Configuring Application Control Settings

Worry-Free Business Security Services provides the following methods to block applications from executing on endpoints. You can choose the method that meets your requirements.
  • Blocked Application List: Select applications to block from the Trend Micro Certified Safe Software List. You can block applications by category, vendor, or application name. Trend Micro updates the Trend Micro Certified Safe Software List periodically to include new applications.

  • Blocked Path List: Add specific file or folder paths to block.

  1. Go to the Configure Policy screen by performing one of the following:
    • Classic Mode: Go to SECURITY AGENTS and select a group. Click > Configure Policy.

    • Advanced Mode: Go to POLICIES > Policy Management. Click Add or click an existing policy.

  2. Click Windows.
  3. Go to Application Control.
  4. Under Application Control, enable the feature and configure the required settings.
  5. Under Blocked Application List, select applications to block from the Trend Micro Certified Safe Software List.
    1. Click Manage Applications.
    2. Select a category.
    3. Select the applications to block.
      Tip:
      • To block all applications within a category, select the Application column heading.

      • Trend Micro updates the Trend Micro Certified Safe Software List periodically to include new applications. To automatically block these new applications, select a category and enable Block new applications added to the %CATEGORY% category.

    4. Click OK.

      Worry-Free Business Security Services adds the applications to the Blocked Application List and downloads the files that are used to match the selected applications.

      For applications that receive updates frequently, Trend Micro also updates the Trend Micro Certified Safe Software List constantly to provide the latest information. Worry-Free Business Security Services needs to download the files again when the selected applications receive updates. Depending on the number of applications you selected, file downloads might consume your network bandwidth.

      The following table describes the update frequency and download size to expect for some applications. Example 1 includes two applications that tend to receive updates frequently, and the download size might take up to 3.9 MB per month. Example 2 includes two applications that receive less updates, and the download size might only take up to 438 KB per month.

       

      Blocked Application

      Average Updates per Month

      File Size

      Average Download Size per Month

      Example 1

      Dropbox

      5 - 10

      185 KB

      925 - 1850 KB

      Google Chrome

      3 - 6

      353 KB

      1059 - 2118 KB

      Example 2

      LINE

      2 - 4

      21 KB

      42 - 84 KB

      Remote Desktop Manager

      2 - 3

      118 KB

      236 - 354 KB

  6. Under Blocked Path List, configure the programs to block from executing on the endpoints.
    Note:

    To apply the settings to Windows server platforms, ensure that you configure the Unauthorized Change Prevention Service for Windows servers in Target and Service Settings.

    1. Click Add.
    2. Specify the file or folder path to block.

      Examples:

      C:\Program Files\Skype\Phone\Skype.exe

      C:\Program Files\Adobe

      The following table lists the paths that you cannot use.

      Table 1.

      Path

      $programdir$\Trend Micro\Client Server Security Agent

      $programdirx86$\Trend Micro\Client Server Security Agent

      C:\Program Files\Trend Micro\Client Server Security Agent

      C:\Program Files (x86)\Trend Micro\Client Server Security Agent

      $programdir$\Trend Micro\BM

      $programdirx86$\Trend Micro\BM

      C:\Program Files\Trend Micro\BM

      C:\Program Files (x86)\Trend Micro\BM

      $programdir$\Trend Micro\WFBSSUpdater

      $programdirx86$\Trend Micro\WFBSSUpdater

      C:\Program Files\Trend Micro\WFBSSUpdater

      C:\Program Files (x86)\Trend Micro\WFBSSUpdater

      $programdir$\Trend Micro

      $programdirx86$\Trend Micro

      C:\Program Files\Trend Micro

      C:\Program Files (x86)\Trend Micro

      Note:
    3. Optionally provide a note regarding the reason to block the program.
    4. Click Add.

      Worry-Free Business Security Services adds the path to the Blocked Path List.

  7. Click Save.