Overview

The Application Control Solution lifecycle is represented by the following graphic:

Understanding File Discovery

After installing Application Control Solution, you must install the File Inventory Agent on managed computers. Installing the File Inventory Agent lets you obtain a list of files that were discovered on the computers. The File Inventory Agent uses two policies to obtain inventory:

• Default File Discovery Policy - Creates an inventory of applications that are installed on the managed computer.
• Default File Inventory Policy - Collects information about specific applications, such as Win32 Executable and Digital Certificate information.

For more information, see File Inventory Agent Configuration.

Understanding Application Control Policies

You can use Application Control Policies to apply security policies to the applications on managed computers. The policy you create determines how an application runs and is used. Each policy has the following attributes associated to it:

• Application Action
• Application Filter

Application Action

You can define an action that is applied before an application is run. You can apply the following default application actions:

• Deny file access.
• Encrypt application files.
• Display a user message when you run an application action.
• Restrict or elevate an application's process rights.
• Quarantine files.
• Run an application in a Software Virtualization Solution layer.

Application Filter

You can efine the applications that are associated with the Application Control Policy. For information, see Application Filters.