Overview

After installation, This illustrates everything that happens within the Application Control Solution lifecycle is represented by the following graphic:

Image Removed

...

.

Image Added

File discovery

After installing Application Control Solution, you must install the File Inventory Agent on managed computers to . Installing the File Inventory Agent lets you obtain a list of files that were discovered on the computers. The File Inventory Agent uses two policies to obtain inventory:

• Default File Discovery Policy - Create Creates an inventory of applications that are installed on the managed computer.
• Default File Inventory Policy - Collect Collects information about specific applications, such as Win32 Executable and Digital Certificate information.

For more information, see File Inventory Agent Configuration.

...

Application Control

...

policies

Use You can use Application Control Policies to apply security policies to the applications on managed computers. The policy you create determines how an application can be run runs and is used. Each policy has the following attributes associated to it:

• Application

...

• Actions
• Application Filters

Application action

You can define an action to be that is applied before an application is run. The You can apply the following default application actions you can apply are:

...

:

• Application Metering.
• Deny File Access.
• Encrypt Application Files.
• Messages: Display a User Message user message when you run an application action.
• Process Rights: Restrict or elevate an application's process rights.
• Quarantine: Allows you to quarantine files.
• SVS Layers: Run an application in a Software Virtualization Solution layer.

Application

...

filters

Define You can define the applications that will be are associated to with the Application Control Policy. For information, see Application Filters Summary.