Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Arellia Application Control Solution 8.0 introduced the ability to target targets applications based upon on where they were downloaded from . This means that customers can now so that you can choose to allow standard users to install signed software from approved websites.

Info

Feature introduced in Arellia 8.0

Steps

...

To set up a Download Source Filter, do the following steps:

  1. In the Thycotic Security Manager, click Policies
  2. In the file library in the left pane, navigate to Policies > Thycotic Solutions > Application Control > Filters > My Filters Filters. 
  3. Right-click on the My Filters Filters folder and select click New > Dynamic File Filters > Download Source Filter Name the new filter and set the host informationIf Filter.
    Image Added
  4. In the Create Item dialog box, enter the Name and Description.

    Image Added 
     
  5. In the right pane, click the following settings:
    1. If, for example, you want to target all of adobe.com and all sub-domains of adobe.com, use a partial match type for adobe.com
    2. You can also target a specific sub-domain and directory of a website, such as ftp.hp.com/pub/softpaq/
    Image Removed
  6. Save the filter
  7. Navigate to Policies > Arellia
    1. then in the Match Type menu choose Partial.
    2. In the Download host field enter adobe.com.
    Image Added
  8. Click Save.

To set up the privilege elevation policy, do the following steps:

  1. In the file library in the left pane, navigate to Policies > Thycotic Solutions > Application Control > Policies Policies.
  2. Right-click Policies and select click New > Elevate Process Rights Set Process Rights. 
    Image Added
  3. In the Create Item dialog box, enter the Name and Description.
  4. In the right pane under Settings, next to Applications click the Select link. 
    Image Added 
  5. Highlight and choose the applications the policy should target to the new download source filter created in step 2.you created previously.
  6. Click Save.

 

Tip
titleNote

For additional security,

...

we recommend you

...

include a

...

signed file filter that uses trusted certificate(s) from that domain.

...

 

This policy will now automatically elevate applications downloaded from adobe.com and signed by the current Adobe certificate. 

...