Working With The Application Protection Baseline - Internet Security Systems RealSecure User Manual

Chapter 4: Configuring RealSecure Desktop Protector

Working with the Application Protection Baseline

Introduction
Updating the
baseline
Creating a new
baseline
Adding an
application to your
baseline
42
When you install RealSecure Desktop Protector, it creates a baseline record (also known as
a checksum) of the applications installed on your computer. Desktop Protector uses this
information to prevent any unauthorized applications from running. When Desktop
Protector alerts you that an unknown application is starting, you can stop the application
or let it run. If you let it run, Desktop Protector can remember your choice or require new
authorization every time the application starts.
After you install or update software, you must add each new or upgraded application to
the baseline so that BlackICE recognizes that it is an approved application. There are two
ways to add an application to the baseline:
create a new baseline
G
start the new or upgraded application and tell Desktop Protector to include it in the
G
existing baseline
To get the full benefit of Application Protection, scan your system for viruses
Important:
with an anti-virus program to make sure it is free of dangerous applications before you
update your system's baseline. It is a good idea to run your anti-virus scan in both normal
and safe mode.
To create a new baseline:
1. On the Tools menu, select Advanced Application Protection Settings.
The Advanced Application Protection Settings window appears.
2. Click the Baseline tab.
3. Expand the folder tree.
4. Select the folders to include in your baseline by checking the box next to the folder
name. If you select a folder that contains subfolders, Desktop Protector inspects all the
subfolders in that folder.
To include the whole drive in the baseline, check the box next to the drive letter at
Tip:
the top of the tree.
5. Click Save Changes.
Desktop Protector begins creating a baseline of the application files that are installed
in the folders you chose.
This process can take several minutes, depending on the size of the folders.
Note:
6. To check the list of applications Desktop Protector created, click Known Applications.
To add an application to your baseline after you have installed or upgraded the
application:
1. Start the application.
Desktop Protector alerts you that an unknown or modified application is trying to
start.
2. In the warning message window, select Allow the application to launch and Don't
ask me again.