Overview

The Application Control Solution lifecycle is represented by the following graphic:

Understanding File Discovery

After installing Application Control Solution, you must install the File Inventory Agent on managed computers. Installing the File Inventory Agent lets you obtain a list of files that were discovered on the computers. The File Inventory Agent uses two policies to obtain inventory:

• Default File Discovery Policy - Creates an inventory of applications that are installed on the managed computer.
• Default File Inventory Policy - Collects information about specific applications, such as Win32 Executable and Digital Certificate information.

For more information, see File Inventory Agent Configuration.

Understanding Application Control Policies

You can use Application Control Policies to apply security policies to the applications on managed computers. The policy you create determines how an application runs and is used. Each policy has the following attributes associated to it:

Application Action

You can define an action to be applied before an application is run. The default application actions you can apply are:

• Deny file access
• Encrypt Application Files
• Display a User Message when you run an application action
• Restrict or elevate an application's process rights
• Quarantine files
• Run an application in a Software Virtualization Solution layer

Application Filter

Define the applications that will be associated to the Application Control Policy. For information, see Application Filters.