There are two different types of filters: Dynamic Filters and (Static) File Filters
Dynamic Filters - Dynamic filters are used for specific types of purposes and users i.e., such as Interactive and Non-interactive Users. Will look at , and they evaluate the context around when something was applications are run. Dynamic Filters - These filters are evaluated by the Arellia Management Server (AMS) and are evaluted at runtime and are not tied to the particular application being run but by other factors. For example, they are used to apply security policies to applications not yet discovered but commonly used or downloaded.
Info |
---|
Dynamic Filters are evaluted at runtime and are not tied to the particular application being run but by other factors |
...
Types of Dynamic filters
The following types of built-in Dynamic filters are available in the Application Control Solution:
- Application Context Filters - These filters are evaluated by the AMS and are used to apply security policies to applications in a user context.
- Command Line Filters - A commandline filter examines the commandline (excluding the primary executable) and applies a pattern match (Exact, Partial or Regular Expression).
- Environment Variables Filters - New to ACS 7.1 SP3 these These filters are used for compatibility testing and user requested elevation.
- Network Location Filters - These filters are used to identify what network a computer is attached to.
- Secondary File Filters - A Secondary File filter addresses the situation where the intended action is not the primary executable (such as RunDll.exe), but rather a file specified within the commandline. It examines the commandline of an application to see whether there appears to be a secondary file. If so the secondary file filter applies the specified filters to the secondary file.
- Signed Application Filters - These filters are used to filter applications based on their digital certificate.
- Time of Day Filter - These filters allow an application filter to be applied based on the specific time an application is launched. The time details can be set individually for each day of week, or applied to the same period on all days.
- User Context Filters - These filters are evaluated by the Altiris Agent and are used to apply security policies to applications in a user context.
Drilldown to specific Dynamic Filter types
Child pages (Children Display) | ||||||||
---|---|---|---|---|---|---|---|---|
|
Dynamic Filters
...
Application Context Filters
...
Description
...
Interactive Users
...
You can apply policies to applications with interactive users. Select the appropriate check box and enter policy details in the fields provided.
...
LocalSystem and Service applications
...
You can apply policies to LocalSystem and Service applications. Select the appropriate check box and enter policy details in the fields provided.
...
Service Applications
...
You can apply policies to Service applications. Select the appropriate check box and enter policy details in the fields provided.
...
Commandline Filters
...
Description
...
...
You can create application filters that are based on the commandline of the running application.
- Enter a filter name and description.
- Enter the Match Option you want to search for.
- Enter the Command line text you are searching for.
...
Environment Variables Filters
...
Description
...
Manual Application Compatibility Setting
...
You can use this predefined filter for application compatibility.
...
User Requested Run As Administrator
...
You can use this predefined filter for the right click self-elevate option.
...
Network Location Filters
...
Description
...
...
You can create application filters that are based on which network the computer is attached to.
- Enter a filter name and description.
- Select an Item that you want to filter on.
...
Secondary File
...
Description
...
...
You can create application filters that are based on the applications file target which is taken from the commandline.
- Enter a filter name and description.
- Select an Item that you want to filter on.
...
Signed Applications
...
Description
...
Microsoft Signed Applications
...
You can create a filter by associating a digital certificate.
- Enter a filter name and description.
- Include Digital Certificates - All files signed by a selected digital certificate will be included in this filter. For information on editing collections, see Notification Server Help.
...
Time of Day
...
Description
...
- Business Hours (8:30AM to 5:30PM)
- Business Hours (8AM to 6PM)
- Business Hours (9AM to 5PM)
- Weekends
...
You can create a filter using certain hours.
- Enter a filter name and description.
- Select that time period(s) that you want to filter on.
...
User Context
...
Description
...
...
- .