Arellia Application Control Solution 8.0 introduced the ability to target applications based upon where they were downloaded from. This means that customers can now choose to allow standard users to install signed software from approved websites.
Feature introduced in Arellia 8.0
Steps
- Navigate to Policies > Arellia Solutions > Application Control > Filters > My Filters
- Right-click on My Filters and select New > Dynamic File Filters > Download Source Filter
- Name the new filter and set the host information
- If you want to target all of adobe.com and all sub-domains of adobe.com, use a partial match type for adobe.com
- You can also target a specific sub-domain and directory of a website, such as ftp.hp.com/pub/softpaq/
- Save the filter
- Navigate to Policies > Arellia Solutions > Application Control > Policies
- Right-click Policies and select New > Elevate Process Rights
- Set the applications the policy should target to the new download source filter created in step 2.
- For additional security, Arellia recommends that you also include a Signed File Filter that uses trusted certificate(s) from that domain
This policy will now automatically elevate applications downloaded from adobe.com and signed by the current Adobe certificate.