Add or Edit Policies: Specify Rules for Application Control Policies

Application Control > Policies | Add > Select Account > Specify Rules

Application Control > Policies | Policy Name | Rule (to edit an existing policy)

Adding an Application Control policy is a two-step procedure. First, you create an account to specify the users to which the policy will apply, then assign Application Control rules to the policy.

Editing an Application Control policy requires clicking on the policy name, then clicking the Rule tab.

• Enable policy—Enables or disables the individual policy; the global Application Control policy settings override the specifications of an individual policy.

• Application Category—Choose an action for the protocols to which you want to restrict access. There are over 420 protocols segmented in 32 logical groups.  Click on the "+" sign to expand a category and select specific protocols.

• Note: Use the search field to find a specific application on the Rules page. For more information about an application, click the name of the application to go to a separate page that contains information describing the supported applications, versions, and other details.

Use the following available filtering actions:

• Allow—User accounts can use the application normally. Application Control events are recorded if the administrator enables that setting. (See Application Control Settings for details.)

• Block—User accounts cannot use this application. The network packets identified as part of this application will not be delivered. Application Control events can be recorded if the settings is enabled. (See Application Control Settings for details.) A log entry can also be created for this event.

• Action During Work Time—Select the check box of the protocol to which you want to apply the filtering action during work time. To select all the protocols of a group, click the check box for the group. The group does not need to be expanded for you to select all protocols in a group. (Restricted days and hours are defined at Administration > IWSVA Configuration > Work/Leisure Time.) Click Apply to apply the filtering action to the selected protocols.  

• Action During Leisure Time—Select the check box of the protocol for which you want to apply the filtering action during leisure time. To select all the protocols of a group, click the check box for the group. The group does not need to be expanded for you to select all protocols in a group. Click Apply to apply the filtering action to the selected protocols.  

• Note: Unspecified times are considered "leisure" times.

• Notes—Use to create policy notes, for example, to summarize the intent or justification for the policy. It can serve as a simple reminder or as a communication to others who could later administer this feature.

• Click Finish at the end of the rules list to return to the policy list.

• In the policy list, click the check box by the appropriate policy name(s) and click Deploy Policies when you are ready for the policy/policies to be deployed.

See also:

• About Application Control

• Add Policies: Select Accounts

• Application Control Settings

• User Identification

• Work/Leisure Time