole use with, that Program, as well as any other machine readable materials (including, but not limited to, libraries, source files, header files, and data files), any updates or error corrections provided by Oracle, and any user manuals, programming guides and other documentation provided to you by Oracle under this Agreement. The Java Linker (jlink) is available with Java 9 and later versions. \"General Purpose Desktop Computers and Servers\" means computers, including desktop and laptop computers, or servers, used for general computing functions under end user control (such as but not specifically limited to email, general purpose Internet browsing, and office suite productivity tools). The use of Software in systems and solutions that provide dedicated functionality (other than as mentioned above) or designed for use in embedded or function-specific software applications, for example but not limited to: Software embedded in or bundled with industrial control systems, wireless mobile telephones, wireless handheld devices, kiosks, TV/STB, Blu-ray Disc devices, telematics and network control switching equipment, printers and storage management systems, and other related systems are excluded from this definition and not licensed under this Agreement. \"Programs\" means (a) Java technology applets and applications intended to run on the Java Platform, Standard Edition platform on Java-enabled General Purpose Desktop Computers and Servers; and (b) JavaFX technology applications intended to run on the JavaFX Runtime on JavaFX-enabled General Purpose Desktop Computers and Servers. “Java SE LIUM” means the Licensing Information User Manual – Oracle Java SE and Oracle Java Embedded Products Document accessible at http://www.oracle.com/technetwork/java/javase/documentation/index.html. “Commercial Features” means those features that are identified as such in the Java SE LIUM under the “Description of Product Editions and Permitted Features” section.", "content.p_C3E8F35C95A44FA88D9D5F43A8763B": "2. LICENSE TO USE. Subject to the terms and conditions of this Agreement including, but not limited to, the Java Technology Restrictions of the Supplemental License Terms, Oracle grants you a non-exclusive, non-transferable, limited license without license fees to reproduce and use internally the Software complete and unmodified for the sole purpose of running Programs. THE LICENSE SET FORTH IN THIS SECTION 2 DOES NOT EXTEND TO THE COMMERCIAL FEATURES. YOUR RIGHTS AND OBLIGATIONS RELATED TO THE COMMERCIAL FEATURES ARE AS SET FORTH IN THE SUPPLEMENTAL TERMS ALONG WITH ADDITIONAL LICENSES FOR DEVELOPERS AND PUBLISHERS.", "content.p_5406D3C2D20F49909F05F3A879E807": "3. RESTRICTIONS. Software is copyrighted. Title to Software and all associated intellectual property rights is retained by Oracle and/or its licensors. Unless enforcement is prohibited by applicable law, you may not modify, decompile, or reverse engineer Software. You acknowledge that the Software is developed for general use in a variety of information management applications; it is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use the Software in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle disclaims any express or implied warranty of fitness for such uses. No right, title or interest in or to any trademark, service mark, logo or trade name of Oracle or its licensors is granted under this Agreement. Additional restrictions for developers and/or publishers licenses are set forth in the Supplemental License Terms.", "content.p_F1251ED979DD4AD1A26EB1523FE64B": "4. DISCLAIMER OF WARRANTY. THE SOFTWARE IS PROVIDED \"AS IS\" WITHOUT WARRANTY OF ANY KIND. ORACLE FURTHER DISCLAIMS ALL WARRANTIES, EXPRESS AND IMPLIED, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NONINFRINGEMENT.", "content.p_3C7D9AE5076F4B1198597D50BC1CF2": "5. LIMITATION OF LIABILITY. IN NO EVENT SHALL ORACLE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE OR CONSEQUENTIAL DAMAGES, OR DAMAGES FOR LOSS OF PROFITS, REVENUE, DATA OR DATA USE, INCURRED BY YOU OR ANY THIRD PARTY, WHETHER IN AN ACTION IN CONTRACT OR TORT, EVEN IF ORACLE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. ORACLE'S ENTIRE LIABILITY FOR DAMAGES HEREUNDER SHALL IN NO EVENT EXCEED ONE THOUSAND DOLLARS (U. S. $1,000).", "content.p_B8AC2B0ACA304F5F9214AF825E46AC": "6. TERMINATION. This Agreement is effective until terminated. You may terminate this Agreement at any time by destroying all copies of Software. This Agreement will terminate immediately without notice from Oracle if you fail to comply with any provision of this Agreement. Either party may terminate this Agreement immediately should any Software become, or in either party's opinion be likely to become, the subject of a claim of infringement of any intellectual property right. Upon termination, you must destroy all copies of Software.", "content.p_ACD0CC76BD6C4E00AB6BA8C904F55A": "7. EXPORT REGULATIONS. You agree that U.S. export control laws and other applicable export and import laws govern your use of the Software, including technical data; additional information can be found on Oracle's Global Trade Compliance web site (http://www.oracle.com/us/products/export). You agree that neither the Software nor any direct product thereof will be exported, directly, or indirectly, in violation of these laws, or will be used for any purpose prohibited by these laws including, without limitation, nuclear, chemical, or biological weapons proliferation.", "content.p_BDD16F5F29874E458E3B87102ED579": "8. TRADEMARKS AND LOGOS. You acknowledge and agree as between you and Oracle that Oracle owns the ORACLE and JAVA trademarks and all ORACLE- and JAVA-related trademarks, service marks, logos and other brand designations (\"Oracle Marks\"), and you agree to comply with the Third Party Usage Guidelines for Oracle Trademarks currently located at http://www.oracle.com/us/legal/third-party-trademarks/index.html. Any use you make of the Oracle Marks inures to Oracle's benefit.", "content.p_46A24686BB6D443AA40A3764E2D82A": "9. U.S. GOVERNMENT LICENSE RIGHTS. If Software is being acquired by or on behalf of the U.S. Government or by a U.S. Government prime contractor or subcontractor (at any tier), then the Government's rights in Software and accompanying documentation shall be only those set forth in this Agreement.", "content.p_E613F490A78A4261B441FBA8FEA862": "10. GOVERNING LAW. This agreement is governed by the substantive and procedural laws of California. You and Oracle agree to submit to the exclusive jurisdiction of, and venue in, the courts of San Francisco, or Santa Clara counties in California in any dispute arising out of or relating to this agreement.", "content.p_12C34FECAC0D4B53A0157A91BB72FB": "11. SEVERABILITY. If any provision of this Agreement is held to be unenforceable, this Agreement will remain in effect with the provision omitted, unless omission would frustrate the intent of the parties, in which case this Agreement will immediately terminate.", "content.p_CFBB381F7EEA42E7BA299BA7675AEA": "12. INTEGRATION. This Agreement is the entire agreement between you and Oracle relating to its subject matter. It supersedes all prior or contemporaneous oral or written communications, proposals, representations and warranties and prevails over any conflicting or additional terms of any quote, order, acknowledgment, or other communication between the parties relating to its subject matter during the term of this Agreement. No modification of this Agreement will be binding, unless in writing and signed by an authorized representative of each party.", "content.p_AED7AF38ED194259953D303D58E745": "SUPPLEMENTAL LICENSE TERMS", "content.p_E530AE3B61DF44139CC97A0AD9DA33": "These Supplemental License Terms add to or modify the terms of the Binary Code License Agreement. Capitalized terms not defined in these Supplemental Terms shall have the same meanings ascribed to them in the Binary Code License Agreement. These Supplemental Terms shall supersede any inconsistent or conflicting terms in the Binary Code License Agreement, or in any license contained within the Software.", "content.p_37CAC6CD0F154CE98A1C1ED94F6080": "A. COMMERCIAL FEATURES. You may not use the Commercial Features for running Programs, Java applets or applications in your internal business operations or for any commercial or production purpose, or for any purpose other than as set forth in Sections B, C, D and E of these Supplemental Terms. If You want to use the Commercial Features for any purpose other than as permitted in this Agreement, You must obtain a separate license from Oracle.", "content.p_EAAD59305E6D461BA631235AC2F697": "B. SOFTWARE INTERNAL USE FOR DEVELOPMENT LICENSE GRANT. Subject to the terms and conditions of this Agreement and restrictions and exceptions set forth in the Java SE LIUM incorporated herein by reference, including, but not limited to the Java Technology Restrictions of these Supplemental Terms, Oracle grants you a non-exclusive, non-transferable, limited license without fees to reproduce internally and use internally the Software complete and unmodified for the purpose of designing, developing, and testing your Programs.", "content.p_87C5E592BBD84BC186F66D512245E2": "C. LICENSE TO DISTRIBUTE SOFTWARE. Subject to the terms and conditions of this Agreement and restrictions and exceptions set forth in the Java SE LIUM, including, but not limited to the Java Technology Restrictions and Limitations on Redistribution of these Supplemental Terms, Oracle grants you a non-exclusive, non-transferable, limited license without fees to reproduce and distribute the Software, provided that (i) you distribute the Software complete and unmodified and only bundled as part of, and for the sole purpose of running, your Programs, (ii) the Programs add significant and primary functionality to the Software, (iii) you do not distribute additional software intended to replace any component(s) of the Software, (iv) you do not remove or alter any proprietary legends or notices contained in the Software, (v) you only distribute the Software subject to a license agreement that: (a) is a complete, unmodified reproduction of this Agreement; or (b) protects Oracle's interests consistent with the terms contained in this Agreement and that includes the notice set forth in Section H, and (vi) you agree to defend and indemnify Oracle and its licensors from and against any damages, costs, liabilities, settlement amounts and/or expenses (including attorneys' fees) incurred in connection with any claim, lawsuit or action by any third party that arises or results from the use or distribution of any and all Programs and/or Software. The license set forth in this Section C does not extend to the Software identified in Section G.", "content.p_DBF813A4784B4D9EBCA4559413F77E": "D. LICENSE TO DISTRIBUTE REDISTRIBUTABLES. Subject to the terms and conditions of this Agreement and restrictions and exceptions set forth in the Java SE LIUM, including but not limited to the Java Technology Restrictions and Limitations on Redistribution of these Supplemental Terms, Oracle grants you a non-exclusive, non-transferable, limited license without fees to reproduce and distribute those files specifically identified as redistributable in the Java SE LIUM (\"Redistributables\") provided that: (i) you distribute the Redistributables complete and unmodified, and only bundled as part of Programs, (ii) the Programs add significant and primary functionality to the Redistributables, (iii) you do not distribute additional software intended to supersede any component(s) of the Redistributables (unless otherwise specified in the applicable Java SE LIUM), (iv) you do not remove or alter any proprietary legends or notices contained in or on the Redistributables, (v) you only distribute the Redistributables pursuant to a license agreement that: (a) is a complete, unmodified reproduction of this Agreement; or (b) protects Oracle's interests consistent with the terms contained in the Agreement and includes the notice set forth in Section H, (vi) you agree to defend and indemnify Oracle and its licensors from and against any damages, costs, liabilities, settlement amounts and/or expenses (including attorneys' fees) incurred in connection with any claim, lawsuit or action by any third party that arises or results from the use or distribution of any and all Programs and/or Software. The license set forth in this Section D does not extend to the Software identified in Section G.", "content.p_71E7A790D59B4498831078B9D7242F": "E. DISTRIBUTION BY PUBLISHERS. This section pertains to your distribution of the JavaTM SE Development Kit Software (“JDK”) with your printed book or magazine (as those terms are commonly used in the industry) relating to Java technology (\"Publication\"). Subject to and conditioned upon your compliance with the restrictions and obligations contained in the Agreement, Oracle hereby grants to you a non-exclusive, nontransferable limited right to reproduce complete and unmodified copies of the JDK on electronic media (the \"Media\") for the sole purpose of inclusion and distribution with your Publication(s), subject to the following terms: (i) You may not distribute the JDK on a stand-alone basis; it must be distributed with your Publication(s); (ii) You are responsible for downloading the JDK from the applicable Oracle web site; (iii) You must refer to the JDK as JavaTM SE Development Kit; (iv) The JDK must be reproduced in its entirety and without any modification whatsoever (including with respect to all proprietary notices) and distributed with your Publication subject to a license agreement that is a complete, unmodified reproduction of this Agreement; (v) The Media label shall include the following information: “Copyright [YEAR], Oracle America, Inc. All rights reserved. Use is subject to license terms. ORACLE and JAVA trademarks and all ORACLE- and JAVA-related trademarks, service marks, logos and other brand designations are trademarks or registered trademarks of Oracle in the U.S. and other countries.” [YEAR] is the year of Oracle's release of the Software; the year information can typically be found in the Software’s “About” box or screen. This information must be placed on the Media label in such a manner as to only apply to the JDK; (vi) You must clearly identify the JDK as Oracle's product on the Media holder or Media label, and you may not state or imply that Oracle is responsible for any third-party software contained on the Media; (vii) You may not include any third party software on the Media which is intended to be a replacement or substitute for the JDK; (viii) You agree to defend and indemnify Oracle and its licensors from and against any damages, costs, liabilities, settlement amounts and/or expenses (including attorneys' fees) incurred in connection with any claim, lawsuit or action by any third party that arises or results from the use or distribution of the JDK and/or the Publication; ; and (ix) You shall provide Oracle with a written notice for each Publication; such notice shall include the following information: (1) title of Publication, (2) author(s), (3) date of Publication, and (4) ISBN or ISSN numbers. Such notice shall be sent to Oracle America, Inc., 500 Oracle Parkway, Redwood Shores, California 94065 U.S.A , Attention: General Counsel.", "content.p_936776BE43F24E2C8A8C2DD9826721": "F. JAVA TECHNOLOGY RESTRICTIONS. You may not create, modify, or change the behavior of, or authorize your licensees to create, modify, or change the behavior of, classes, interfaces, or subpackages that are in any way identified as \"java\", \"javax\", \"sun\", “oracle” or similar convention as specified by Oracle in any naming convention designation.", "content.p_CEF05652BD0A456B9DBD139A718F74": "G. LIMITATIONS ON REDISTRIBUTION. You may not redistribute or otherwise transfer patches, bug fixes or updates made available by Oracle through Oracle Premier Support, including those made available under Oracle's Java SE Support program.", "content.p_385C28CFFAEB4503B29469F0A5034C": "H. COMMERCIAL FEATURES NOTICE. For purpose of complying with Supplemental Term Section C.(v)(b) and D.(v)(b), your license agreement shall include the following notice, where the notice is displayed in a manner that anyone using the Software will see the notice:", "content.p_6012280643954FF8BEA7B7200A49A3": "Use of the Commercial Features for any commercial or production purpose requires a separate license from Oracle. “Commercial Features” means those features that are identified as such in the Licensing Information User Manual – Oracle Java SE and Oracle Java Embedded Products Document, accessible at http://www.oracle.com/technetwork/java/javase/documentation/index.html, under the “Description of Product Editions and Permitted Features” section.", "content.p_769F407910254CD1A57B77773F748B": "I. SOURCE CODE. Software may contain source code that, unless expressly licensed for other purposes, is provided solely for reference purposes pursuant to the terms of this Agreement. Source code may not be redistributed unless expressly provided for in this Agreement.", "content.p_EED9ADB5E1F94D8B9191AF1379986A": "J. THIRD PARTY CODE. Additional copyright notices and license terms applicable to portions of the Software are set forth in the Java SE LIUM accessible at http://www.oracle.com/technetwork/java/javase/documentation/index.html. In addition to any terms and conditions of any third party opensource/freeware license identified in the Java SE LIUM, the disclaimer of warranty and limitation of liability provisions in paragraphs 4 and 5 of the Binary Code License Agreement shall apply to all Software in this distribution.", "content.p_77406F3A42CA4FCE998064509A56A8": "K. TERMINATION FOR INFRINGEMENT. Either party may terminate this Agreement immediately should any Software become, or in either party's opinion be likely to become, the subject of a claim of infringement of any intellectual property right.", "content.p_AEB5BF1C8D14454580597BE7EEC6AA": "L. INSTALLATION AND AUTO-UPDATE. The Software's installation and auto-update processes transmit a limited amount of data to Oracle (or its service provider) about those specific processes to help Oracle understand and optimize them. Oracle does not associate the data with personally identifiable information. You can find more information about the data Oracle collects as a result of your Software download at http://www.oracle.com/technetwork/java/javase/documentation/index.html.", "content.p_121B1D74CAC8446CA13A02896521C2": "For inquiries please contact: Oracle America, Inc., 500 Oracle Parkway, Redwood Shores, California 94065, USA.", "desc": [ "content.p_D4124331704643989C5D0DD2963434", "content.p_3E0934EC9B9C4CE58FAFC2AF735D40", "content.p_C3E8F35C95A44FA88D9D5F43A8763B", "content.p_5406D3C2D20F49909F05F3A879E807", "content.p_F1251ED979DD4AD1A26EB1523FE64B", "content.p_3C7D9AE5076F4B1198597D50BC1CF2", "content.p_B8AC2B0ACA304F5F9214AF825E46AC", "content.p_ACD0CC76BD6C4E00AB6BA8C904F55A", "content.p_BDD16F5F29874E458E3B87102ED579", "content.p_46A24686BB6D443AA40A3764E2D82A", "content.p_E613F490A78A4261B441FBA8FEA862", "content.p_12C34FECAC0D4B53A0157A91BB72FB", "content.p_CFBB381F7EEA42E7BA299BA7675AEA", "content.p_AED7AF38ED194259953D303D58E745", "content.p_E530AE3B61DF44139CC97A0AD9DA33", "content.p_37CAC6CD0F154CE98A1C1ED94F6080", "content.p_EAAD59305E6D461BA631235AC2F697", "content.p_87C5E592BBD84BC186F66D512245E2", "content.p_DBF813A4784B4D9EBCA4559413F77E", "content.p_71E7A790D59B4498831078B9D7242F", "content.p_936776BE43F24E2C8A8C2DD9826721", "content.p_CEF05652BD0A456B9DBD139A718F74", "content.p_385C28CFFAEB4503B29469F0A5034C", "content.p_6012280643954FF8BEA7B7200A49A3", "content.p_769F407910254CD1A57B77773F748B", "content.p_EED9ADB5E1F94D8B9191AF1379986A", "content.p_77406F3A42CA4FCE998064509A56A8", "content.p_AEB5BF1C8D14454580597BE7EEC6AA", "content.p_121B1D74CAC8446CA13A02896521C2" ] }, "apache_software_license_version_2_0-16.10-en.json": { "title": "title_5683C0A49BFC49309BD33D96E4F0D2AF", "title_5683C0A49BFC49309BD33D96E4F0D2AF": "Apache Software License - Version 2.0 ", "content.p_79D581E49F7B45BD91B9C451FAF534": "See https://www.apache.org/licenses/LICENSE-2.0", "desc": [ "content.p_79D581E49F7B45BD91B9C451FAF534" ] }, "eclipse_public_license_v_1_0-16.10-en.json": { "title": "title_C335E8E485374B5187ECA75D03D6FF47", "title_C335E8E485374B5187ECA75D03D6FF47": "Eclipse Public License - v 1.0 ", "content.p_1AD16FC2C3474A5C9AF6F0FCA69CF4": "See https://www.eclipse.org/legal/epl-v10.html", "desc": [ "content.p_1AD16FC2C3474A5C9AF6F0FCA69CF4" ] }, "h2_license_version_1_0-16.10-en.json": { "title": "title_EE82A69A6B434A6091E4846CA59FB0B8", "title_EE82A69A6B434A6091E4846CA59FB0B8": "H2 License - Version 1.0 ", "content.p_BE5CE70117DD4560800244AA20D835": "See http://www.h2database.com/html/license.html", "desc": [ "content.p_BE5CE70117DD4560800244AA20D835" ] }, "common_development_and_distribution_license_cddl_version_1_0-16.10-en.json": { "title": "title_42B9EF7D8C644FE292FD91206F6304B6", "title_42B9EF7D8C644FE292FD91206F6304B6": "Common Development and Distribution License (CDDL) Version 1.0 ", "content.p_DFE4A7414ACF42A18B46B44865067E": "See https://opensource.org/licenses/CDDL-1.0", "desc": [ "content.p_DFE4A7414ACF42A18B46B44865067E" ] }, "spring_asm_copyright_notice_and_permissions-16.10-en.json": { "title": "title_53BCF246418247109364E97FB73F1F66", "title_53BCF246418247109364E97FB73F1F66": "spring-asm Copyright Notice and Permissions ", "content.p_B832C07154FF4FEEAF7677775E6FF8": "See https://asm.ow2.io/license.html", "desc": [ "content.p_B832C07154FF4FEEAF7677775E6FF8" ] }, "slf4j_copyright_notice_and_permissions-16.10-en.json": { "title": "title_6A71BBAB8AF14B11BFC3C7DBDAB254FF", "title_6A71BBAB8AF14B11BFC3C7DBDAB254FF": "SLF4J Copyright Notice and Permissions ", "content.p_E29271D64A754CE7A37E09CAAD24CC": "See https://www.slf4j.org/license.html", "desc": [ "content.p_E29271D64A754CE7A37E09CAAD24CC" ] }, "liberica_jdk_end_user_license_agreement-16.10-en.json": { "title": "title_BBC94CE982FE486B835FF7E66253EA66", "title_BBC94CE982FE486B835FF7E66253EA66": "Liberica JDK End User License Agreement ", "content.p_2B6478EEC6E34B22AE7608053E8598": "THIS EULA IS A BINDING AGREEMENT BETWEEN YOU AND BELLSOFT FOR THE USE OF LIBERICA JDK (SOFTWARE). BY USING THE SOFTWARE YOU ACKNOWLEDGE THAT YOU HAVE READ THE TERMS OF THIS EULA AND AGREE TO THEM. IF YOU ARE AGREEING TO THESE TERMS ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT THAT YOU HAVE THE LEGAL AUTHORITY TO BIND THE LEGAL ENTITY TO THESE TERMS.", "content.p_9E2C8B4B2BC5468D9BC2F923D288A3": "https://bell-sw.com/third_party_licenses/", "step.step_A3F6383E1B394565B3E4EEB92C4D8A": "Liberica JDK is copyrighted software based on OpenJDK and is 100% Open Source Software. Notwithstanding anything to the contrary stated in this EULA, installation or use of Open Source Software shall be subject to the following license terms in its applicable version and the Terms and Conditions of Open Source Software License and Third Party Licenses which prevail over this EULA: https://openjdk.java.net/legal/gplv2+ce.html", "step.step_D2E237B9E55445BDB6A294EB82D774": "BELLSOFT reserves the right to modify this EULA at any time and without prior notice by publishing the most current version of the EULA on the following website: https://bell-sw.com/liberica_eula/.", "step.step_4AFB5AFD1306494696177216406451": "BELLSOFT does not offer support or maintenance for the SOFTWARE under this EULA (unless you have entered into a separate written agreement for such support, in which case such separate agreement shall apply).", "step.step_04D03D0F73ED4C91B63CBF8F820294": "You agree to indemnify and hold BELLSOFT harmless, from and against any and all claims, liabilities, damages, losses or expenses, including reasonable attorneys' fees and costs, due to or arising out of Your use of SOFTWARE, your violation of the terms of this EULA or any applicable Open Source License or Your violation or infringement of any third party rights.", "step.step_BDF2F201F8A64656B3BAD03AD3ED70": "THE SOFTWARE IS PROVIDED AS IS WITHOUT ANY WARRANTY OF ANY KIND EXPRESS OR IMPLIED: BELLSOFT HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS WITH RESPECT TO THE SOFTWARE EITHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES AND/OR CONDITIONS OF MERCHANTABILITY, OF SATISFACTORY QUALITY, OF FITNESS FOR A PARTICULAR PURPOSE, OF ACCURACY, OF QUIET ENJOYMENT, AND NON-INFRINGEMENT OF THIRD PARTY RIGHTS. BELLSOFT DOES NOT WARRANT THAT THE FUNCTIONS CONTAINED IN, THE SOFTWARE WILL MEET YOUR REQUIREMENTS, THAT THE OPERATION OF THE SOFTWARE WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT DEFECTS IN THE SOFTWARE WILL BE CORRECTED. NO ORAL OR WRITTEN INFORMATION OR ADVICE GIVEN BY BELLSOFT OR ITS AUTHORIZED REPRESENTATIVE SHALL CREATE A WARRANTY. SHOULD THE SOFTWARE PROVE DEFECTIVE, YOU ASSUME THE ENTIRE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.", "step.step_E2B1F507C5FD48C38AD60A91CBAEB7": "TO THE EXTENT NOT PROHIBITED BY LAW, IN NO EVENT SHALL BELLSOFT BE LIABLE FOR PERSONAL INJURY, OR ANY INCIDENTAL, SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES WHATSOEVER, INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, LOSS OF DATA, BUSINESS INTERRUPTION OR ANY OTHER COMMERCIAL DAMAGES OR LOSSES, ARISING OUT OF OR RELATED TO YOUR USE OR INABILITY TO USE THE SOFTWARE, HOWEVER CAUSED, REGARDLESS OF THE THEORY OF LIABILITY (CONTRACT, TORT OR OTHERWISE) AND EVEN IF BELLSOFT HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. In no event shall BELLSOFT’s total liability to You for all damages (other than as may be required by applicable law in cases involving personal injury) exceed the amount of fifty dollars ($50.00). The foregoing limitations will apply even if the above stated remedy fails of its essential purpose.", "step.step_4F533B6F97DA4EA79466FAB16F753F": "The Agreement will be governed and interpreted in accordance with California legislation. Expressly waiving their own places of venue or competence, the parties agree that all disagreements, disputes, arguments or claims related to the Agreement, will be settled before the Courts and Tribunals of the city of San Francisco.", "step.step_BBB97EE3986747278C75A76416A89A": "The failure of BELLSOFT to exercise or enforce any rights or provisions of this EULA will not constitute a waiver of such rights or provisions.", "step.step_AF6EB0B69E884E99AA9DE1C731FEDF": "Should one or more provisions of this EULA be or become invalid or unenforceable, this shall not affect the validity and enforceability of the remaining provisions of this EULA. The same shall apply if the EULA does not contain an essential provision. In lieu of the invalid or unenforceable provision, or to fill a contractual lacuna, such valid and enforceable provision shall apply which reflects as closely as possible the commercial intention of the Parties as regards the invalid, unenforceable or missing provision.", "subchoice.choice_E06912ED0658434BBC46B6410BB128": "You will not download, provide, make available, or otherwise export or re-export the SOFTWARE, directly or indirectly, to countries prohibited by applicable laws and regulations nor to citizens, nationals, or residents of those countries.", "subchoice.choice_97CB0C6814AA4C3ABA76191ECD3EFD": "You are not listed on the United States Department of Treasury lists of Specially Designated Nationals and Blocked Persons, Specially Designated Terrorists, and Specially Designated Narcotic Traffickers, nor are You listed on the United States Department of Commerce Table of Denial Orders.", "subchoice.choice_BB357088FEC346F3B39D1F0A5B26BB": "You will not download or otherwise export or re-export the SOFTWARE, directly or indirectly, to persons on the above-mentioned lists.", "subchoice.choice_446A48148CFC4A64A6BC962333603E": "You will not use the SOFTWARE for, and will not allow the SOFTWARE to be used for, any purposes prohibited by applicable law, including, without limitation, for the development, design, manufacture, or production of nuclear, chemical, or biological weapons of mass destruction.", "step.step_3AE3C02754134C70A7074FBC1ED1F8": "The SOFTWARE shall not be supplied in any way, directly or indirectly, to an entity/person in North Korea, Syria, Russia, Belarus, Iran, Sudan, or the Crimea Region of Ukraine. The SOFTWARE shall not be supplied in any way, directly or in- directly, to an entity or person that is on any other export control restricted lists, including any entity that is owned 50% or more, directly or indirectly, by such restricted entity or person. Accordingly, You confirm:", "desc": [ "content.p_2B6478EEC6E34B22AE7608053E8598", { "steps.ol_cl4_1vl_zzb": [ "step.step_A3F6383E1B394565B3E4EEB92C4D8A", "content.p_9E2C8B4B2BC5468D9BC2F923D288A3", "step.step_D2E237B9E55445BDB6A294EB82D774", "step.step_4AFB5AFD1306494696177216406451", "step.step_04D03D0F73ED4C91B63CBF8F820294", "step.step_BDF2F201F8A64656B3BAD03AD3ED70", "step.step_E2B1F507C5FD48C38AD60A91CBAEB7", "step.step_4F533B6F97DA4EA79466FAB16F753F", "step.step_BBB97EE3986747278C75A76416A89A", "step.step_AF6EB0B69E884E99AA9DE1C731FEDF", "step.step_3AE3C02754134C70A7074FBC1ED1F8", { "subchoices.ul_dl4_1vl_zzb": [ "subchoice.choice_E06912ED0658434BBC46B6410BB128", "subchoice.choice_97CB0C6814AA4C3ABA76191ECD3EFD", "subchoice.choice_BB357088FEC346F3B39D1F0A5B26BB", "subchoice.choice_446A48148CFC4A64A6BC962333603E" ] } ] } ] }, "toc-16.10-en.json": { "toc": [ "concept_product_webhelp-16.10-en", { "concept_introduction_fspm-16.10-en": [ "concept_fspm_components-16.10-en", "concept_fspm_features-16.10-en", { "concept_product_registration-16.10-en": [ "concept_upstream_reporting-16.10-en" ] }, "concept_basic_terminology-16.10-en", "concept_policy_based_management-16.10-en" ] }, { "installing_pm-16.10-en": [ { "concept_sysreq_overview-16.10-en": [ "concept_sysreq_fspms-16.10-en", "concept_sysreq_fspmc-16.10-en" ] }, { "concept_installing_windows-16.10-en": [ { "concept_installation_steps-16.10-en": [ "task_begin_installing_cd-16.10-en", "supported_msi_parameters_0-16.10-en", "task_run_fspmc-16.10-en" ] }, "task_changing_browser_path-16.10-en", "upgrading_pm_on_win_server-16.10-en", "task_uninstall_fspm-16.10-en" ] }, { "concept_installing_linux-16.10-en": [ { "installing_pm_linux-16.10-en": [ "task_installing_fsaua-16.10-en", "task_installing_fspmc-16.10-en" ] }, "task_upgrading_fspm-16.10-en", "task_uninstalling_fsaua-16.10-en" ] } ] }, { "concept_using_fspmc-16.10-en": [ "concept_fspmc_overview-16.10-en", { "concept_fspmc_basics-16.10-en": [ { "concept_logging_in-16.10-en": [ "concept_connection_properties-16.10-en", "task_changing_password-16.10-en" ] }, "concept_dashboard-16.10-en", "task_adding_users-16.10-en", "concept_policy_domain_pane-16.10-en", "concept_messages_pane-16.10-en", "concept_product_upgrade_notifications-16.10-en" ] }, { "concept_managing_domains_hosts-16.10-en": [ "task_adding_policy_domains-16.10-en", { "concept_adding_hosts-16.10-en": [ { "concept_importing_ad_structure-16.10-en": [ "task_importing_company_certificate-16.10-en", "task_importing_ad_sync_rule-16.10-en", "task_importing_ad_notification_rule-16.10-en", "task_importing_ad_manually-16.10-en", "task_handling_unmanaged_hosts-16.10-en" ] }, "task_adding_hosts_windows-16.10-en", "task_import_autoreg_hosts-16.10-en", "task_using_autoreg_import_rules-16.10-en", "task_creating_hosts_manually-16.10-en", "task_handling_disconnected_hosts-16.10-en" ] } ] }, { "concept_managing_policies-16.10-en": [ "task_configuring_settings-16.10-en", "task_checking_modified_settings-16.10-en", "task_adding_notes-16.10-en", "task_discarding_changes-16.10-en", "concept_restrictions-16.10-en", "task_using_password_protected_uninstallation-16.10-en", "task_copying_policy_settings-16.10-en", "task_exporting_policy_file-16.10-en", { "concept_policy_inheritance-16.10-en": [ "concept_settings_inheritance_displayed_ui-16.10-en", "concept_locking_unlocking_all_settings-16.10-en", "concept_settings_inheritance_tables-16.10-en", "concept_index_inheritance_tables-16.10-en" ] } ] }, { "task_managing_operations_tasks-16.10-en": [ "concept_fsdiag-16.10-en" ] }, { "concept_alerts-16.10-en": [ "task_viewing_alerts_reports-16.10-en", "task_filtering_alerts_sent_by_managed_hosts-16.10-en", "task_sending_alerts_email-16.10-en", "task_configuring_syslog_alert_forwarding-16.10-en", "task_domain_alert_forwarding-16.10-en" ] }, { "concept_reporting_tool-16.10-en": [ "task_viewing_exporting_reports-16.10-en" ] }, { "concept_using_data_mining-16.10-en": [ "task_running_queries_endpoint_data-16.10-en", "task_exporting_publishing_saved_queries-16.10-en", "task_example_using_data_mining-16.10-en" ] }, { "concept_check_environment_protected-16.10-en": [ "task_check_all_hosts_have_latest_policy-16.10-en", "task_check_hosts_have_latest_virus_definitions-16.10-en", "task_check_no_disconnected_hosts-16.10-en", "task_viewing_scanning_results-16.10-en", "task_viewing_alerts-16.10-en", "concept_creating_weekly_infection_report-16.10-en", "task_monitoring_possible_network_attack-16.10-en" ] } ] }, { "concept_maintaining_fspms-16.10-en": [ { "concept_virus_definition_updates-16.10-en": [ "task_checking_virus_definitions-16.10-en", { "concept_updates_isolated_networks-16.10-en": [ "task_using_pmp_update_malware_definitions-16.10-en", "task_using_update_archives-16.10-en", "task_updating_offline_cs_hosts-16.10-en" ] } ] }, "concept_backup_restore_fspmc_data-16.10-en", "task_creating_backup-16.10-en", "task_task_E1DB5A93FC5B4AF7AE32027CE262CA4F_5884CD40-16.10-en", "task_restoring_backup-16.10-en", "task_exporting_importing_keys-16.10-en", "task_replicating_software_using_image_files-16.10-en", "task_reindexing_search_data-16.10-en", { "task_database_maintenance_tool-16.10-en": [ "task_running_the_search_maintenance_tool-16.10-en", "database_maintenance_tool-16.10-en" ] } ] }, { "concept_web_reporting-16.10-en": [ "task_viewing_reports-16.10-en", "task_scheduling_reports-16.10-en", "task_changing_web_reporting_port-16.10-en" ] }, { "concept_fspm_proxy-16.10-en": [ { "concept_fspm_proxy_overview-16.10-en": [ "concept_when_to_use_fspmp-16.10-en" ] }, "task_setup_nextgen_pmp-16.10-en", { "task_set_up_pmp_silent_mode-16.10-en": [ "upgrading_policy_manager_proxy_in_silent_mode-16.10-en" ] }, "concept_centralized_management-16.10-en" ] }, { "software_distribution-16.10-en": [ { "concept_push_installations-16.10-en": [ "task_autodiscover_windows_hosts-16.10-en", "task_autodiscover_ad_hosts-16.10-en", "task_push_install_windows_hosts-16.10-en", "task_push_installation_after_target_host_selection-16.10-en" ] }, { "concept_policy_based_installation-16.10-en": [ "task_using_installation_editor-16.10-en" ] }, { "concept_local_installation_and_updates-16.10-en": [ "task_login_script_windows-16.10-en", "task_preparing_msi_linux-16.10-en" ] }, "concept_upgrading_software-16.10-en" ] }, { "concept_managing_cs_settings-16.10-en": [ "concept_migration_ess_settings-16.10-en", "task_using_mdm_profiles_to_set_up_cs_mac-16.10-en", { "concept_configuring_automatic_updates-16.10-en": [ "task_configuring_automatic_updates_pms-16.10-en", "task_configuring_pm_proxy-16.10-en", "task_configuring_clients_download_updates-16.10-en" ] }, { "concept_configuring_virus_spyware_protection-16.10-en": [ { "concept_configuring_realtime_scanning-16.10-en": [ "task_enabling_realtime_scanning_whole_domain-16.10-en", "task_using_amsi_integration-16.10-en", "task_excluding_pst_file_realtime_scanning-16.10-en", "task_excluding_processes_realtime_scanning-16.10-en", "task_scanning_content_network_drives-16.10-en" ] }, "task_using_security_cloud-16.10-en", "task_configuring_scheduled_scanning-16.10-en", { "task_configuring_deepguard-16.10-en": [ { "concept_dataguard-16.10-en": [ "task_setting_up_dataguard-16.10-en" ] } ] }, { "concept_managing_quarantined_objects-16.10-en": [ "task_deleting_quarantined_objects-16.10-en", "task_releasing_quarantined_objects-16.10-en" ] } ] }, { "concept_configuring_firewall_settings-16.10-en": [ "task_turning_firewall_on-16.10-en", { "concept_configuring_network_quarantine-16.10-en": [ "task_enabling_network_quarantine_whole_domain-16.10-en", "concept_finetuning_network_quarantine-16.10-en" ] }, { "concept_firewall_settings_cs14-16.10-en": [ "task_selecting_firewall_profile-16.10-en", "task_creating_new_firewall_profile-16.10-en", "task_adding_firewall_rules-16.10-en", "task_creating_network_service-16.10-en", "task_limiting_firewall_profiles-16.10-en" ] } ] }, { "concept_configuring_web_traffic_scanning-16.10-en": [ "task_enabling_http_scanning_whole_domain-16.10-en", "task_wts_blocking_content_types-16.10-en", "task_botnet_blocker-16.10-en" ] }, { "concept_application_control-16.10-en": [ "task_turn_on_app_control-16.10-en", "task_creating_new_app_control_profile-16.10-en", "task_adding_exclusion_rules-16.10-en", "task_exclusion_rule_example-16.10-en", "task_block_download_example-16.10-en" ] }, { "concept_protecting_sensitive_data-16.10-en": [ "task_protecting_secure_connections-16.10-en" ] }, { "concept_blocking_web_content-16.10-en": [ "reference_content_categories-16.10-en", "task_selecting_categories-16.10-en" ] }, { "concept_using_device_control-16.10-en": [ "task_configuring_device_control-16.10-en", "task_limiting_device_access-16.10-en", "task_blocking_devices-16.10-en", { "task_adding_exceptions-16.10-en": [ "task_finding_id-16.10-en" ] } ] }, { "concept_managing_software_updates-16.10-en": [ "task_automatic_update_installation-16.10-en", "task_handling_manual_software_updates-16.10-en", "task_exclude_updates-16.10-en", { "concept_checking_software_updates-16.10-en": [ "task_install_missing_updates-16.10-en" ] }, "task_allow_swup_end_users-16.10-en", "task_configuring_http_proxy-16.10-en" ] }, { "concept_rdr_intro-16.10-en": [ "task_deploying_rdr_sensors-16.10-en", "task_reactivating_endpoint_sensors-16.10-en", "activating_endoint_sensors_in_vdi-16.10-en", "task_checking_rdr_status-16.10-en", "task_isolating_hosts-16.10-en" ] }, "task_setting_visibility_notifications-16.10-en", "task_hiding_local_ui-16.10-en", { "concept_preventing_users_changing_settings-16.10-en": [ "task_settings_vp_settings_final-16.10-en", "task_preventing_changes_protected_processes-16.10-en" ] }, "concept_monitoring_viruses_network-16.10-en", "task_testing_antivirus_protection-16.10-en" ] }, { "concept_virus_information-16.10-en": [ "concept_malware_information_tools_fs_website-16.10-en", { "concept_send_virus_sample_fs-16.10-en": [ "concept_package_virus_sample-16.10-en", "task_virus_outbreak-16.10-en", "concept_what_to_send-16.10-en" ] } ] }, { "concept_rmm-16.10-en": [ { "concept_rmm_integration-16.10-en": [ "task_obtaining_properties_via_wmi-16.10-en" ] }, { "concept_rmm_namespaces-16.10-en": [ "WMI_classes-16.10-en", "concept_data_in_win_registry-16.10-en" ] } ] }, { "concept_troubleshooting-16.10-en": [ "concept_fsmps_fspmc_troubleshooting-16.10-en", "concept_wr_troubleshooting-16.10-en", "concept_policy_distribution_troubleshooting-16.10-en", "concept_faq-16.10-en" ] }, { "pm_mysql_database-16.10-en": [ "task_migrating_h2_mysql-16.10-en" ] }, { "licenseterms-16.10-en": [ "withsecure_license_terms-16.10-en", { "third_party_license_terms-16.10-en": [ "oracle_binary_code-16.10-en", "apache_software_license_version_2_0-16.10-en", "eclipse_public_license_v_1_0-16.10-en", "h2_license_version_1_0-16.10-en", "common_development_and_distribution_license_cddl_version_1_0-16.10-en", "spring_asm_copyright_notice_and_permissions-16.10-en", "slf4j_copyright_notice_and_permissions-16.10-en", "liberica_jdk_end_user_license_agreement-16.10-en" ] } ] } ], "concept_product_webhelp-16.10-en": "Policy Manager ", "concept_fspm_components-16.10-en": "Main components", "concept_fspm_features-16.10-en": "Features", "concept_upstream_reporting-16.10-en": "Upstream reporting", "concept_product_registration-16.10-en": "Product registration", "concept_basic_terminology-16.10-en": "Basic terminology", "concept_policy_based_management-16.10-en": "Policy-based management", "concept_introduction_fspm-16.10-en": "Introduction", "concept_sysreq_fspms-16.10-en": "Policy Manager Server ", "concept_sysreq_fspmc-16.10-en": "Policy Manager Console ", "concept_sysreq_overview-16.10-en": "System requirements", "task_begin_installing_cd-16.10-en": "Download and run the installation package", "supported_msi_parameters_0-16.10-en": "Supported MSI parameters", "task_run_fspmc-16.10-en": "Run Policy Manager Console", "concept_installation_steps-16.10-en": "Installation steps", "task_changing_browser_path-16.10-en": "Changing the web browser path", "upgrading_pm_on_win_server-16.10-en": "Upgrading the product on a Windows Server", "task_uninstall_fspm-16.10-en": "Uninstalling the product", "concept_installing_windows-16.10-en": "Installing the product on Windows", "task_installing_fsaua-16.10-en": "Install Policy Manager Server", "task_installing_fspmc-16.10-en": "Install Policy Manager Console", "installing_pm_linux-16.10-en": "Installation steps", "task_upgrading_fspm-16.10-en": "Upgrading the product on a Linux server", "task_uninstalling_fsaua-16.10-en": "Uninstalling the product", "concept_installing_linux-16.10-en": "Installing the product on Linux", "installing_pm-16.10-en": "Installing the product", "concept_fspmc_overview-16.10-en": "Overview", "concept_connection_properties-16.10-en": "Connection properties", "task_changing_password-16.10-en": "Changing your password", "concept_logging_in-16.10-en": "Logging in", "concept_dashboard-16.10-en": "Dashboard", "task_adding_users-16.10-en": "Adding new users", "concept_policy_domain_pane-16.10-en": "Policy domain tree", "concept_messages_pane-16.10-en": "Messages pane", "concept_product_upgrade_notifications-16.10-en": "Product upgrade notifications", "concept_fspmc_basics-16.10-en": "Basic information and tasks", "task_adding_policy_domains-16.10-en": "Adding policy domains", "task_importing_company_certificate-16.10-en": "Importing the company certificate for Active Directory authentication on Linux", "task_importing_ad_sync_rule-16.10-en": "Creating an Active Directory synchronization rule", "task_importing_ad_notification_rule-16.10-en": "Creating an Active Directory notification rule", "task_importing_ad_manually-16.10-en": "Manually importing from Active Directory", "task_handling_unmanaged_hosts-16.10-en": "Handling unmanaged hosts", "concept_importing_ad_structure-16.10-en": "Importing hosts from an Active Directory", "task_adding_hosts_windows-16.10-en": "Adding hosts in Windows domains", "task_import_autoreg_hosts-16.10-en": "Importing new hosts", "task_using_autoreg_import_rules-16.10-en": "Using import rules", "task_creating_hosts_manually-16.10-en": "Creating hosts manually", "task_handling_disconnected_hosts-16.10-en": "Handling disconnected hosts automatically", "concept_adding_hosts-16.10-en": "Adding hosts", "concept_managing_domains_hosts-16.10-en": "Managing domains and hosts", "task_configuring_settings-16.10-en": "Configuring settings", "task_checking_modified_settings-16.10-en": "Checking modified settings", "task_adding_notes-16.10-en": "Adding notes to settings", "task_discarding_changes-16.10-en": "Discarding undistributed changes to settings", "concept_restrictions-16.10-en": "Restrictions", "task_using_password_protected_uninstallation-16.10-en": "Using password-protected uninstallation", "task_copying_policy_settings-16.10-en": "Copying policy settings between Policy Manager instances", "task_exporting_policy_file-16.10-en": "Exporting the policy file for a host", "concept_settings_inheritance_displayed_ui-16.10-en": "How settings inheritance is displayed on the user interface", "concept_locking_unlocking_all_settings-16.10-en": "Locking and unlocking all settings on a page at once", "concept_settings_inheritance_tables-16.10-en": "Settings inheritance in tables", "concept_index_inheritance_tables-16.10-en": "Index inheritance in tables", "concept_policy_inheritance-16.10-en": "Policy inheritance", "concept_managing_policies-16.10-en": "Managing policies", "concept_fsdiag-16.10-en": "Remote collection of diagnostics reports", "task_managing_operations_tasks-16.10-en": "Managing operations and tasks", "task_viewing_alerts_reports-16.10-en": "Viewing alerts and reports", "task_filtering_alerts_sent_by_managed_hosts-16.10-en": "Filtering alerts sent by managed hosts", "task_sending_alerts_email-16.10-en": "Sending alerts by email", "task_configuring_syslog_alert_forwarding-16.10-en": "Forwarding alerts to syslog server", "task_domain_alert_forwarding-16.10-en": "Configuring alert forwarding for a specific domain", "concept_alerts-16.10-en": "Alerts", "task_viewing_exporting_reports-16.10-en": "Viewing and exporting a report", "concept_reporting_tool-16.10-en": "Reporting tool", "task_running_queries_endpoint_data-16.10-en": "Running queries on managed endpoint data", "task_exporting_publishing_saved_queries-16.10-en": "Publishing saved queries for reports and external use", "task_example_using_data_mining-16.10-en": "Example of using data mining", "concept_using_data_mining-16.10-en": "Using data mining to get information about managed hosts", "task_check_all_hosts_have_latest_policy-16.10-en": "Checking that all the hosts have the latest policy", "task_check_hosts_have_latest_virus_definitions-16.10-en": "Checking that the hosts have the latest virus definitions", "task_check_no_disconnected_hosts-16.10-en": "Checking that there are no disconnected hosts", "task_viewing_scanning_results-16.10-en": "Viewing scanning reports", "task_viewing_alerts-16.10-en": "Viewing alerts", "concept_creating_weekly_infection_report-16.10-en": "Creating a weekly infection report", "task_monitoring_possible_network_attack-16.10-en": "Monitoring a possible network attack", "concept_check_environment_protected-16.10-en": "How to check that the network environment is protected", "concept_using_fspmc-16.10-en": "Using Policy Manager Console", "task_checking_virus_definitions-16.10-en": "Checking the malware definitions on Policy Manager Server", "task_using_pmp_update_malware_definitions-16.10-en": "Using Policy Manager Proxy to update malware definitions", "task_using_update_archives-16.10-en": "Using archives to update malware definitions", "task_updating_offline_cs_hosts-16.10-en": "Updating malware definitions on isolated Client Security hosts", "concept_updates_isolated_networks-16.10-en": "Updating malware definitions in isolated networks", "concept_virus_definition_updates-16.10-en": "Malware definition updates", "concept_backup_restore_fspmc_data-16.10-en": "Backing up and restoring Policy Manager data", "task_creating_backup-16.10-en": "Creating the backup", "task_task_E1DB5A93FC5B4AF7AE32027CE262CA4F_5884CD40-16.10-en": "Restoring the backup", "task_restoring_backup-16.10-en": "Restoring an automatically saved backup on Linux", "task_exporting_importing_keys-16.10-en": "Exporting and importing signing keys", "task_replicating_software_using_image_files-16.10-en": "Replicating software using image files", "task_reindexing_search_data-16.10-en": "Re-indexing search data", "task_running_the_search_maintenance_tool-16.10-en": "Running the search maintenance tool", "database_maintenance_tool-16.10-en": "Database maintenance troubleshooting", "task_database_maintenance_tool-16.10-en": "Running the database maintenance tool", "concept_maintaining_fspms-16.10-en": "Maintaining Policy Manager Server", "task_viewing_reports-16.10-en": "Viewing reports", "task_scheduling_reports-16.10-en": "Scheduling reports", "task_changing_web_reporting_port-16.10-en": "Changing the Web Reporting port", "concept_web_reporting-16.10-en": "Web Reporting ", "concept_when_to_use_fspmp-16.10-en": "When should you use Policy Manager Proxy?", "concept_fspm_proxy_overview-16.10-en": "Overview", "task_setup_nextgen_pmp-16.10-en": "Setting up Policy Manager Proxy", "upgrading_policy_manager_proxy_in_silent_mode-16.10-en": "Upgrading Policy Manager Proxy in silent mode", "task_set_up_pmp_silent_mode-16.10-en": "Setting up Policy Manager Proxy in silent mode", "concept_centralized_management-16.10-en": "Centralized management of Policy Manager Proxy", "concept_fspm_proxy-16.10-en": "Policy Manager Proxy ", "task_autodiscover_windows_hosts-16.10-en": "Autodiscover Windows hosts", "task_autodiscover_ad_hosts-16.10-en": "Autodiscover hosts from an Active Directory server", "task_push_install_windows_hosts-16.10-en": "Push install to Windows hosts", "task_push_installation_after_target_host_selection-16.10-en": "Push install after target host selection", "concept_push_installations-16.10-en": "Push installations", "task_using_installation_editor-16.10-en": "Using policy-based installation", "concept_policy_based_installation-16.10-en": "Policy-based installation", "task_login_script_windows-16.10-en": "Using the customized remote installation package", "task_preparing_msi_linux-16.10-en": "How to prepare MSI installation packages with Policy Manager for Linux", "concept_local_installation_and_updates-16.10-en": "Local installation and updates with pre-configured packages", "concept_upgrading_software-16.10-en": "Upgrading managed software", "software_distribution-16.10-en": "Software distribution", "concept_migration_ess_settings-16.10-en": "Migration of Email and Server Security settings", "task_using_mdm_profiles_to_set_up_cs_mac-16.10-en": "Using MDM profiles to set up WithSecure Client Security for Mac", "task_configuring_automatic_updates_pms-16.10-en": "Configuring automatic updates from Policy Manager Server", "task_configuring_pm_proxy-16.10-en": "Configuring Policy Manager Proxy", "task_configuring_clients_download_updates-16.10-en": "Configuring hosts to download updates from each other", "concept_configuring_automatic_updates-16.10-en": "Configuring automatic updates", "task_enabling_realtime_scanning_whole_domain-16.10-en": "Enabling real-time scanning for the whole domain", "task_using_amsi_integration-16.10-en": "Using AMSI integration to identify script-based attacks", "task_excluding_pst_file_realtime_scanning-16.10-en": "Excluding files from real-time scanning", "task_excluding_processes_realtime_scanning-16.10-en": "Excluding processes from real-time scanning", "task_scanning_content_network_drives-16.10-en": "Scanning content on network drives", "concept_configuring_realtime_scanning-16.10-en": "Configuring real-time scanning", "task_using_security_cloud-16.10-en": "Using Security Cloud for malware scanning", "task_configuring_scheduled_scanning-16.10-en": "Configuring scheduled scanning", "task_setting_up_dataguard-16.10-en": "Setting up DataGuard", "concept_dataguard-16.10-en": "DataGuard (a Premium feature)", "task_configuring_deepguard-16.10-en": "Configuring DeepGuard", "task_deleting_quarantined_objects-16.10-en": "Deleting quarantined objects", "task_releasing_quarantined_objects-16.10-en": "Releasing quarantined objects", "concept_managing_quarantined_objects-16.10-en": "Managing quarantined objects", "concept_configuring_virus_spyware_protection-16.10-en": "Configuring virus and spyware protection", "task_turning_firewall_on-16.10-en": "Turning on the firewall", "task_enabling_network_quarantine_whole_domain-16.10-en": "Turning network quarantine on in the whole domain", "concept_finetuning_network_quarantine-16.10-en": "Fine-tuning network quarantine", "concept_configuring_network_quarantine-16.10-en": "Configuring network quarantine", "task_selecting_firewall_profile-16.10-en": "Selecting the active firewall profile for a domain", "task_creating_new_firewall_profile-16.10-en": "Creating a new firewall profile for a domain", "task_adding_firewall_rules-16.10-en": "Adding firewall rules", "task_creating_network_service-16.10-en": "Creating a new network service for firewall rules", "task_limiting_firewall_profiles-16.10-en": "Hiding certain firewall profiles from end users", "concept_firewall_settings_cs14-16.10-en": "Firewall settings for Windows clients", "concept_configuring_firewall_settings-16.10-en": "Configuring firewall settings", "task_enabling_http_scanning_whole_domain-16.10-en": "Enabling web traffic scanning for the whole domain", "task_wts_blocking_content_types-16.10-en": "Blocking specific content types", "task_botnet_blocker-16.10-en": "Blocking botnet communication", "concept_configuring_web_traffic_scanning-16.10-en": "Configuring web traffic (HTTP) scanning", "task_turn_on_app_control-16.10-en": "Configuring application control", "task_creating_new_app_control_profile-16.10-en": "Creating a new application control profile", "task_adding_exclusion_rules-16.10-en": "Adding exclusion rules", "task_exclusion_rule_example-16.10-en": "Example: Preventing a vulnerable version from running", "task_block_download_example-16.10-en": "Example: Preventing applications from automatically opening downloaded files", "concept_application_control-16.10-en": "Configuring application control", "task_protecting_secure_connections-16.10-en": "Protecting secure connections on managed hosts", "concept_protecting_sensitive_data-16.10-en": "How to protect your users' sensitive data", "reference_content_categories-16.10-en": "Web content categories", "task_selecting_categories-16.10-en": "Selecting the content categories to block", "concept_blocking_web_content-16.10-en": "Blocking unsuitable web content", "task_configuring_device_control-16.10-en": "Configuring Device control", "task_limiting_device_access-16.10-en": "Limiting access permissions for removable drives", "task_blocking_devices-16.10-en": "Blocking hardware devices", "task_finding_id-16.10-en": "Finding hardware ID for a device", "task_adding_exceptions-16.10-en": "Granting access to specific devices", "concept_using_device_control-16.10-en": "Using Device Control", "task_automatic_update_installation-16.10-en": "Installing software updates automatically", "task_handling_manual_software_updates-16.10-en": "Handling manually downloaded software updates", "task_exclude_updates-16.10-en": "Excluding software updates from automatic installation", "task_install_missing_updates-16.10-en": "Installing missing software updates", "concept_checking_software_updates-16.10-en": "Checking the status of software updates in your network", "task_allow_swup_end_users-16.10-en": "Allowing end users to manage software updates", "task_configuring_http_proxy-16.10-en": "Configuring a third-party HTTP proxy for Software Updater", "concept_managing_software_updates-16.10-en": "Managing software updates", "task_deploying_rdr_sensors-16.10-en": "Activating endpoint sensors", "task_reactivating_endpoint_sensors-16.10-en": "Reactivating endpoint sensors", "activating_endoint_sensors_in_vdi-16.10-en": "Activating endpoint sensors in VDI", "task_checking_rdr_status-16.10-en": "Checking the status of endpoint sensors", "task_isolating_hosts-16.10-en": "Isolating hosts from the network", "concept_rdr_intro-16.10-en": "Endpoint Detection and Response", "task_setting_visibility_notifications-16.10-en": "Hiding notifications on managed hosts", "task_hiding_local_ui-16.10-en": "Hiding the local user interface on managed hosts", "task_settings_vp_settings_final-16.10-en": "Setting all virus protection settings as final", "task_preventing_changes_protected_processes-16.10-en": "Preventing changes to protected WithSecure files and processes", "concept_preventing_users_changing_settings-16.10-en": "Preventing users from changing settings", "concept_monitoring_viruses_network-16.10-en": "Monitoring viruses on the network", "task_testing_antivirus_protection-16.10-en": "Testing your antivirus protection", "concept_managing_cs_settings-16.10-en": "Managing endpoint security", "concept_malware_information_tools_fs_website-16.10-en": "Malware information and tools on the WithSecure web pages", "concept_package_virus_sample-16.10-en": "How to package and send a virus sample", "task_virus_outbreak-16.10-en": "Finding new malware", "concept_what_to_send-16.10-en": "What should be sent", "concept_send_virus_sample_fs-16.10-en": "How to send a virus sample to WithSecure", "concept_virus_information-16.10-en": "Virus information", "task_obtaining_properties_via_wmi-16.10-en": "Obtaining properties via WMI", "concept_rmm_integration-16.10-en": "WMI integration", "WMI_classes-16.10-en": "WMI classes", "concept_data_in_win_registry-16.10-en": "WMI classes in the Windows registry", "concept_rmm_namespaces-16.10-en": "WMI classes for integration", "concept_rmm-16.10-en": "Windows Management Instrumentation", "concept_fsmps_fspmc_troubleshooting-16.10-en": "Policy Manager Server and Policy Manager Console", "concept_wr_troubleshooting-16.10-en": "Policy Manager Web Reporting ", "concept_policy_distribution_troubleshooting-16.10-en": "Policy distribution", "concept_faq-16.10-en": "Frequently asked questions for Linux versions", "concept_troubleshooting-16.10-en": "Troubleshooting", "task_migrating_h2_mysql-16.10-en": "Migrating H2 data to MySQL using the command line", "pm_mysql_database-16.10-en": "Using Policy Manager with a MySQL database", "withsecure_license_terms-16.10-en": "WithSecure license terms", "oracle_binary_code-16.10-en": "Oracle Binary Code License Agreement for the Java SE Platform Products and JavaFX ", "apache_software_license_version_2_0-16.10-en": "Apache Software License - Version 2.0 ", "eclipse_public_license_v_1_0-16.10-en": "Eclipse Public License - v 1.0 ", "h2_license_version_1_0-16.10-en": "H2 License - Version 1.0 ", "common_development_and_distribution_license_cddl_version_1_0-16.10-en": "Common Development and Distribution License (CDDL) Version 1.0 ", "spring_asm_copyright_notice_and_permissions-16.10-en": "spring-asm Copyright Notice and Permissions ", "slf4j_copyright_notice_and_permissions-16.10-en": "SLF4J Copyright Notice and Permissions ", "liberica_jdk_end_user_license_agreement-16.10-en": "Liberica JDK End User License Agreement ", "third_party_license_terms-16.10-en": "Third-party license terms ", "licenseterms-16.10-en": "License terms" } }