Application Control policies

To View Standard Application Control Policies

1. From the Arellia Security Management Console, go to the Policies tab.
2. Navigate to Arellia / Application Control / Policies.
3. Select New. A list of (standard) Application Control Policies appears.

The following is a list of standard Application Control Policies shipping in 7.5:

• Application Compatibility Testing Policy
• Application Control Test Policy
• Automate Document Encryption
• Deny Application Execution
• Elevate Process Rights
• Meter Application Usage
• Package Contents Whitelist
• Restrict Process Rights
• Run Application in Read-Only Mode
• Run Application in Workspace Virtualization Layer

To Create a New Application Control Policy

• Right-click Policies and select New /Blank Application Control Policy.

Step 1 - Define what application(s) to control

• To select the application that you want to target with this policy, click Select applications to control.. next to Applications:
• (Optional) If a filter needs to be created, refer to Application Filters to know which kind to create.
• In the Select Items dialog, select a collection and click OK.  You can select multiple filters if you want.
• (Optional) Conditions can be specified that filter the specified Application filter further.

Step 2 - Select Actions

Select the Application Actions Tab to specify the actions attached to this policy and whether or not this policy sends feedback to the server.

To add an action to the policy

• Next to Actions, select Application action, and then click Select...
• In the Select Items dialog, select an application action or actions from the Available items and Ok changes.(More than one action can be selected)

To add your own application action:

• In the left pane,right-click on the action type you would like to create and select New / item type.
• Select the new item you have created.
• In the right-pane, enter a name, description and other necessary info for that action.
  For details on what you can configure for each action, see Application Actions.

To add an action to any Child Process select:

• Same as Above - Apply the application action to any child process.
• Use Different Action - Choose Click to select, select an application in the Select Items dialog, and Save changes.
• (Optional) Click Send the Notification Server an event if these actions are applied.
• Save changes.

Step 3 - Policy Enforcement

Enter general policy details and enforcement options.

• Enable the policy using the On/Off toggle.
• Enter a policy name and description in the fields provided.
• Select your policy enforcement options:
  • Policy Priority - Enter a policy priority to determine its order in relation to other policies.
  • Continue enforcing policies after enforcing this policy - Continues enforcing lower priority policies after enforcing this policy.
  • Continue enforcing policies for child processes after enforcing this policy - Continues enforcing lower priority policies for child processes after enforcing this policy.
  •  Stage 2 Processing
  • Applies to all processes
• Save changes.