Issue:
Which F-Secure windows services should be monitored and running all the time to verify that the protection is on?
Resolution:
F-Secure Client Security 14.x, Server Security 14.x, PSB Computer Protection and PSB Server Protection are all OneClient based products so they all have the same services in use.
Here is a list of all the services that should be running when any of these are installed on a machine:
- F-Secure Device Control (Premium feature)
- F-Secure Hoster
- F-Secure Hoster (restricted)
- F-Secure Ultralight Hoster
- F-Secure Ultralight Network Hoster
- F-Secure Ultralight ORSP Client
- F-Secure Ultralight Protected Hoster
When you turn off All security features through the UI, the F-Secure Ultralight Hoster is stopped. All security features are linked to that service.
If F-Secure Hoster is stopped the security features are still on but the user interface will disappear and no action prompts will be visible. So the computer is still protected but you cannot control it in any way.
F-Secure Ultralight ORSP Client controls the Object Reputation Service Protocol, which is connected to the security cloud feature: https://www.f-secure.com/en/web/legal/privacy/security-cloud
All of the services are essential so that the product is fully operational on the machine, so you should monitor all of these services.
Article no: 000013469