Since 26 hours no more updates

Aspirant

Re: Since 26 hours no more updates

I have version 17.5, and Security Cloud is connected. But where do I see, if it's up to date?

Security Cloud.jpg

Superuser

Re: Since 26 hours no more updates


@MNielsen wrote:

I have version 17.5, and Security Cloud is connected. But where do I see, if it's up to date?


So, yes.. it is 'unknown'! With next meanings: if Security Cloud "is connected" - then it should be up to date (because it is on F-Secure side). In general, Security Cloud should always be updated and up to date.

 

If there are troubles with connection (receiving / retrieving information from Security Cloud or handling) OR if F-Secure Security Cloud itself has an internal trouble (and is not updated) - this is kind of bugs. Usually, bugs should be fixed. I do able to suspect that such bugs are not often case AND even if occured - should be fixed in a short timeframe.

 

I feel that there can be some limitations or user's circumstances when this is not working. But I am not sure that it is about your own experience.

 

Meaning of "always up to date" state of Security Cloud is based on: when application is scanned (launched, suspicious look, any other triggers) - F-Secure SAFE should request opinion from Security Cloud (where information is always fresh). And if it is a known malicious or harmful item - detection comes to F-Secure solution as !online decision. If it is unknown malicious item, but too suspicious - then it can be blocked / detected too. With more "suitable" words - possible to read whitepaper about F-Secure Security Cloud (and DeepGuard as example of use); where things are explained with more clear view.


What about 17.5 and 17.6; If 17.6 release is officially released (knowledgebase article with "April" date) - then fresh installation (clean installation) is always about most recent and available build. Thus, if reinstallation is an option - possible to check if fresh installation is about 17.6; I do not check it yet.

Or it is possible to receive autoupgrade (but later). This, usually, happens gradually for users.

 

Also, one addition: indeed malicious activities are not goes to weekends. And security updates (signatures) are critical for weekends too. But, all in all, I am not sure that there are any intentions to meet TOO fresh malware on weekends. However, if so - I am not sure that signatures are useful against such "tricks" that meet users with so fresh state. Against such threats - things like DeepGuard, Security Cloud, specific tweaks against Ransomware and many other layers (for example, Browsing protection) were designed.

While "signatures" are still useful, powerful, accurate and less tricky to be implemented.

 

One more point: based on open statistics (that I saw) - detections on weekends more rare than on working days. But my own explanation is that, MAINLY, malicious intendeds targeted business. And main vector is something like spam, phishing and so on.

For home users - more often case is "well-known" malware, and different rogue / scam tricks. Usually, it is detected by generic signatures. Things like PUA or Suspicious software (riskware) are not always clear for its payload (but protection against this... improved with recent days). And, of course, need to be carefully with using web and with any suspicious activities (received letters, strange websites and so on).

 

Sorry for my English! And for the long reply.

 

Thanks!

 

// if Capricorn engine does not receive an update today (or tomorrow) - then I feel that the trouble is still there. What is not always too critical, but is not good indeed!

Aspirant

Re: Since 26 hours no more updates

And don't apologise your english! My english is also pretty bad!! 

 

And I forgot a screenshot from the Temp-folder...

 

tempmappe.JPG

The tmp1320-3568-1554232150-1-folder is empty.

Superuser

Re: Since 26 hours no more updates


@MNielsen wrote:

And I forgot a screenshot from the Temp-folder...

The tmp1320-3568-1554232150-1-folder is empty.


I think this temp folder is supposed to be empty. And used (created) only during updating / downloading / applying. Then cleared.

Capricorn engine (and its files / database) located under main F-Secure installation folder. There can also be kind of backup for updates under some of system folders (useful for situations where the update did not succeed mistakenly. And we must use the previous successful version, or roll back to it).

 

I tried to install stable F-Secure SAFE on my system. It is still 17.5 (so, maybe 17.6 is not realesed fully yet).

 

Thanks!

Aspirant

Re: Since 26 hours no more updates

Ukko wrote:

"so, maybe 17.6 is not realesed fully yet"

 

Perhaps not, because when my computer is running all the day long, I sometimes restart it despite no restarting is required, just to ensure, programs and other is up-to-date.

 

And free programs, I check for updates manually - either via their manufactorer's websites or manually via the programs, if possible.

 

EDIT:

Someone may have kicked the server in the BEEP!! I got at last a Capricorn-update! Smiley Happy 

Superuser

Re: Since 26 hours no more updates


@MNielsen wrote:

Ukko wrote:

when my computer is running all the day long, I sometimes restart it despite no restarting is required, just to ensure, programs and other is up-to-date.

And free programs, I check for updates manually - either via their manufactorer's websites or manually via the programs, if possible.

 

EDIT:

Someone may have kicked the server in the BEEP!! I got at last a Capricorn-update! Smiley Happy 


I do this, usually, too. By the way, my installations (beta and stable) also got first update for Capricorn (F-Secure Capricorn Update 2019-04-06_01). I think that today there may be two (or three) more updates. Although, one update per "weekend"-day was occasionally for the previous engine too.

Aspirant

Re: Since 26 hours no more updates

No - I think, the Aquarius-update got more updates. Also in weekends.

 

And to have two antivirusprograms.... Is that good? (You wrote that, you have both a stable, AND a beta-version...) Two programs with Realtime-Protection.

Superuser

Re: Since 26 hours no more updates

No - I think, the Aquarius-update got more updates. Also in weekends.

Yes, you are right! Previous engine received more updates per day. For example, an average of "nine" times. However, when weekends comes - an average state was with less count. For example, "four".

Although, it was with differences; where higher value can be much more than ten (and I am not sure about real "average"). Only my feelings. And I remember when it was around one / two updates per weekend (not often. but occasionally).

 

Current engine (Capricorn), looks like, around six / seven updates per working days. Possible to suspect that with weekends it can be around three updates per day. But with my opinion - it does not means that current engine with less protection. Signatures can be more universal or cover more scale. And fresh engine with more dependencies on Cloud-design. So, too frequent updates for this engine are not required (maybe) for being strong.

Also, possible to suspect that to create a signature update - need to be with access to "item" (in general, users do able to upload item to F-Secure Labs: https://www.f-secure.com/en/web/labs_global/submit-a-sample#sample-file); or company researchers should to figure out how to improve signature (or to find item). Thus, it is also depends on landscape with unique malicious items (that are not detected by engine yet).

And to have two antivirusprograms.... Is that good? (You wrote that, you have both a stable, AND a beta-version...) Two programs with Realtime-Protection.

No, of course, it is not good!

I meant that these are two different systems. One system with installed beta. And another system with stable version (I install it there). Systems with only one main active security solution.

 

Furthermore, it is not possible to install F-Secure SAFE beta (fs protection) and stable F-Secure SAFE at once. Installation flow should replace / uninstall previous version.

 

Thanks!

F-Secure Product Manager

Re: Since 26 hours no more updates

Hi,

 

There were no interruptions to the update service during the last weekend. The 2019-04-06_01 update was released normally at ~13:20 EEST.

 

-Cale

Aspirant

Re: Since 26 hours no more updates

I now have version 17.6 for F-secure Safe on my Windows 7-computer. Haven't received any Oneclient-update yet for my Windows 8.1-computer...