Sophos Central - Application Policy

Question

Hi, 
 
 I'm looking at implementing the above policy, I have set the base policy to Detect controlled applications during scheduled and on-demand scans so I can see what applications are there. 
 
 When detected are these ones that are on User's or ones that have been accessed? 
 Is it best to switch on Detect controlled applications when users access them (You will be notified) and Allow the detected application, does this allow all even if ticked or not? 
 Are the ticks only if set to block?

Shweta · Answer

Hi Dan Petford 
 Application control uses the scheduled scans and the scanning options (which file types are scanned) that you set in Threat Protection settings when you have selected "Detect controlled applications during scheduled and on-demand scans". 
 If you choose Detect controlled applications when users access them and select block applicationns, any new applications added by Sophos, those new applications will now be blocked.