Performance degradation: WithSecure Atlant, Linux Security 64

This incident has been resolved.

Issue has been resolved after the HTTP proxy is setup to allow the connections to WithSecure backends.

We are investigating reports of performance degradation of WithSecure Atlant and Linux Security 64 in some restricted environments since 2nd of September 2024.
Further symptoms that may be visible are:
- slow login to the server
- SSH/HTTPS connections failing
- Services or databases processing is slow
To resolve the issue, we recommend to review your firewall configuration and ensure the product can communicate to our backend services.
See https://community.withsecure.com/en/kb/articles/31208-network-addresses-for-withsecure-on-premise-products for detailed instructions.
Alternatively, you can disable non-essential network services from the product by enabling offline mode:
For Linux Security 64:
/opt/f-secure/fsbg/bin/offline-mode enable
For Atlant:
/opt/f-secure/atlant/fsbg/bin/offline-mode enable
If the number of affected Linux servers is high that the offline mode is difficult, you can consider to disable Security Cloud feature by going to the following settings on Policy Manager Console.
For Linux Security 64:
Settings > Linux > Real-time scanning > uncheck "Use Security Cloud"
For Atlant:
Settings > Atlant > Scanning service > uncheck "Check file reputation" and "Check URL reputation"
It is also possible to disable the Security Cloud feature locally on Atlant server by using the "atlantctl" command utility tool.
/opt/f-secure/atlant/atlant/bin/atlantctl set scanning reputation file_check false
/opt/f-secure/atlant/atlant/bin/atlantctl set scanning reputation url_check false

In case of Elements EPP for Servers (Linux) or Linux Protection with the restricted internet access that may encounter the same issue, we recommend to allow the connections to our backend services indicated in the following community article.

https://community.withsecure.com/en/kb/articles/31217-network-addresses-for-withsecure-elements-cloud-managed-products

Alternatively, you can disable non-essential network services from the product by enabling the offline mode or disable Security Cloud feature in the profile configurations.

To enable offline mode:
/opt/f-secure/fsbg/bin/offline-mode enable

To disable Security Cloud in Linux profile:
Basic > Real-time scanning > Unknown files reputation > turn off "Use Security Cloud" setting

We are investigating reports of performance degradation of WithSecure Atlant and Linux Security 64 in some restricted environments since 2nd of September 2024.

Further symptoms that may be visible are:
- slow login to the server
- SSH/HTTPS connections failing
- Services or databases processing is slow

To resolve the issue, we recommend to review your firewall configuration and ensure the product can communicate to our backend services.
See https://community.withsecure.com/en/kb/articles/31208-network-addresses-for-withsecure-on-premise-products for detailed instructions.

Alternatively, you can disable non-essential network services from the product by enabling offline mode:

For Linux Security 64:
/opt/f-secure/fsbg/bin/offline-mode enable

For Atlant:
/opt/f-secure/atlant/fsbg/bin/offline-mode enable

If the number of affected Linux servers is high that the offline mode is difficult, you can consider to disable Security Cloud feature by going to the following settings on Policy Manager Console.

For Linux Security 64:
Settings > Linux > Real-time scanning > uncheck "Use Security Cloud"

For Atlant:
Settings > Atlant > Scanning service > uncheck "Check file reputation" and "Check URL reputation"

It is also possible to disable the Security Cloud feature locally on Atlant server by using the "atlantctl" command utility tool.

/opt/f-secure/atlant/atlant/bin/atlantctl set scanning reputation file_check false
/opt/f-secure/atlant/atlant/bin/atlantctl set scanning reputation url_check false

We are investigating reports of performance degradation of WithSecure Atlant and Linux Security 64 in some restricted environments since 2nd of September 2024.

Further symptoms that may be visible are:
- slow login to the server
- SSH/HTTPS connections failing
- Services or databases processing is slow

To resolve the issue, we recommend to review your firewall configuration and ensure the product can communicate to our backend services.
See https://community.withsecure.com/en/kb/articles/31208-network-addresses-for-withsecure-on-premise-products for detailed instructions.

Alternatively, you can disable non-essential network services from the product by enabling offline mode:

For Linux Security 64:
/opt/f-secure/fsbg/bin/offline-mode enable
For Atlant:
/opt/f-secure/atlant/fsbg/bin/offline-mode enable