Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Application Filters

An application filter defines the applications (groups of files) that can be restricted by an Application Control Policy. There are two types of filters, Dynamic and Inventory.  They, along with their subtypes are listed below:

...

  • In the Symantec Management Console, on the Home menu, click Arellia > Application Control
  • In the left pane, select Policies > Application Control > Application Control Tasks > Application Filters

Dynamic Filters

 These filters are evaluated by the Altiris Agent and are used to apply security policies to applications not yet discovered but commonly used or downloaded.

...

Executable Filters

 

Instant Messaging Applications -

  • AOL Instant Messenger
  • Google Talk
  • MSN Messenger
  • Skype
  • Trillian
  • Windows Messenger
  • Yahoo! Messenger

You can apply security policies to any of the listed Instant Messaging applications. If any of these applications are installed in the future, you can automatically add them to a policy. You can:

  • Enter a filter name and description.
  • Enter a File name and File path in the fields provided.
  • (Optional) Click Include subdirectories if you wish to filter them.
  • Enter Win32 Executable File Information:
    • Internal Name
    • Original file name
    • File version
    • Product name
    • Product version
    • Company name

Internet Browsers - 

  • Firefox
  • Internet Explorer

You can apply a security policy to the listed Internet applications. You can configure it the same as Instant Messaging Applications, above.

Mail Clients - 

  • Eudora
  • Outlook Express

You can apply a security policy to the listed mail applications. You can configure it the same as Instant Messaging Applications, above.

Media Players - 

  • iTunes
  • Microsoft Windows Media Player
  • QuickTime
  • RealPlayer
  • Winamp

You can apply security policies to the listed Media Player applications. If any of these applications are installed in the future, you can automatically add them to a policy. You can configure them the same as Instant Messaging Applications, above.

MS Office Suite - 

  • MS Access
  • MS Excel
  • MS FrontPage
  • MS Outlook
  • MS Word

You can apply security policies to the listed Microsoft Office Suite applications. If any of these applications are installed in the future, you can automatically add them to a policy. You can configure them the same as Instant Messaging Applications, above.

Microsoft Installer File Filter

You can configure them the same as Instant Messaging Applications, above.

Win32 Executable File Filter

You can configure them the same as Instant Messaging Applications, above.

Secondary File

You can create application filters that are based on the applications file target which is taken from the commandline.

  • Enter a filter name and description.
  • Select an Item that you want to filter on.

Signed Applications

  • Microsoft Signed Applications

You can create a filter by associating a digital certificate.

  • Enter a filter name and description.
  • Include Digital Certificates - All files signed by a selected digital certificate will be included in this filter. For information on editing collections, see Notification Server Help.

Time of Day

  • Business Hours (8:30AM to 5:30PM)
  • Business Hours (8AM to 6PM)
  • Business Hours (9AM to 5PM)
  • Weekends

You can create a filter using certain hours.

  • Enter a filter name and description.
  • Select that time period(s) that you want to filter on.

User Context

You can create filters based on the group membership of the user.

Inventory Filters

These collection-based filters are evaluated by the Notification Server and depend on file inventory data. They are used to apply application control policies for already discovered applications.

...