Endpoint Protection

Hi

This is what im trying to do, we would like to create a whitelist of applications that are allowed to be used / installed within the buisness.

If the application is not on the whitelist then the application needs to be prevented from installing / running.

Is this possible?

Thanks

Yes you can do this

It's part of the System Lockdown feature:

Configuring system lockdown

Automatically updating whitelists or blacklists for system lockdown

Enabling system lockdown to run in whitelist mode

Thank you Brian, you have been most helpful :-)

Happy to help, please check back if you have other questions :)

Brian, quick question, as we are starting to look at implementing the system lockdown feature, I wanted to ask about precedence, currently the SEPM firewall has a rule in it to allow all applications, once we activate the system lockdown feature and begin creating the fingerprint files to be used, does the lockdown feature take precedence over the firewall rule that has been set, sorry if this is a silly question, thanks

These are two different components.

The firewall can only block/allow application traffic. System lockdown would prevent applications from running on the system. Something the firewall cannot do.

Thanks Again

You're welcome :)