Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Determining which policy is applying being applied to a process is useful when trying to diagnose diagnosing whether or not a policy is being applied correctly. Below are steps for the Arellia 8.0 Application Control Agents. 

To determine if a policy is being applied to a process, do the following steps: 

  1. Open the Arellia Agent Logs (for instructions on opening and viewing agent logs, go to Viewing the Agent Logs).
  2. If a policy is being applied to a process, then you will see the following log message:
    The log message will read – "Policy {F289D632-9665-40B0-BC19-0FE8A899A107} (priority 45) applies to process 3468 via Process 3468 (C:\Location\NameOfApplication.exe)  Source: CASMonitor Module: ArelliaACSvc.exe Exe: ArelliaACSvc.exe."
  3. You can look up the policy in the Security Manager by Console by using the GUID from the log message like soin a URL like the following examplehttp://NameOfServer/Ams/SecurityManager#/Policies/f289d632-9665-40b0-bc19-0fe8a899a107

If a policy does

...

not apply, then the log message will read: "No policies applies to process 2028 (C:\Location\NameOfApplication.exe)  Source: CASMonitor Module: ArelliaACSvc.exe Exe: ArelliaACSvc.exe."