Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

How to use Agent Inventory to block an application from running in Endpoint Application Control (EAC) 2.0

    • Updated:
    • 20 Nov 2017
    • Product/Version:
    • Endpoint Application Control 2.0
    • Platform:
    • Windows All
Summary

Administrators may block installed software and existing applications that are included in agent's Inventory Database.

Details
Public

As an example, to block existing application PUTTY on an endpoint, perform the following steps:

  1. Log on to the EAC Web Management Console and go to Management > Rules page.
  2. Click +Add Rule and select Block.

    add block rule

  3. Provide a Rule name and expand the Blocked Applications.
  4. Change "Match using" to "Known appplication dynamic search".

    match using known

  5. Click Column and select Tags.

    select tags

  6. Type "Inventory" to display all the collected inventory from all AC Agents.

    Inventory

  7. Click AND to add a filter and choose Name to specify PUTTY as the application to block.

    filter putty

  8. Click Show Matches to display matched files of the application to block that are used by the endpoints and users. Use the Search box to type in the specific name of the user or endpoint that you want this rule to be applied to.

    show matches

  9. Expand the "Resolved conflicts" tab and change the Conflict Resolution to "Block this file" for all PUTTY-related reference applications.

    resolved conflicts

  10. Click Save to finish.
  11. Assign the newly created rule to all applicable policies where you want PUTTY to be blocked.
For more information about how to create or edit a policy, please refer to the Endpoint Application Control Online Help.
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1118810
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.