process FSAVD is causing a significant amount of CPU usage while Outlook is running
You can run the following commands in the Terminal to exclude Outlook from scanning:
sudo -s echo "/Applications/Microsoft Outlook.app/Contents/MacOS/Microsoft Outlook" >> /usr/local/f-secure/fsmac/sysconfig/system_daemons launchctl stop com.f-secure.fsavd
Restart your computer after running the commands and monitor the CPU usage of the FSAVD process.
Article no: 000003099
How to deploy PSB Computer Protection or Server Protection using a clone image?
From version 18.14 onwards, F-Secure Computer Protection for Windows and F-Secure Server Protection for Windows support the clone image installation. Follow the instructions here for installing the product using a clone image.
Article no: 000004589
PSB Computer Protection says "Check internet connection and try again" when trying to install with subscription key.
If you are connected to the internet and still getting the "Check internet connection and try again" error message during installation with a subscription key, follow the steps below to rule out other probable causes: Incorrect subscription key:
Check that you are using the correct subscription key during installation. Double-check the spelling and verify from either your license certificate or from the Subscriptions page in the PSB portal that you are using a valid license.
Insufficient number of available seats:
Check that there are still available seats on the license you're trying to use. In the PSB portal, go to the Subscriptions page and check the Usage column for the license in question. If there are no more available seats, you have two options:
Remove old installations that are no longer in use to free up seats, or; Acquire more seats via Partner Portal or reaching out to your reseller or F-Secure sales contact
If you would like to remove old installations that are no longer in use to free up seats, follow the steps below:
Log in to the PSB portal. Go to the Devices page. Select the device(s) you want to remove, using the checkbox on the left. Click Remove device from the options at the bottom of the screen. (Remember, to be able to reinstall on these devices, you need to clear the list of removed computers: Go to the Subscriptions page, open the action menu on the right side of the license and click Clear list of removed computers).
Article no: 000008841
PSB client does not take the new expiry date into used after subscription key is renewed.
In the scenario whereby PSB subscription is renewed when a subscription is valid still, there is a delay of up to 8 hours for the PSB client to take the new expiry date into use after renewal is done. In the scenario whereby the PSB subscription is renewed after the subscription is expired, the PSB client will take the new expiry date into use immediately. You do not need to re-enter the subscription key on the PSB client in case the subscription key remain unchanged.
Article no: 000007397
Can the Computer Protection profile be used to force the firewall on if the end user has turned it off?
The on/off state of the Windows Firewall can be fully controlled from the PSB portal settings profiles. To modify the state of the firewall, do as follows:
Log in to the PSB Management Portal. Go to the Profiles page. Click on the profile you want to edit (observe that profiles with the READ ONLY flag cannot be edited). Select the Firewall page from the options on the left. Under General settings, set the Use Windows Firewall-setting to the desired mode (to prevent anyone from being able to modify the setting locally, click the lock-icon on the extreme right side of the setting, so that the lock is closed).
The Windows Firewall will always follow the setting in Computer Protection. Users with sufficient rights can turn the firewall on or off directly through the firewall settings in Windows, but it will be forced back again in a few seconds time. Leaving the setting unlocked in the settings profile will allow for local settings to override the value stated in the profile, see the following examples: Profile setting: firewall ON, setting unlocked Setting in Computer protection UI: OFF Result: the Windows Firewall will be forced OFF Profile setting: firewall ON, setting unlocked Setting in Computer protection UI: ON Result: the Windows Firewall will be forced ON Profile setting: firewall ON, setting locked Setting in Computer protection UI: Will be forced ON Result: the Windows Firewall will be forced ON
Article no: 000016070
I am receiving reports from Windows Security Center that "Computer Protection by F-Secure is snoozed". Trying to activate the product through Windows Security Center brings up a dialog asking for admin rights to enable the software. When opening the F-Secure software directly, everything seems to be functioning normally.
This is a temporary state reported by Computer Protection to the Windows Security Center while it is updating its core components. These updates usually take 15-45 seconds to complete, after which Computer Protection will report that it is returning to a fully active state. We report the statuses to Windows Security Center, but we have no further control over how it chooses to display this information to the end users. There is always a possibility that a notification about the product being snoozed might remain visible to end users even after the product has returned to functioning normally and reported that state.
Article no: 000015354
F-Secure Computer Protection / F-Secure SAFE is installed on a Mac computer but the user interface shows that computer is not protected and that the real-time scanning is not activated.
After installation of the Mac product on macOS High Sierra, a red F-Secure (X) icon may appear when running real-time scanning. This is due to a new security feature, which has been introduced in macOS High Sierra (10.13) or higher. During first time installation, the security feature requires you to allow system software from F-Secure. Until the software is allowed, real time scanning will fail.
Once the installation is complete, allow F-Secure software as follows:
Go to System Preferences > Security & Privacy, and select the General tab. Click Allow. Once this is done, the icon status changes to normal and the error message disappears.
Note: The steps described must be performed locally on the machine and not remotely. Full instructions with pictures: https://community.f-secure.com/t5/Business/Issue-with-real-time-scanning/ta-p/100546 ============================================================= In case the mentioned solution above does not work, carry out the following solutions one by one and check if the real time scanning could be enabled. Solution 1:
Check in System Preferences > Security & Privacy > Privacy > Accessibility and remove or disable 3rd party accessibility software such as the Better Touch Tool or MagicPrefs. Go to System Preferences > Security & Privacy. Select the General tab. Click the Allow button.
Check in System Preferences > Keyboard > Shortcuts > Full keyboard access to enable full keyboard access. Go to System Preferences > Security & Privacy, and select the General tab. Use Tab -key to move the focus on the Allow button Press Spacebar on your keyboard while the Allow button is active.
Solution 3: Add F-Secure Team ID (6KALSAFZJC) to the list of approved kext developers by using "spctl kext-consent" command in the Recovery mode. Refer to the following page for more detail information: https://developer.apple.com/library/content/technotes/tn2459/_index.html#//apple_ref/doc/uid/DTS40017658-CH1-TNTAG4
Article no: 000001668
Software Updater is unable to download Java updates. Trying to use the same download link that is written in the logs leads to an error, so it can't be used manually.
Oracle has changed the way Java is licensed. A side effect of this is that Java updates can be downloaded only from the vendor's server with authentication. This stops Software Updater from downloading the Java update. We have published a change to Computer Protection to stop showing Java update as a missing update in Software Updater. After this, you will need to install Java update manually (not via F-Secure Software Updater). At the same time, we are not going to change the Software Updater behavior for the rest of the products. To stop Software Updater from trying to install the problematic Java update automatically, you can exclude the Java Update from the automatic installation by following these steps: If you have a Business Suite product (Client Security or Server Security)
Log in to Policy Manager Console Select the target group from the Domain Tree Go to the Settings tab Select Software Updater Click on Add from the right side of the Exclude software from automatic installation list Use Java as the software name to exclude it
If you have a Protection Service for Business product (Computer Protection or Server Protection)
Log in to the PSB Portal Go to the Profiles page Click the profile you want to edit Select Software updater Click Add software below Exclude software from automatic installation Write Product=Java to exclude Java software from automatic installation
After the change, you will need to install the Java update manually. NOTE: The above mentioned information is also available in the following community article: https://community.f-secure.com/t5/Known-Issues-in/Software-Updater-unable-to/td-p/116932
Article no: 000011585
How to download and install F-Secure Protection Service for Business (PSB) or F-Secure Computer Protection?
To download an install F-Secure Protection Service for Business (PSB) or F-Secure Computer Protection, follow the steps below:
Log in to PSB Portal.
EMEA (PSB1) America (PSB2) APAC (PSB3) EMEA2 (PSB4) EMEA3 (EUSMI)
On the side navigation bar, click Downloads. Select the product that you wish to install to obtain the installer. Run the installer.
Here are the instructions on how to send an installation link via email: https://help.f-secure.com/product.html#business/psb-portal/latest/en/task_4BBCD978718B46C2ACD5D21B65A59DDC-psb-portal-latest-en
Article no: 000001426
I have added a site into the denied list for the Browsing Protection via the Profile Editor. However, the site is not blocked with Browsing Protection enabled in the Computer Protection. Same goes to the allowed site. Why is this happening? Google's search results show the deny rating icon, but when user clicks the link it proceeds to the page.
Check from the PSB profile you are using that the web site exceptions setting is enabled. If it is disabled the allowed sites and denied sites rules are not in use. Follow these steps to enable Web site exceptions:
Log in to the PSB Portal. Go to the Profiles page. Select the profile you want to edit. Go to the Browsing Protection tab. Scroll down until you see the Web site exceptions setting and enable it. Save and publish the profile.
Now the Web site exceptions in the allowed sites and denied sites list are enabled.
Article no: 000005452
I am trying to install F-Secure Computer Protection on a Windows computer and it failed between 80 to 99%. In fsdiag NetworkInstaller.log the following entry found:
*E: MsiMessageCallback: MSI: Service 'F-Secure Hoster (Restricted)' (fsnethoster) failed to start. Verify that you have sufficient privileges to start system services.
*E: MsiHandler::RunMsi: MSI returned code 1603
*E: MsiMessageCallback: MSI: Service 'F-Secure Hoster' (fshoster) failed to start. Verify that you have sufficient privileges to start system services.
*E: MsiHandler::RunMsi: MSI returned code 1603
Follow the workaround below to fix the installation issue: 1. Rename following files to anything else (e.g. vcruntime140_old.dll):
On 64 bit Windows:
On 32 bit Windows:
2. Restart the computer. If the steps above did not help, there is a possibility that registry key HKEY_USERS\S-1-5-20 doesn't have the required permission for NETWORK SERVICE and fsnethoster is unable to create an entry there. Follow the steps below to fix the issue:
Click Start. Type regedit, and press Enter. Navigate to and select registry key HKEY_USERS\S-1-5-20. Select Edit. Select Permissions. Click Add... Type NETWORK SERVICE. Click Check Names (the name should get underlined). Click OK. Check Allow checkbox for Full Control (also Read permission should be automatically allowed). Click Apply. Click OK.
Article no: 000002638
Can I install or update Computer Protection on a Windows PC with no internet access? Can PSB Computer Protection be updated in an offline environment?
Unfortunately, F-Secure Computer Protection cannot be installed or updated without an internet connection.
Article no: 000005700