Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 3 subscribers
  • Views 2943 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Forewarning of additions and modifying of Application Control Lists

Stephen Joyce

It would be nice to have a warning of the changes to the Application Control Lists that are updated in EndPoint, so we can turn off "Any Applications Added" for categories that are due to add an application we use, and then make the change once the update occurs, and re-add "Any Application Added".

We had Microsoft Teams blocked this morning, and had zero warning that this was going to occur.

I know other vendors publish this information.



This thread was automatically locked due to age.
  • +1

    Hello Stephen Joyce,

    turn off [...] and re-add "Any Application Added"
    err, excuse me, maybe I'm dense but do I understand correctly that you don't want the applications to be added automatically? Why (re-)add Any Application Added if you want to turn  it off when new applications are about to be added? As you don't make use of this "generic" entry why ever add it?

    Anyway, Lab's Controlled Applications page contains a Live Bookmark/RSS URL (more feeds are on the RSS Feeds page) - maybe this is what you are looking for.

    Christian

  • 0 in reply to QC

    Generally, yes, add the applications automatically, but publish what will be added, just in case there is an application added that is what you want to use.

    The example is Microsoft Teams: it was categorised as "Instant Messenger", however it is used within our organisation for productivity and collaboration, as well as IM. We had some people unable to use it as it was automatically blocked after an update.

    Turning off the option, will stop an application that you want to allow being blocked until it makes it into the portal to control.

    That RSS page is what I am after, however, I did try and find this on the Sophos Support site, and could not find it.

     

    Here is a great flowchart to understand my issues in case you are dense:

    [Teams is added as IM in RSS] --> [I read about this - oh no, we don't want that blocked!] --> [Turn off "Auto Add"] --> [Sophos applies App in IM] --> [Modify settings in IM Policy to allow Teams, and re-apply "Auto Add"] --> [Done]

    Another flowchart:

    [DodgyBrowser is added to Browsers in RSS] --> [I read about this - want that blocked] --> [Sophos applies App in Browsers] --> [App is blocked, done]

  • 0 in reply to Stephen Joyce

    Hello Stephen Joyce,

    in case you are dense
    [:D] thanks.

    I did try [...] and could not find it
    I've been there. I don't really make use of the feeds, I just stumbled across the page a long time ago so I reckoned  RSS Feeds would be a good search term. Please note that I can't affirm that the information is complete and most notably timely enough - the latest additions came with VDL 5.54 which as far as I can see has been issued on the very same day as the feed items.

    Christian 

Unfiltered HTML