Endpoint: Application Control

Application control lets you detect and block applications that are not a security threat, but that you decide are unsuitable for use in the office.

We recommend that you detect the applications being used on your network and then decide which to block, as follows.

  1. In the Controlled Applications list, click Add/Edit List.
    This opens a dialog where you can see the categories of applications that you can control. Sophos supplies and updates the list.
  2. Select an application category, for example Browser plug-in.
    A full list of the applications in that category is displayed in the right-hand table.
  3. We recommend that you select Select all applications. You'll refine your selection later.
  4. Click Save to List and repeat for each category you want to control.

    If you want to control an application that isn't in the list supplied by Sophos, you can ask to have it added. Click the "Application Control Request" link at the bottom of Application Control settings.

  5. In Detection Options:
    • Click Detect controlled applications when users access them (You will be notified).
    • Click Block the detected application.

      If you chose to control any new applications added by Sophos, those new applications will now be blocked.

  6. In Desktop Messaging you can add a message to the standard notification. If you leave the message box empty only the standard message is shown.

    Desktop Messaging is on by default. If you switch off Desktop Messaging you will not see any notification messages related to Application Control.

    1. Enter the text you want to add.