Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Application Control not working

Created: 10 Feb 2012 | 5 comments
jcnelite's picture
0 0 Votes
Login to vote

Hi,
 

I tried to implement an application and device control policy.

 

Application control : block execution of *.MP3 files

- One rule for all processes (*)

- One condition on file/folder control (*.mp3) with block and notification as actions

 

Device control: desactivate USB device.

 

The policy is well applied on computers because I can see that USB devices are blocked successfully.

But whatever I put in the application control, nothing is blocked or notified on workstations.

Workstations are Windows XP SP3

SEP clients version 11 RU6

Any idea ?

Comments

Swapnil's picture
10
Feb
2012
0 Votes 0
Login to vote

http://www.symantec.com/secur

http://www.symantec.com/security_response/security...

Swapnil

SOC Team .

Please don't forget to mark your thread solved with whatever answer helped you.

Swapnil's picture
10
Feb
2012
1 Vote +1
Login to vote

https://www-secure.symantec.c

https://www-secure.symantec.com/connect/downloads/...

Swapnil

SOC Team .

Please don't forget to mark your thread solved with whatever answer helped you.

greg12's picture
11
Feb
2012
0 Votes 0
Login to vote

My favourite Application Control mistakes ...

  • forgetting the asterisk in the process list of the rule
  • forgetting to activate the ruleset
  • forgetting to switch the ruleset from "Test" to "Production" (that can be easily overlooked because "Test" is the default value)
sumitgupta786's picture
12
Feb
2012
0 Votes 0
Login to vote

Try the link which has attach

Try the link which has attach by swapnil. It help you to close the issue...

Regard

Sumit G.

Swapnil's picture
16
Feb
2012
0 Votes 0
Login to vote

Any update on this did it

Any update on this did it work ?

Swapnil

SOC Team .

Please don't forget to mark your thread solved with whatever answer helped you.