Sophos Anti-Virus for Windows 2000+: overview of Application Control
Application Control enables network administrators to block certain legitimate consumer applications from running on workplace computers.
Typically, you would use Application Control to prevent users from running applications that are not a security threat, but that you decide are unsuitable for use in your workplace environment, e.g. games or instant messaging programs.
In accordance with your company policy on Application Control, you can authorize required applications, and block those which are not required.
Which Sophos products allow Application Control?
Sophos Anti-Virus for Windows 2000+, version 7 and above includes Application Control.
How do I configure my computers for Application Control?
Application Control is now enabled as a separate application control policy.
If you are using a version of Sophos Anti-Virus earlier than version 7, you will need to upgrade.
- Upgrading from a version of Sophos
Anti-Virus without Application Control. - Upgrading from version 6.x with Application Control.
How do I deploy Application Control across my network?
Sophos recommends a phased deployment of Application Control across your network. This will allow you to
- assess the possible impact of application blocking on your system,
- reduce the likelihood of disruption to users,
- inform users of what impact Application Control policy may have on them. This may help to reduce the initial impact on your company's IT support resources, when users find some applications are no longer available.
For details of a planned rollout strategy, see Sophos Anti-Virus for Windows 2000+: application control rollout guidelines.
How do I obtain up-to-date protection?
Sophos provides advance notice of any new controlled application identities before they are added to the Sophos
- the Sophos controlled applications web pages
- Sophos latest controlled applications RSS feed, to which you can subscribe.
Sophos recommends that you:
- set up a routine procedure to follow each month, that will allow you to efficiently manage any new controlled applications.
Will Application Control automatically remove applications?
When Sophos
To remove an application you must temporarily disable on-access scanning for applications, then uninstall it in the standard way, using the uninstaller provided, or Windows add/remove programs in the Windows control panel.
If you need more information or guidance, then please contact technical support.
- Article ID: 17142
- Created: 23 Aug 2006
- Last updated: 9 Oct 2008
