Frequently asked questions about Application Control

  • Article ID: 63656
  • Rating:
  • 1 customers rated this article 1.0 out of 6
  • Updated: 20 Dec 2013

Application Control is a Sophos security policy that can be used to control the use of unauthorized applications on your network.

Applies to the following Sophos product(s) and version(s)

Sophos Endpoint Security and Control

What sorts of Applications can be controlled?

Are there any applications that are blocked by default?

Sophos cannot create a default list of blocked applications, since there are many legitimate uses for applications that some companies may need. Furthermore, we can't advise you about which applications to block: the control of applications should form part of your IT policy.

Do you have any tips for implementing an Application Control policy on my network?

The Policy Setup Guide is an excellent resource for planning and rolling out your policies. Aside from that we can offer a few tips:

  • When you enable scheduled scanning for applications in the Application Control policy, you also have to set up an Anti-Virus and HIPS policy that includes a scheduled scan. You then have to apply both of these policies to the groups of computers that you would like to scan.
  • Similarly, when you enable on-access scanning for applications in the Application Control policy, you must also apply an Anti-Virus and HIPS policy that has on-access scanning enabled to the same group of computers.
  • Before deploying a new Application Control policy, explain to your users which applications will be controlled. This may help to reduce the initial impact on your company's IT support resources, when users find some applications are no longer available.
  • Different groups of users will need different policies. For example, staff who use the telephone a lot may need an instant messaging program, while other staff will not. Take this into account when planning your policies.
  • Deploy the application control policy across your network group by group. To make further policies, duplicate your original policy and edit it before assigning it to a group.

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent