Internet Security Systems RealSecure User Manual page 51

Building your
baseline over time
Application
Protection alerts
Application file
types
3. Repeat for every warning message that appears. The number of messages you see
depends on how many files the application runs. BlackICE will not display the
warning messages again unless the application changes.
Desktop Protector can learn your application protection preferences as you work. You can
have Desktop Protector ask you for a decision on each program as it launches.
To update your baseline as you work:
1. On the Tools menu, select Edit BlackICE Settings, then select the Application Control
tab.
2. Select an option under When an unknown application launches.
To have Desktop Protector check with you when it detects an application you have
I
not explicitly allowed to run, select Ask me what to do. This is the default.
To have Desktop Protector automatically shut down any application you have not
I
allowed to run, select Always terminate the application.
If you have enabled the Application Protection component and selected Ask me what to
do, Desktop Protector alerts you when an unknown application starts. For information
about how to respond to these alerts, see "Responding to Application Protection Alerts"
on page 56.
To avoid false positives, update your application protection baseline every time
Note:
you install new software. Installing a new application can change some helper files, such
as DLLs, that are already in your baseline. Desktop Protector may flag these as "modified
files" until you update your baseline.
Desktop Protector determines which files are included in the baseline from the file name
extensions. Desktop Protector currently checks for these application file types:
Extension File Type
dll Dynamic link library, a collection of resources that enable a
program file to do its job
drv
Driver, a small program that enables a device or service to work
exe
Executable file, containing program instructions
ocx
Special-purpose program for functions such as scroll bar
movement and window resizing in Windows applications
scr
Screensaver program
sys Files that control basic operating system functions
vxd "Virtual device" that enables other software to work
Working with the Application Protection Baseline
43