Endpoint Protection

Hi,

I have some queries , kindly reply me with help full information.

 

• Trusted Publisher software to be excluded from black listing.
• Patches of Windows / Applications needs to be excluded from black listing.
• Drivers Applications/softwares from trusted vendors like HP, Dell, Acer etc needs to be excluded from black listing.

we are going to deploy and implement Application and device control policie we need know either it is posible to allow and block application on basis of publishers.

suppose i block application by wild card * and want to allow only microsoft and abobe,s all applications?

will sep allow the patches of allowed applicatoin to be installed ?

regards

shoaib latif

Everything will be excluded. You need to right ADC rules to apply to the software you want to allow/block. Make sure to include the paths of all relative files. You can write rules to block based on publisher but as far as I know there isn't a signature already in place to block by default. Everything needs to be written from ground up. Although they already do have some preconfigured policies.

I have a similar requirement to allow/block application based on publisher signature? any one know how to do it or have done it?