The Application Control Tab - Internet Security Systems RealSecure User Manual

Appendix B: Configuration Tabs

The Application Control Tab

Introduction
Enable Application
Protection
ICEcap control
Application Control
settings
Protect Agent Files
More information
84
Use the Application Control tab to prevent unauthorized applications from starting on
your system.
When Enable Application Protection is selected, Desktop Protector monitors your system
for unauthorized applications. This option is cleared by default.
Enabling or disabling this feature also enables or disables the Communications
Note:
Control feature. See "The Communications Control Tab" on page 86.
For information on how to manage your Application Protection settings, see "Working
with the Application Protection Baseline" on page 42.
If the Enable Application Protection option is dimmed, ICEcap Manager to which this
Desktop Protector installation reports has blocked the local user from starting or stopping
Application Control from the local system. Application Control can be started or stopped
only by a remote command from ICEcap.
This table describes the settings you can configure on the Application Control tab.
This setting... Has this effect...
When an unknown application starts:
Ask me what to do When an application that is not in your system baseline attempts to
start, Desktop Protector asks you if you want to shut it down.
Always terminate the When an application that is not in your baseline attempts to start,
application Desktop Protector shuts it down.
When a modified application starts:
Ask me what to do An application is in your baseline but has been modified since the last
time you created or updated your baseline. When the application
attempts to start, Desktop Protector asks you if you want to shut it
down.
Always terminate the An application is in your baseline but has been modified since the last
application time you created or updated your baseline. When the application
attempts to start, Desktop Protector shuts it down.
When Protect Agent Files is selected, RealSecure Desktop Protector locks the BlackICE
program files and the files that contain your known applications list and communications
control settings. Only Desktop Protector can write to these files.
For more information on how to choose your Application Control options, see "Working
with the Application Protection Baseline" on page 42 and "Advanced Application
Protection Settings" on page 99.