Sophos Anti-Virus for Windows 2000+: overview of Application Control

Application Control enables network administrators to block certain legitimate consumer applications from running on workplace computers.

Typically, you would use Application Control to prevent users from running applications that are not a security threat, but that you decide are unsuitable for use in your workplace environment, e.g. games or instant messaging programs.

In accordance with your company policy on Application Control, you can authorize required applications, and block those which are not required.

Which Sophos products allow Application Control?

Sophos Anti-Virus for Windows 2000+, version 7 and above includes Application Control.

How do I deploy Application Control across my network?

Sophos recommends a phased deployment of Application Control across your network. This will allow you to

• assess the possible impact of application blocking on your system,
• reduce the likelihood of disruption to users,
• inform users of what impact Application Control policy may have on them. This may help to reduce the initial impact on your company's IT support resources, when users find some applications are no longer available.

For details of a planned rollout strategy, see Sophos Anti-Virus for Windows 2000+: application control rollout guidelines.

How do I obtain up-to-date protection?

Sophos provides advance notice of any new controlled application identities before they are added to the Sophos Anti-Virus + Application Control package. These identities are listed in:

• the Sophos controlled applications web pages
• Sophos latest controlled applications RSS feed, to which you can subscribe.

Sophos recommends that you:

• set up a routine procedure to follow each month, that will allow you to efficiently manage any new controlled applications.

Will Application Control automatically remove applications?

When Sophos Anti-Virus with Application Control detects a listed application, it allows you either to authorize or to block that application. You cannot use Sophos Anti-Virus to remove the application.

To remove an application you must temporarily disable on-access scanning for applications, then uninstall it in the standard way, using the uninstaller provided, or Windows add/remove programs in the Windows control panel.