Application Controls - Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 - ADMINISTRATION Administration Manual

Macro
[EthernetMulticast]
[IpSubnetBrdcast]
[Snap]
[LLC]
[Allow8021X]
[Gateway]
[GatewayAll]
[Wins]
[WinsAll]
[Dns]
[DnsAll]
[Dhcp]
[DhcpAll]

6.3.10 Application Controls

This feature allows the administrator to block applications either from gaining network access, or
from simply executing at all.
NOTE: This feature is only available in the ZENworks Endpoint Security Management installation,
and cannot be used for UWS security policies.
To access this control, open the Locations tab, click the "+" symbol next to Firewall Settings, click
the "+" symbol next to the desired Firewall, and click the Applications Controls icon in the policy
tree on the left.
136 ZENworks Endpoint Security Management Administration Guide
Description
Allow Ethernet Multicast packets.
Allow Subnet Broadcast packets. Subnet broadcasts are used to send packets
to all hosts of a subnetted, supernetted, or otherwise nonclassful network. All
hosts of a nonclassful network listen for and process packets addressed to the
subnet broadcast address.
Allow Snap encoded packets.
Allow LLC encoded packets.
Allow 802.1x packets. To overcome deficiencies in Wired Equivalent Privacy
(WEP) keys, Microsoft and other companies are utilizing 802.1x as an
alternative authentication method. 802.1x is a port-based, network access
control, which uses Extensible Authentication Protocol (EAP), or certificates.
Currently, most major wireless card vendors and many access point vendors
support 802.1x. This setting also allows Light Extensible Authentication
Protocol (LEAP) and WiFi Protected Access (WPA) authentication packets.
Represents the current IP configuration Default Gateway address. When this
value is entered, the Endpoint Security Client allows all network traffic from the
current IP configuration Default Gateway as a trusted ACL.
Same as [Gateway] but for ALL defined gateways.
Represents current client IP configuration Default WINS Server address. When
this value is entered, the Endpoint Security Client allows all network traffic from
the current IP configuration Default WINS server as a trusted ACL.
Same as [Wins] but for ALL defined WINS servers.
Represents current client IP configuration Default DNS server address. When
this value is entered, the Endpoint Security Client allows all network traffic from
the current IP configuration Default DNS server as a trusted ACL.
Same as [Dns] but for ALL defined DNS servers.
Represents current client IP configuration Default DHCP server address. When
this value is entered, the Endpoint Security Client allows all network traffic from
the current IP configuration Default DHCP server as a trusted ACL.
Same as [Dhcp] but for ALL defined DHCP servers.