topic Re: Application Control Question in Endpoint

Application Control Question

tom_allen — Thu, 08 Jul 2021 15:55:11 GMT

Hello, I have a question about application control. Our server is 80.40 and most of our clients are 84.30 and above. In smartendpoint I looked at the default application block list and see the "Steam.exe" is blacklisted. I then look on a client PC and see the Application control is enabled and has the correct version. So I tested it and it does not seem to work. I was able to download and install "Steam" and log into the program. What am I missing?

Thanks!

Re: Application Control Question

the_rock — Thu, 08 Jul 2021 15:59:28 GMT

Do you have that application blocked in the security rule itself?

Re: Application Control Question

the_rock — Thu, 08 Jul 2021 16:09:14 GMT

Never mind, disregard my first comment, I was more thinking of regular mgmt server, not endpoint side, sorry.

Re: Application Control Question

tom_allen — Thu, 08 Jul 2021 16:11:03 GMT

Not sure I know what you mean? In smartendpoint I go to "policies" and then Application control and then Manage Block Application List" and in that list is Steam.exe

Re: Application Control Question

PhoneBoy — Thu, 08 Jul 2021 16:11:45 GMT

Screenshots of how you blacklisted it might be useful.

Re: Application Control Question

tom_allen — Thu, 08 Jul 2021 16:12:37 GMT

Just uploaded the screenshot

Re: Application Control Question

the_rock — Thu, 08 Jul 2021 16:13:55 GMT

Yes, I just saw the same thing in demo endpoint server. I am not really endpoint guy myself, so maybe someone else can give you more help here, but I am pretty sure that is correct, as by default, it appears 28 applications would be blacklisted and steam is one of them.

Re: Application Control Question

the_rock — Thu, 08 Jul 2021 17:23:46 GMT

Hey Tom,

I actually spoke to a colleague of mine who is more familiar with endpoint and he suggested one thing you could try is create a test rule in policy with any given application and see if that app gets blocked or not, because if not, then it might be worth engaging TAC to have a look at this.

Re: Application Control Question

tom_allen — Fri, 09 Jul 2021 14:07:58 GMT

Thanks, I did create a test rule but it does or in this case does not block anything.

Re: Application Control Question

the_rock — Fri, 09 Jul 2021 14:14:44 GMT

In that case, I really have no other suggestions, sorry...unless someone else can help, I would advise to check with TAC.