Blocking Unauthorized Files and Applications

As compliance for business, users must not access unauthorized applications and files. This will help to increase the productivity of every employee of a company.

For Unauthorized Files such as MP3s, AVIs, etc.

Symantec can only block specific filenames and file type extension. Smart users can bypass this blocking by renaming its file type extension.

Recommendation:

File types should be blocked using header file and not file type extensions.

For Unauthorized Applications such as Games, Instant Messaging etc.

Just like file blocking, only the file names and its hash values can only be blocked. The problem here is once the application has a newer version, it is very hard to manage all hash values. 

Recommendation: 
Symantec will automtically collect the newest version of the application and make a unique signature for daily update downloads.