Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 1 reply
  • Subscribers 0 subscribers
  • Views 6550 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

E-Mail Alerts for Application Control...

JaysonScheuer

I have setup an Application Control policy that will allow all applications to run but monitor any "blocked" activity. I am trying to setup e-mail alerts; I am told on the policy page that e-mail alerts are controlled by the AV & HIP policy. I have e-mail alerts setup on my AV policy, but I still do not get Application Control alerts. Any ideas what I may be missing?



This thread was automatically locked due to age.
  • 0

    Hello JaysonScheuer,

    a cursory test suggests that the endpoint sends an email alert only when applications are actually blocked. As its name implies Application Control's goal is control, not monitoring or auditing and therefore it's arguably the right thing to alert only to attempted (or accidental) violations.

    Email alerting is primarily for events which warrant more or less immediate action - this is not the case with controlled applications (unless the perpetrators are given the cane on the spot :P ...). Indeed - what's your rationale for these alerts?

    Christian

Unfiltered HTML