How Signed Application Filters Can Be Used
These filters can be used in several of the following ways:
- A target for ACS policies
- A parameter to prevent spoofing
Signed application filters use certificates as a parameter. They can use one or many certificates in a single signed application filter.
For example:
Adobe (TM) requires several certificates that are used to sign applications.
Because of this, you may want all applications signed by Adobe to be whitelisted, so that a signed application filter targeting Adobe Certificates allows all applications signed by Adobe to run.
Targeting the latest Adobe Flash Installer via a Win32 Executable filter and then using the signed application filter ensures that the application really is the adobe flash installer. The Signed Application Filter works as a validation filter for applications.