Configuring System Control; System Control Configuration Settings - F-SECURE CLIENT SECURITY 8.00 Administrator's Manual

5.4

Configuring System Control

5.4.1

System Control Configuration Settings

F-Secure System Control is a new, host-based intrusion prevention
system that analyzes the behavior of files and programs. It can be used to
block intrusive ad pop-ups and to protect important system settings, as
well as Internet Explorer settings against unwanted changes.
If an application tries to perform a potentially dangerous action, it will be
checked for trust. Safe applications are allowed to operate, while actions
by unsafe applications are blocked.
When System Control is enabled, you can configure Application Control
in such a way that it asks users what to do only in those cases when
System Control does not trust an application.
To enable System Control, select the Enable System Control check box.
You can select what to do when a system modification attempt is
detected. The following actions are available:
Action
Always ask
permission
Ask when case is
unclear
Automatic: Do not
ask
Definition
System Control asks the users whether they
want to allow or block all monitored actions,
even when System Control identifies the
application as safe.
System Control asks the users whether they
want to allow or block monitored actions only
when System Control cannot identify the
application as safe or unsafe (default option).
System Control blocks unsafe applications and
allows safe applications automatically without
asking the user any questions.
CHAPTER 5 169