Synchronized Application Control

Synchronized Application Control monitors all applications on endpoints connected through Security Heartbeat. Detected applications are displayed here. You can see newly detected applications, hide known applications, sort applications into categories, and control their traffic through application filters. Synchronized Application Control supports up to 10,000 apps.

Note When using Synchronized Application Control for the first time, you must turn it on from Central synchronization.

Application categories and labels

XG Firewall comes with a default set of categories that includes the most common applications. When XG Firewall detects a known application, it categorizes the application accordingly. Detected unknown applications get the category SyncAppCtl discovered or General internet. You can rename and customize those applications. Assign applications to application filters to control their traffic.

If XG Firewall detects more than one instance of an application, you can see all locations of the application on all the endpoints where it was detected by expanding the application view ().

Applications have the following labels, which you can see in the Manage column:
  • New: Newly-detected applications unknown to Sophos XG Firewall.
  • Mapped: Detected applications that have been mapped automatically to an application category.
  • Customized: Applications that have been mapped manually.

Managing applications

Acknowledge new applications to indicate that you’ve noticed them and don’t want to change their attributes. This is useful for applications you don’t want to customize and which still should no longer show up as New. Their new label will also be Customized.
Customizing an application means you can change the application name and its category. Afterwards, the application’s label will be Customized. You can always change these attributes. To customize an application, click the more options button () in the Manage column and select Customize.
Hide applications you already know or you don’t need to see anymore. They will then be displayed only when you select Hidden applications. From there you can display them again on other views by clicking Show.
Deleting applications will also remove them from application filters. When XG Firewall detects a deleted application again on an endpoint, the application will reappear on the application list.

Searching for applications

You can search for applications by the application name, path, and category as well as the endpoints. To control the scope of search, select an option from the list (example: System applications).