Skip to content

Server: Application Control

Application control lets you detect and block applications that are not a security threat, but that you decide are unsuitable for use in the office.

We recommend that you detect the applications being used on your network and then decide which to block, as follows.

  1. In the Controlled Applications list, click Add/Edit List. This opens a dialog where you can see the categories of applications that you can control. Sophos supplies and updates the list.

  2. Select an application category, for example Browser plug-in. A full list of the applications in that category is displayed in the right-hand table.

  3. Choose how you want to control applications.

    • Find the applications you want to use and clear the checkbox next to them.
    • Click New applications added to this category by Sophos (optional). Any new applications that Sophos adds to this category later will automatically be added to your controlled list. Newer versions of applications already in your list will also be added.
  4. Click Save to List and repeat for each category you want to control.

    If you want to control an application that isn't in the list supplied by Sophos, you can ask to have it added. Click the "Application Control Request" link at the bottom of Application Control settings.

  5. In Detection Options:

    • Click Detect controlled applications when users access them.


      If you chose to control any new applications added by Sophos, this setting also applies to those new applications.

    • Click Detect controlled applications during scheduled and on-demand scans.

      Application control uses the scheduled scans and the scanning options (which file types are scanned) that you set in Threat Protection settings.

    The options you turn on in Detection Options apply to all the selected applications in your list.

    If you turn on Allow the detected application this applies to all of your selected applications. If you want to allow an application or an application category while blocking or detecting others, edit your list and clear the checkbox next to it.

  6. In Desktop Messaging you can add a message to the standard notification. If you leave the message box empty only the standard message is shown.

    Desktop Messaging is on by default.

    If you switch off Desktop Messaging you will not see any notification messages related to Application Control.

    1. Enter the text you want to add.