This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Application Control Policy in Sophos Central

Hi I'm trying to setup an application control policy, I don't want to enbale it so it blocks all the ones in my list straight away, is there anyway I can setup to just monitor?

I have selected this but nothing monitors?

This thread was automatically locked due to age.

Parents

0 Sophos User930 over 3 years ago

Can you not just choose "Allow the detected application" for real-time?

That said, to discover them with a scheduled scan, the option you show should do just that but relies on the scheduled scans running which can be hard to do unless you schedule them for the middle of the day.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Sophos User930 over 3 years ago

Can you not just choose "Allow the detected application" for real-time?

That said, to discover them with a scheduled scan, the option you show should do just that but relies on the scheduled scans running which can be hard to do unless you schedule them for the middle of the day.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Dan Petford over 3 years ago in reply to Sophos User930

I tried that but nothing picked up, so I have to have scheduled scans for this to work? Where do I amend this, and does it only pick the applications during that time?

The idea is I want to scan what applications so I know what not to block, so I know what they use, I don't really want scheduled scans to run all day
Cancel
Vote Up 0 Vote Down

Cancel
0 RichardP over 3 years ago in reply to Dan Petford

Hi Dan,

Application Control was not built for this use case. The idea is to block the things you know you don't want your users doing.

What you want is the EDR Live Discover. You can query your machines for specific programs and generate a list that way.

RichardP

Program Manager, Support Readiness | CISSP | Sophos Technical Support
Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel